Lucene search
+L

8078 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.18 views

The vulnerability of Google Chrome, related to the execution of operations beyond memory boundaries, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.9AI score0.01011EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.7 views

The vulnerability of the Linux operating system, related to an error in determining network connections for VPNs, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Linux operating system is related to an error in determining network connections for VPNs. Exploiting this vulnerability allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions...

7.4CVSS7.5AI score0.00838EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.16 views

The vulnerability of Google Chrome, related to insufficient filtering in the URL string, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome is related to insufficient filtering in the URL string. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.4AI score0.00906EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.21 views

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome relates to the use of memory after it is freed in media operations. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially created HTML page...

9.3CVSS7.5AI score0.00914EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.10 views

The vulnerability of the .charkeys procedure in the PostScript/PDF Ghostscript interpreter allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the .charkeys procedure in the PostScript/PDF Ghostscript interpreter is related to a security protection flaw that allows scripts to bypass the "-dSAFER" restriction. Exploiting this vulnerability can enable an attacker operating remotely to gain access to confidential data,...

9.3CVSS7.2AI score0.03434EPSS
SaveExploits0References16Affected Software7
Prion
Prion
added 2020/04/22 3:15 p.m.22 views

Design/Logic Flaw

Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction...

4.6CVSS7.2AI score0.00297EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2020/04/22 3:15 p.m.4 views

CVE-2020-8474

Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction...

7.8CVSS7.4AI score0.00297EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.7 views

The vulnerability in the Git version control system’s component that handles NTFS Alternate Data Streams allows a attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Git version control system’s NTFS Alternate Data Streams handling component is related to a lack of input validation mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

9.3CVSS7.4AI score0.24014EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.8 views

The vulnerability of the `exif_read_data` function in the PHP programming language involves an operation that goes beyond the permissible buffer size limits. This allows attackers to gain unauthorized access to information or cause service failures.

The vulnerability of the exifreaddata function in the PHP programming language is related to the execution of operations that exceed the permissible buffer limits. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information or cause service failures...

9.3CVSS6.3AI score0.0442EPSS
SaveExploits1References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability of BIG-IP’s access control and remote authentication mechanisms, related to errors in processing input data, allows attackers to trigger service interruptions.

The vulnerability of the BIG-IP access control and remote authentication mechanism is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.01044EPSS
SaveExploits0References4Affected Software13
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.8 views

The vulnerability of the recursive cloning component of the distributed Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the recursive cloning component of the distributed version control system Git is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and...

9.3CVSS7.4AI score0.34007EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.11 views

The vulnerability of Google Chrome’s web browser storage, related to the lack of input validation mechanisms, allows attackers to access confidential information, cause service interruptions, and affect the accessibility of information.

The vulnerability of Google Chrome’s web browser storage mechanism is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to access confidential information, cause service failures, and affect the accessibility of information through a...

9.3CVSS7AI score0.00796EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.8 views

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome relates to the use of memory after deallocation in multimedia applications. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.6CVSS7.4AI score0.01443EPSS
SaveExploits0References9Affected Software4
CNVD
CNVD
added 2020/04/22 12:00 a.m.5 views

Memory corruption vulnerability in XnView Classic jpm files

XnView Classic is an image viewing software. A memory corruption vulnerability exists in the XnView Classic jpm file. An attacker can exploit the vulnerability to execute malicious code on a user's system or cause the program to perform a denial of service...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.9 views

The vulnerability affects the security component of the WSL subsystem of the distributed Git version control system. It allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the security component of the WSL subsystem of the distributed Git version control system is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential data, cause service...

10CVSS7.4AI score0.02244EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.6 views

The vulnerability of the exif_process_IFDTagName function in the PHP programming language involves an operation that goes beyond the permissible buffer size limits. This allows attackers to gain unauthorized access to information or cause service failures.

The vulnerability of the exifprocessIFDTagName function in the PHP programming language is related to the execution of an operation that exceeds the permissible buffer data limits. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information or cause servic...

10CVSS7.2AI score0.07031EPSS
SaveExploits0References17Affected Software6
OpenVAS
OpenVAS
added 2020/04/20 12:00 a.m.49 views

Huawei EulerOS: Security Advisory for subversion (EulerOS-SA-2020-1513)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.0344EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2020/04/17 3:31 a.m.4 views

CVE-2020-11868

ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address, because transmissions are rescheduled even when a packet lacks a valid origin timestamp...

5.9CVSS7.5AI score0.02081EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:00 a.m.10 views

The vulnerability of the _ctl_ioctl_main function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ctlioctlmain function drivers/scsi/mpt3sas/mpt3sasctl.c in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7.1AI score0.00406EPSS
SaveExploits0References20Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.16 views

The vulnerability of the Monit process management and monitoring tool relates to the lack of measures taken to protect the structure of web pages, allowing attackers to trigger a service failure.

The vulnerability of the Monit process management and monitoring tool is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.1CVSS6.1AI score0.02414EPSS
SaveExploits1References8Affected Software4
Rows per page
Query Builder