Lucene search
+L

3792 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.14 views

The vulnerability of the Python ECDSA cryptographic library, related to insufficient processing of exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the Python ECDSA cryptographic library involves simultaneous operations using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...

3.6CVSS6.5AI score0.0051EPSS
SaveExploits0References16Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.14 views

The vulnerability of the multimedia library libvpx, related to reading beyond the buffer boundaries of memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the multimedia library libvpx is related to a memory-bound read error. Exploiting this vulnerability could allow an attacker to gain access to confidential data remotely...

7.1CVSS6.8AI score0.02571EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.11 views

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor allows a hacker to gain access to confidential data after it is released. This enables the hacker to compromise the integrity of those data and cause service failures.

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS6.7AI score0.04104EPSS
SaveExploits1References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.14 views

The vulnerability of Google Chrome web browser’s download manager allows a hacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information.

The vulnerability of Google Chrome web browser’s download manager is related to the use of freed memory segments. Exploiting this vulnerability can allow an attacker to compromise data integrity, cause service failures, or gain unauthorized access to confidential information through a specially...

9.3CVSS7.6AI score0.01291EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.11 views

The vulnerability of the library for grammatical analysis of EXIF files in libexif allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the library for grammatical analysis of EXIF files in libexif is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data, compromise its integrity, and even cause service failures...

9.3CVSS7.1AI score0.04059EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.11 views

The vulnerability of the Symfony software development and management platform lies in its ability to simultaneously execute and utilize a shared resource with improper synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Symfony software platform for developing and managing web applications is related to the simultaneous execution and use of a shared resource with improper synchronization. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidentia...

9.3CVSS7.6AI score0.01338EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.16 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s V8 browser kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.5AI score0.00879EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.10 views

The vulnerability of the component responsible for checking the names of submodules in the Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the component responsible for checking the names of sub-modules in the distributed version control system Git is related to a lack of input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

9.3CVSS7.3AI score0.04426EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:0 a.m.10 views

The vulnerability of the libseccomp library lies in its lack of access control for certain functions. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libseccomp library is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

9.8CVSS6.8AI score0.03041EPSS
SaveExploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:0 a.m.14 views

The vulnerability of the WriteMATLABImage function in the GraphicsMagick graphics editor allows a hacker to trigger a service failure or cause other effects.

The vulnerability of the WriteMATLABImage function coders/mat.c in the GraphicsMagick graphics editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through the use of a specially crafted image...

8.8CVSS7.4AI score0.02557EPSS
SaveExploits1References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.12 views

The vulnerability of the Ceph storage system arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Ceph storage system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

6.8CVSS6.7AI score0.02136EPSS
SaveExploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.6 views

The vulnerability of Firefox browsers, including Firefox ESR, relates to access to resources through incompatible types. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers, including Firefox ESR, is related to a type object absence error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.02489EPSS
SaveExploits0References21Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.9 views

The rendering mechanism in the Google Chrome browser for Android is vulnerable due to a lack of input validation mechanisms. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the rendering mechanism in the Google Chrome browser for Android is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data...

9.3CVSS7AI score0.01311EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.12 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.7AI score0.0035EPSS
SaveExploits0References7Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.6 views

The vulnerability of the Git version control system, related to insufficient validation of input data, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git version control system lies in the improper updating of submodules. This occurs because the operation can execute commands found in the .gitmodules file of the malicious repository. Exploiting this vulnerability allows a remote attacker to access confidential data,...

9.3CVSS7.6AI score0.03691EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.8 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures or increase their privileges.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...

8.8CVSS6.8AI score0.00349EPSS
SaveExploits0References8Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.10 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a memory management error after the memory is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.3AI score0.01178EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.6 views

The vulnerability of the tcp_emu function in software emulation for hardware devices on various platforms, related to writing beyond the buffer boundaries of memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the tcpemu function in software for emulating hardware on various QEMU platforms is related to a memory management error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS6.6AI score0.03566EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.9 views

The vulnerability of the hypercall_initialise function in Xen hypervisors, related to insufficient validation of input data, allows a malicious actor to trigger a service failure.

The vulnerability of the hypercallinitialise function in Xen hypervisors is related to incorrect error handling for the invalid format symbol. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.5CVSS6.5AI score0.02522EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.12 views

The vulnerabilities of the functions p2m_resolve_translation_fault() and p2m_get_entry() in Xen hypervisors, related to insufficient input data validation, allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerabilities of the functions p2mresolvetranslationfault and p2mgetentry in the Xen hypervisor are related to incorrect checks on the root table. Exploitation of these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...

8.8CVSS6.4AI score0.02059EPSS
SaveExploits0References12Affected Software4
Rows per page
Query Builder