Lucene search
+L

3795 matches found

BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.8 views

The vulnerability of the Unbound DNS server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.2AI score0.0133EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.8 views

The vulnerability of the GJSON library in Aurora Application Software, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the GJSON library used in Avora software applications is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending a specially crafted JSON request...

7.5CVSS7.2AI score0.0182EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.9 views

The vulnerability of the ua-parser-js library in the Avrora Application Software, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the ua-parser-js library in Avrora Application Software, related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.5CVSS7.3AI score0.04483EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.10 views

The vulnerability of the Apache Thrift application programming library at Aurora Center, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Thrift application programming interface at Aurora Center is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a large number of short messages...

7.5CVSS6.6AI score0.06779EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2021/06/08 1:15 p.m.55 views

CVE-2021-22212

ntpkeygen can generate keys that ntpd fails to parse. NTPsec 1.2.0 allows ntpkeygen to generate keys with '' characters. ntpd then either pads, shortens the key, or fails to load these keys entirely, depending on the key type and the placement of the ''. This results in the administrator not bein...

7.4CVSS0.00522EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/06/01 12:0 a.m.9 views

The vulnerability of the Squid proxy server arises from insufficient input validation when processing HTTP responses, allowing attackers to induce service failures.

The vulnerability of the Squid proxy server exists due to insufficient input validation during the processing of HTTP responses. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

7.8CVSS6.8AI score0.71867EPSS
SaveExploits0References8Affected Software4
Citrix
Citrix
added 2021/05/25 12:0 a.m.10 views

SDWAN doesn't support "MSS Clamping" in PPPoE Internet Service (Before version 11.3.1), that causes some external web pages can't be loaded

When users access internet web servers through SDWAN Internet Service. Meanwhile, the Internet Service is a PPPoE Link.The internet access may fail when load some pages...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/05/25 12:0 a.m.8 views

The vulnerability of the MtcSetDataItem function in the embedded web server, related to insufficient validation of input data, allows attackers to escalate their privileges and cause service failures.

The vulnerability of the MtcSetDataItem function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and cause service failures using a specially crafted package...

7.8CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:0 a.m.10 views

The vulnerability of the “forward first” DNS server mode in Bind9, which allows a attacker to cause a service failure.

The “forward first” mode of the Bind9 DNS server has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures...

7.5CVSS6.7AI score0.02968EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:0 a.m.10 views

The vulnerability of the libuv library for DNS-servers like Bind9, which allows a hacker to cause a service failure.

The vulnerability of the libuv library for DNS-servers like Bind9 is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.7AI score0.03693EPSS
SaveExploits0References9Affected Software2
OSV
OSV
added 2021/05/23 6:45 p.m.8 views

MGASA-2021-0220 Updated bind packages fix security vulnerabilities

A broken inbound incremental zone update IXFR can cause named to terminate unexpectedlyCVE-2021-25214. Mageia 7 version not affected. An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself CVE-2021-25215. This affects both...

9.8CVSS7.2AI score0.82367EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.8 views

The vulnerability of the vDaemon process in the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure.

The vulnerability of the vDaemon process in Cisco SD-WAN is due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.01519EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2021/05/17 12:0 a.m.14 views

PT-2024-11154 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.13.0-rc1+ Description: The vulnerability is related to RDMA/rxe, where an invalid lkey is supplied, causing a kernel panic when an atomic operation is sent with an explicitly wrong lkey. The issue arises from the missin...

9.8CVSS6.8AI score0.06846EPSS
SaveExploits17References824
BDU FSTEC
BDU FSTEC
added 2021/05/12 12:0 a.m.9 views

The vulnerability of the Kernel component of the Oracle Solaris operating system allows a perpetrator to trigger a service failure or gain access to modify, add, or delete data.

The vulnerability of the Kernel component in Oracle Solaris operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain access to modify, add, or delete data...

6.1CVSS6.8AI score0.0026EPSS
SaveExploits0References4Affected Software1
Code423n4
Code423n4
added 2021/05/11 12:0 a.m.16 views

Use safeTransfer/safeTransferFrom consistently instead of transfer/transferFrom

Handle 0xRajeev Vulnerability details Impact It is good to add a require statement that checks the return value of token transfers or to use something like OpenZeppelin’s safeTransfer/safeTransferFrom unless one is sure the given token reverts in case of a failure. Failure to do so will cause...

6.9AI score
SaveExploits0
CNVD
CNVD
added 2021/04/28 12:0 a.m.45 views

GPAC Integer Overflow Vulnerability (CNVD-2022-04965)

GPAC is an open source multimedia framework. GPAC 1.0.1 is vulnerable to integer overflow, which can be exploited by attackers to cause assignment failures...

7.8CVSS6AI score0.00984EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.8 views

The vulnerability of the Macro Analysis module in the ClamAV antivirus software package allows a hacker to trigger a service failure.

The vulnerability of the Excel XLM module in the ClamAV antivirus software package exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.4AI score0.02619EPSS
SaveExploits0References8Affected Software14
BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.7 views

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server packages lies in insufficient input data validation, which allows attackers to trigger service failures.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

5CVSS5.7AI score0.02395EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/04/23 12:0 a.m.7 views

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DNS service in Microsoft Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.8CVSS5.6AI score0.06599EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.7 views

The vulnerability of the Application Compatibility Cache component in Microsoft Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Application Compatibility Cache component “AppCompatCache” in Microsoft Windows systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.02519EPSS
SaveExploits0References2
Rows per page
Query Builder