Lucene search
+L

3795 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.10 views

The vulnerability of the Ceph storage system, related to pointer swapping errors, allows a attacker to cause a service failure.

The vulnerability of the Ceph storage system is related to errors during the POST request with an invalid XML tag. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.02654EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.13 views

The vulnerability of the Network Internals component of the Google Chrome browser, related to the use of memory after it is freed, allows attackers to access confidential information or cause service failures.

The vulnerability of the Network Internals component in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...

8.8CVSS7.6AI score0.01414EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.8 views

The vulnerability of the ZeroMQ messaging library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the ZeroMQ messaging library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS7.1AI score0.01073EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.13 views

The vulnerability of the PDFium component in Google Chrome browsers, related to the use of an uninitialized resource, allows attackers to access confidential information or cause service failures.

The vulnerability of the PDFium component in the Google Chrome browser is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information or cause service failures...

8.8CVSS7.6AI score0.01501EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:0 a.m.24 views

The vulnerability of several functions in libscp_v0.c allows an attacker to access confidential information or cause service failures, due to buffer overflows in the stack of the RDP server xrdp.

The vulnerability of several functions in libscpv0.c affects the RDP server xrdp. It involves buffer overflow in the data stack buffer. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

7.8CVSS7.5AI score0.02404EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist
added 2021/07/13 8:55 p.m.29 views

CVE-2021-32755 Certificate pinning is not enforced on the web socket connection

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...

5.4CVSS5.7AI score0.00314EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.8 views

The vulnerability of the re-hashing function for utility functions in E2fsprogs, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the re-hashing function in the E2fsprogs utility library for working with file systems lies in the fact that the operation exceeds the permissible buffer data size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and...

6.7CVSS7.1AI score0.01025EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.6 views

The vulnerability of many components of the JSON processing library in C# relates to writing beyond buffer boundaries. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of many components of the JSON file processing library in C is related to the operation that goes beyond the allowable buffer size limits. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7AI score0.01888EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.13 views

The vulnerability of the Ffmpeg multimedia library, related to pointer manipulation errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Ffmpeg multimedia library is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

9.8CVSS6.7AI score0.02012EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.9 views

Vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol (LLDP) implementations in Cisco Video Surveillance IP cameras of the 7000 series; device reboot or service failure

The vulnerability of the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP implemented in Cisco Video Surveillance devices of the 7000 series is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause slow memory leaks, device...

6.5CVSS6.6AI score0.00381EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.12 views

The vulnerability of Huawei’s microprogram code in software-hardware devices, related to memory leaks, allows attackers to trigger service failures.

The vulnerability of Huawei’s microprogramming code in software and hardware devices is related to memory leaks. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.8CVSS5.6AI score0.00588EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.12 views

The vulnerability of the toColor(eval(arg)) function in the ReportLab library, related to the implementation of XML (blind xPath injection), allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the toColorevalarg function in the ReportLab library is related to an XML document processing error. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.8AI score0.10231EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.10 views

The vulnerability of QEMU’s emulation software lies in its ability to write beyond the buffer boundaries, allowing attackers to compromise data integrity and cause service failures.

The vulnerability of QEMU’s emulation software-related hardware lies in the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability allows an attacker to compromise data integrity and cause system failures...

3.9CVSS7AI score0.0037EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.10 views

The vulnerability of QEMU’s emulation software lies in its ability to read data beyond the allowed buffer limits, allowing an attacker to trigger a service failure.

The vulnerability of QEMU’s emulation software-related hardware lies in reading data from buffers beyond acceptable limits. Exploiting this vulnerability allows an attacker to cause system failures...

3.2CVSS6.6AI score0.00377EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/08 12:0 a.m.5 views

The vulnerability of the OpenJPEG library for image encoding and decoding lies in the fact that the output of the operation is limited to a buffer size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

8.8CVSS7.4AI score0.01107EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/08 12:0 a.m.8 views

The vulnerability of the raptor_xml_writer_start_element_common component in the Raptor library, related to writing beyond buffer boundaries, allows attackers to compromise data integrity or cause service failures.

The vulnerability of the raptorxmlwriterstartelementcommon component in the Raptor library is related to an incorrect definition of the maximum number of announcements allowed. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...

8.5CVSS7.1AI score0.03117EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/08 12:0 a.m.7 views

The vulnerability of the storeSSE function in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, allows attackers to access confidential information or cause service failures.

Vulnerability of the storeSSE function in software for storing images with wide dynamic range brightness in OpenEXR format. Exploitation of this vulnerability allows a remote attacker to access confidential information or cause service failures...

8.8CVSS7.6AI score0.03166EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.7 views

The vulnerability of the RTAS kernel component in the Linux operating system relates to the absence of a mechanism for authentication. This lack allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the RTAS component of the Linux operating system is related to improper handling of memory access. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.2CVSS6.4AI score0.00501EPSS
SaveExploits1References25Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.10 views

The vulnerability of the software for setting the time in the fly-admin-date operating system, related to lack of access control, allows a intruder to cause a service failure.

The vulnerability of the software for setting the time in the fly-admin-date operating system is related to lack of access control. Exploiting this vulnerability allows a perpetrator to cause service failures...

4CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.6 views

The vulnerability of the astra-safepolicy software for security configuration involves insufficient data processing within the security mechanisms, allowing attackers to trigger a service failure.

The vulnerability of the astra-safepolicy security configuration software is related to incorrect data processing in the /etc/fstab file. Exploiting this vulnerability allows an attacker to cause service failures...

6.2CVSS5.5AI score
SaveExploits0References1
Rows per page
Query Builder