Lucene search
+L

3838 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.10 views

The vulnerability of the OTP component in the Erlang programming language allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OTP component in the Erlang programming language is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.7AI score0.01211EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.10 views

The vulnerability of the Perl programming language library HTTP::Tiny involves authentication process errors, which allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Perl programming language library HTTP::Tiny is related to errors in the TLS certificate authentication process. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.1CVSS6.9AI score0.01742EPSS
SaveExploits0References20Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.15 views

The vulnerability of the Runc command-line tool for isolated containers arises from incorrect handling of symbolic links before accessing the file. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Runc container launch tool is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.8AI score0.00343EPSS
SaveExploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.7 views

The vulnerability of the Ruby programming language’s URI component lies in the use of a regular expression c, which has an inefficient computational cost. This allows attackers to trigger a service failure.

The vulnerability of the Ruby programming language’s URI component is related to the incorrect handling of invalid URL addresses. Exploiting this vulnerability allows a remote attacker to cause service failures...

5.3CVSS6.7AI score0.02637EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.8 views

The vulnerability in the `libcontainer/rootfs_linux.go` component of the Runc tool for running isolated containers allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libcontainer/rootfslinux.go component, a tool for running isolated containers in Runc, is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...

7CVSS6.4AI score0.00444EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.8 views

The vulnerability of the Runc command-line tool for running isolated containers, related to improper storage of permissions, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Runc container launch tool is related to improper storage of permissions. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

6.3CVSS6.8AI score0.00319EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.7 views

The vulnerability in the Firefox web browser relates to the insufficient elimination of certain elements in the request, which allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Firefox web browser is related to insufficient elimination of certain elements in the request. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.8AI score0.00664EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.9 views

The vulnerability of the `systemctl status` command for the Systemd service initialization and management subsystem allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the systemctl status command for the Systemd service initialization and management subsystem is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

7.8CVSS6.5AI score0.01051EPSS
SaveExploits4References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.10 views

The vulnerability of the axodraw2 component in the TeX Live typesetting system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the axodraw2 component in the TeX Live typesetting system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS7.8AI score0.01875EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.14 views

The vulnerability of the Protobuf field analysis component allows a attacker to cause a service failure.

The vulnerability of the Protobuf serialization protocol field analysis component is related to performing actions in the wrong order. Exploiting this vulnerability allows a remote attacker to cause service failures...

7.8CVSS6.6AI score0.01655EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.10 views

The vulnerability of the Protobuf serialization protocol’s text analysis component, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Protobuf serialization protocol’s text analysis component is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service failures...

7.8CVSS6.6AI score0.00567EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.19 views

The vulnerability of the Avahi service detection system in local networks, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Avahi service detection system in local networks is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a perpetrator to cause service failures...

5.5CVSS6.2AI score0.00383EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.11 views

The vulnerability of the microprogramming software of the PHOENIX CONTACT FL/TC MGUARD family allows a attacker to cause a service failure.

The vulnerability of the microprogrammed software of the PHOENIX CONTACT FL/TC MGUARD family is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

5.8CVSS5.9AI score0.0062EPSS
SaveExploits0References3Affected Software26
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.9 views

The vulnerability of the ezxml_new function in the XML document syntax analysis library ezXML allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the ezxmlnew function in the XML document syntax analysis library ezXML is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

9.4CVSS7.8AI score0.01178EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.5 views

The vulnerability of the OpenSSH cryptographic protection mechanism lies in the insecure management of privileges. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenSSH cryptographic protection mechanism is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.1AI score0.02545EPSS
SaveExploits2References15Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.13 views

The vulnerability of the Python programming language interpreter, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of the Python programming language interpreter is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service failures...

7.8CVSS6.8AI score0.02433EPSS
SaveExploits1References21Affected Software6
Tenable Nessus
Tenable Nessus
added 2023/07/18 12:0 a.m.28 views

EulerOS 2.0 SP10 : cloud-init (EulerOS-SA-2023-2375)

According to the versions of the cloud-init package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sensitive data could be exposed in world readable logs of cloud-init before version 22.3 when schema failures are reported. This leak could...

5.5CVSS5.7AI score0.00236EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.10 views

The vulnerability of the httpClose function in the CUPS printing server allows a attacker to cause a service failure.

The vulnerability of the httpClose function in a CUPS printing server lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service failures...

7.1CVSS6.5AI score0.01383EPSS
SaveExploits1References21Affected Software13
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.7 views

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS6.9AI score0.0163EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.8 views

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS7.3AI score0.01631EPSS
SaveExploits0References3
Rows per page
Query Builder