Lucene search
+L

3793 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/22 12:0 a.m.10 views

The vulnerability of the TCL-script interpreter used by Cisco IOS and Cisco IOS XE operating systems allows a hacker to induce a service failure.

The vulnerability of the TCL-script interpreter for Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

6CVSS6.2AI score0.00299EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/06/22 12:0 a.m.8 views

The vulnerability of the Impress module in the OpenOffice office package allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Impress module in the OpenOffice office package is related to incorrect handling of integer values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.9CVSS7.1AI score0.07089EPSS
SaveExploits0References5Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/06/22 12:0 a.m.8 views

The vulnerability of the enterprise-level catalog service 389 Directory Server, related to the execution of operations outside the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the enterprise-level catalog service 389 Directory Server lies in the fact that the operation is performed outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.4AI score0.03948EPSS
SaveExploits0References6Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/06/22 12:0 a.m.7 views

The vulnerability of the ww8par2.cxx filter in the OpenOffice office suite, which is related to errors that occur when processing numbers, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ww8par2.cxx filter in the OpenOffice office suite is related to a property error in the sprmTDefTable table within the document. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.9CVSS5.5AI score0.12094EPSS
SaveExploits0References5Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/06/22 12:0 a.m.9 views

The vulnerability of the OpenOffice office suite is related to errors in applying Visual Basic for Applications (VBA) macros for security settings. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to errors in applying macros’ security settings in Visual Basic for Applications VBA. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.9CVSS5.4AI score0.08127EPSS
SaveExploits1References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/06/22 12:0 a.m.6 views

The vulnerability of the OpenOffice office suite arises from incorrect restrictions on path names to restricted directories. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to a recompilation error through “.. two dots” in files where the XSLT JAR filter is active. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.9CVSS5.5AI score0.10731EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/06/22 12:0 a.m.9 views

The vulnerability of the WW8ListManager function in the OpenOffice office package allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WW8ListManager function in the OpenOffice office package is related to the improper handling of an unspecified number of list levels in the list styles defined by the user. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data,...

9.9CVSS5.5AI score0.09672EPSS
SaveExploits0References5Affected Software4
Wired Threat Level
Wired Threat Level
added 2020/06/19 2:0 p.m.26 views

A Report Blames ‘CIA Failures’ for the Agency's Worst Hack

A series of WikiLeaks disclosures that exposed a trove of the intelligence organization's secrets could have been avoided, a task force found...

2.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:0 a.m.8 views

The vulnerability of the OpenOffice office suite arises from integer overflows that occur during the creation of records in the document table. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures due to the records created by the attack...

9.9CVSS5.5AI score0.06722EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:0 a.m.5 views

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

9.9CVSS5.7AI score0.0607EPSS
SaveExploits1References5Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:0 a.m.11 views

The vulnerability of the syntax analyzer and the YANG data modeling tool, Libyang, arises from writing beyond buffer boundaries in memory. This allows attackers to trigger service failures or execute arbitrary code.

The vulnerability of the syntax analyzer and the YANG data modeling language toolset lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

8.1CVSS8AI score0.03644EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:0 a.m.7 views

The vulnerability of the program for installing SSL certificates in the standardized Linux Sblim-sfcb toolset is related to an incorrect definition of the link before accessing the file. This allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the program for installing SSL certificates in the standardized Linux Sblim-sfcb tool relates to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity,...

8.8CVSS5.5AI score0.00243EPSS
SaveExploits0References4Affected Software2
Krebs on Security
Krebs on Security
added 2020/06/17 11:37 p.m.28 views

When Security Takes a Backseat to Productivity

"We must care as much about securing our systems as we care about running them if we are to make the necessary revolutionary change." -CIA's Wikileaks Task Force. So ends a key section of a report the U.S. Central Intelligence Agency produced in the wake of a mammoth data breach in 2016 that led ...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.11 views

Vulnerability of Connected User Experience and Telemetry Service functions in Microsoft Windows operating systems, allowing attackers to induce service failures.

The vulnerability of the Connected User Experience and Telemetry Service services in Microsoft Windows operating systems is related to insufficient verification of permission assignment for critical resources. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.2AI score0.00923EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.10 views

The vulnerability of the Simple Network Management Protocol packet processor in Cisco IOS and IOS XE operating systems allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol packet processor in Cisco IOS and IOS XE operating systems relates to unauthorized access to the indexed resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.7CVSS7.2AI score0.01565EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.22 views

The vulnerability of the microprogrammed software of the modular controller for the automation of transformer substations of Schneider Electric Easergy T300 (HU250) – related to uncontrolled resource consumption – allows a intruder to trigger a maintenance failure.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 HU250 for transformer substations automation involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system due ...

9.3CVSS7.2AI score0.01276EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/06/04 3:15 p.m.6 views

CVE-2020-13805

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

9.8CVSS7.3AI score0.01512EPSS
SaveExploits0References1
Prion
Prion
added 2020/06/04 3:15 p.m.17 views

Design/Logic Flaw

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

5CVSS9.3AI score0.01512EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2020/06/04 2:40 p.m.52 views

CVE-2020-13805

The CVE-2020-13805 entry concerns Foxit Reader and PhantomPDF prior to 9.7.2 where the CAS login service does not limit login failures, enabling brute-force attack attempts. Concrete details across connected sources confirm the affected products (Foxit Reader/PhantomPDF) and the root cause (unlim...

9.8CVSS9.3AI score0.01512EPSS
SaveExploits0References1Affected Software2
AlpineLinux
AlpineLinux
added 2020/06/04 2:40 p.m.27 views

CVE-2020-13805

An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures...

9.8CVSS6.9AI score0.01512EPSS
SaveExploits0References1
Rows per page
Query Builder