Lucene search
+L

3794 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.9 views

The vulnerability of the Samba network interaction software package from AD DC arises from insufficient input data validation, allowing attackers to trigger service failures.

The vulnerability of the Samba network interaction software suite in AD DC is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.03539EPSS
SaveExploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.9 views

The vulnerability of the DCHP server configuration of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices allows a hacker to cause a service failure.

The vulnerability of the DCHP configuration of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 networking devices relates to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to trigger...

7.1CVSS7.1AI score0.00604EPSS
SaveExploits0References4Affected Software2
OpenVAS
OpenVAS
added 2021/03/27 12:0 a.m.31 views

Fedora: Security Advisory for busybox (FEDORA-2021-e82915eee1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.02719EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/25 7:15 p.m.4 views

ALPINE-CVE-2021-20214

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash...

7.5CVSS6.5AI score0.02024EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/25 7:15 p.m.1 views

DEBIAN-CVE-2021-20214

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash...

7.5CVSS7.2AI score0.02024EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the Google Chrome browser’s media component relates to the use of memory after it is freed. This allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s media component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.29292EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.7 views

Vulnerability of the utils.c:checkmailpath command in the UNIX shell Zsh: This vulnerability involves allowing an operation to exceed the permissible data buffer size. This allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the utils.c:checkmailpath command of the UNIX shell Zsh involves allowing the execution of commands beyond the data buffer’s allowed limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.7AI score0.00544EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the readValue method in the ObjectMapper class of the Jackson-databind library arises from the possibility of restoring unreliable data structures in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the readValue method in the ObjectMapper class of the Jackson-databind library is related to improper validation of the data before it is deserialized. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

9.8CVSS7AI score0.37721EPSS
SaveExploits7References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Blink rendering module is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.7AI score0.01488EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.6 views

The vulnerability of the SMB1 protocol implementation in Samba network communication software lies in the use of memory after it is freed. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMB1 protocol implementation in Samba networking software lies in the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7AI score0.09876EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of Google Chrome’s IndexedDB component allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.29292EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability in the implementation of the WebUSB protocol of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebUSB protocol implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.7AI score0.22868EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability in the implementation of the Google Chrome browser’s external protocol allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s external browser protocol is related to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.8AI score0.01632EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the KVM virtualization subsystem in the file arch/arm64/kvm/guest.c of the Linux operating system allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the KVM virtualization subsystem in the Linux operating system’s arch/arm64/kvm/guest.c file is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data and also cause service failures...

7.1CVSS7.1AI score0.0057EPSS
SaveExploits0References33Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the _krb5_extract_ticket() function in the Samba networking software package arises from a lack of authentication mechanism checks. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the krb5extractticket function in the Samba networking software package is related to the lack of a mechanism for verifying the authenticity of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

8.1CVSS6.7AI score0.05118EPSS
SaveExploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the setuid function in the UNIX command shell Zsh allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the setuid function in the UNIX command shell Zsh is related to incorrect reallocation of the user ID. Exploitation of this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.00495EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS7.6AI score0.01952EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the Gem Name Handler component in the Bundler’s dependency management tool for Ruby applications relates to a lack of mechanisms for managing code generation. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gem Name Handler component in the Bundler dependency management tool for Ruby applications relates to improper handling of gems with identical names. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause...

9.8CVSS7.7AI score0.08482EPSS
SaveExploits1References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the WebRTC technology implemented in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause...

6.8CVSS7.9AI score0.01913EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the Zsh shell script interpreter on UNIX systems arises from the lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Shebang handler in the UNIX command shell Zsh is related to the shortening of the Shebang line that exceeds 64 characters. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.8CVSS6.9AI score0.02723EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder