Lucene search
+L

3794 matches found

BDU FSTEC
BDU FSTEC
added 2020/12/30 12:0 a.m.6 views

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. This allows a perpetrator to gain access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the software for deploying and using the SNMP protocol Net-SNMP is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to gain access to protected information, compromise its integrity, and cause service failures...

7.2CVSS6.7AI score0.00382EPSS
SaveExploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/12/28 12:0 a.m.4 views

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to insufficient input validation, allowing attackers to trigger service failures.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

7.8CVSS7.5AI score0.02598EPSS
SaveExploits0References13Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/12/23 12:0 a.m.11 views

The vulnerability of the xgmac_enet_send function in the hw/net/xgmac.c file of the QEMU hardware emulation software arises from a lack of mechanism for checking the size of copied data. This allows a malicious actor to gain access to protected information, compromise its integrity, and cause service failures.

The vulnerability of the xgmacenetsend function in the hw/net/xgmac.c file of the QEMU hardware emulation software is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability can allow an attacker to access protected information, compromise its...

4.9CVSS6.6AI score0.00454EPSS
SaveExploits0References13Affected Software4
Debian
Debian
added 2020/12/22 8:38 a.m.47 views

[SECURITY] [DLA 2412-2] openjdk-8 regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2412-2 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort December 22, 2020 https://wiki.debian.org/LTS -...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.8 views

The vulnerability of the Kernel Routing Table module in the Junos operating system, which allows a hacker to cause a service failure

The vulnerability of the Kernel Routing Table module in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.0124EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.9 views

The vulnerability of the KMS implementation in the Junos operating system allows a attacker to cause failures in the configuration of IPSec channels and service disconnection.

The vulnerability of the Junos operating system’s Key Management Service implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause failures in IPSec channel configurations and service availability...

7.8CVSS7.4AI score0.01288EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.6 views

The vulnerability of the Node.js software platform is related to an error in handling HTTP headers, which allows attackers to trigger a service failure.

The vulnerability of the Node.js software platform is related to an error in handling HTTP header names. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.5CVSS6.5AI score0.08794EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.5 views

The vulnerability of the Twisted Web network framework’s component, allowing a hacker to cause a service failure

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS7.3AI score0.03289EPSS
SaveExploits1References15Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.6 views

The vulnerability of the initialization and service management subsystem in Linux’s systemd lies in the fact that resources are not released after their useful period has ended. This allows a malicious actor to trigger a service failure.

The vulnerability of the initialization and service management subsystems in Linux’s systemd relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...

2.4CVSS6.5AI score0.00429EPSS
SaveExploits0References9Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:0 a.m.9 views

The vulnerability of the urllib3 module in the Python programming language, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the urllib3 module in the Python programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.2AI score0.03371EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.5 views

The vulnerability of the Twisted Web network framework’s component, allowing a hacker to cause a service failure

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS7.4AI score0.03973EPSS
SaveExploits1References15Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:0 a.m.11 views

The vulnerability of the ImageBurner browser component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the ImageBurner browser component in Google Chrome arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.9AI score0.00625EPSS
SaveExploits0References10Affected Software6
Microsoft CVE
Microsoft CVE
added 2020/12/08 12:0 a.m.6 views

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host resulting in a denial of service.

...

3.2CVSS7AI score0.00357EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.9 views

The vulnerability of the get_user_pages() function allows a hacker to trigger a service failure.

The vulnerability of the getuserpages function is related to errors during multi-threaded operations race conditions. Exploiting this vulnerability could allow a hacker to cause service failures...

3.6CVSS6.6AI score0.00402EPSS
SaveExploits1References30Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.5 views

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, stems from insufficient validation of input data. This vulnerability allows attackers to disclose sensitive information or cause system failures.

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...

8.5CVSS6.5AI score0.00863EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2020/12/02 12:0 a.m.9 views

Linux kernel 资源管理错误漏洞

Red Hat Enterprise Linux is a Linux operating system for business users from Red Hat. A resource management error vulnerability exists in Red Hat Enterprise Linux, which arises when a network system or product performs an operation in memory without properly validating data boundaries, resulting ...

7.8CVSS7.1AI score0.01672EPSS
SaveExploits2References19
BDU FSTEC
BDU FSTEC
added 2020/12/01 12:0 a.m.8 views

The vulnerability of the input packet processing function implementation in Cisco IOS XR allows a attacker to trigger a service failure.

The vulnerability of the input packet processing function in Cisco IOS XR lies in resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.6CVSS7.5AI score0.01878EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/01 12:0 a.m.8 views

The vulnerability of the software for updating Intel Driver & Support Assistant, related to insufficient protection of permissions, allows a hacker to trigger a service failure.

The vulnerability of the Intel Driver & Support Assistant software for updating drivers is related to insufficient protection of permissions. Exploiting this vulnerability can allow a hacker to cause service failures...

5.3CVSS5.9AI score0.00244EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.59 views

Debian DLA-2469-1 : qemu security update

Some issues have been found in qemu, a fast processor emulator. All issues are related to assertion failures, out-of-bounds access failures or bad handling of return codes. For Debian 9 stretch, these problems have been fixed in version 1:2.8+dfsg-6+deb9u12. We recommend that you upgrade your qem...

6.5CVSS6.3AI score0.02546EPSS
SaveExploits2References8
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.8 views

The vulnerability of Microsoft Exchange Server servers arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of Microsoft Exchange Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.5CVSS7.1AI score0.03365EPSS
SaveExploits1References3
Rows per page
Query Builder