Lucene search
+L

4542 matches found

BDU FSTEC
BDU FSTEC
•added 2022/01/20 12:00 a.m.•15 views

The vulnerability of the library for processing metadata in multimedia Exif files, related to incorrect elimination of special elements in the output data, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ExifTool library for processing metadata in multimedia files is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause servi...

7.8CVSS7.6AI score0.99981EPSS
SaveExploits39References13Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/20 12:00 a.m.•12 views

The vulnerability of the Grub2 operating system loader’s “cutmem” command implementation allows a perpetrator to gain access to confidential data, affect the integrity of the data, and cause service failures.

The vulnerability of the cutmem command in the Grub2b operating system loader is related to a violation of authentication mechanisms. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service failures...

7.5CVSS6.8AI score0.0039EPSS
SaveExploits0References19Affected Software14
BDU FSTEC
BDU FSTEC
•added 2022/01/20 12:00 a.m.•13 views

The vulnerability of Grub2 operating system loaders, related to the operation of operations outside the buffer in memory, allows attackers to gain access to confidential data, affect data integrity, and cause service failures.

The vulnerability of Grub2 operating system loaders is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to access confidential data, compromise data integrity, and cause service failures...

7.2CVSS7.2AI score0.01009EPSS
SaveExploits0References19Affected Software14
BDU FSTEC
BDU FSTEC
•added 2022/01/20 12:00 a.m.•14 views

The vulnerability of Graphviz’s visualization tools, related to the lack of mechanisms for checking the size of copied data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Graphviz’s visualization tools relates to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a...

9.3CVSS6.7AI score0.02614EPSS
SaveExploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/20 12:00 a.m.•12 views

The vulnerability in the implementation of the Secure Boot protocol for operating system bootloaders like Grub2 allows a perpetrator to gain access to confidential data, affect the integrity of the data, and cause service failures.

The vulnerability of the Secure Boot implementation in the Grub2 operating system is related to improper restrictions on the use of ACPI commands. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service failures...

7.5CVSS6.8AI score0.01738EPSS
SaveExploits0References21Affected Software14
BDU FSTEC
BDU FSTEC
•added 2022/01/20 12:00 a.m.•11 views

The vulnerability of the WebKit rendering module, related to memory usage after deallocation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebKit page rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS6.8AI score0.01274EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/01/20 12:00 a.m.•10 views

The vulnerability of the programmatic tools and libraries used for working with OpenSC smart cards involves operations that occur outside of the buffer in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the software tools and libraries used for working with OpenSC smart cards is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...

6.4CVSS7AI score0.00361EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/20 12:00 a.m.•24 views

The vulnerability of the systemd service initialization and management subsystem, related to improper privilege binding, allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the systemd service initialization and management subsystem is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS5.8AI score0.00915EPSS
SaveExploits3References13Affected Software6
Code423n4
Code423n4
•added 2022/01/19 12:00 a.m.•17 views

Use safeTransferFrom consistently instead of transferFrom

Handle Jujic Vulnerability details Impact It is good to add a require statement that checks the return value of token transfers, or to use something like OpenZeppelin’s safeTransferFrom unless one is sure the given token reverts in case of a failure. Failure to do so will cause silent failures of...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•15 views

The vulnerability of the comparison library with regular expressions containing ANSI escape codes (Ansi-regex) leads to uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerability of the comparison library with regular expressions containing ANSI escape codes Ansi-regex is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.8AI score0.03552EPSS
SaveExploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•13 views

The vulnerability of the `ntfsattr_setup_flag` function in the NTFS file system driver for the FUSE NTFS-3G module involves insecure privilege management. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsattrsetupflag function in the NTFS file system driver for the FUSE NTFS-3G module is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.6AI score0.00477EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•17 views

The vulnerability of the `ntfs_get_attribute_value` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond buffer boundaries, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsgetattributevalue function in the NTFS file system driver for the FUSE NTFS-3G module is related to the absence of attribute filtering. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.6AI score0.00452EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•15 views

The vulnerability of the `ntfsattr_find_inattrdef` function in the NTFS file system driver for the FUSE NTFS-3G module arises from the reading beyond the buffer’s allowed limits. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsattrfindinattrdef function in the NTFS file system driver for the FUSE NTFS-3G module relates to reading data from within allowable buffer limits. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause servic...

7.8CVSS6.8AI score0.00421EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•15 views

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to errors during the correction of differences between the MFT and MFTMirror. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

7.8CVSS6.6AI score0.00488EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•13 views

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through a specially created Unicod...

7.8CVSS6.8AI score0.00461EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•35 views

The vulnerability of the adts_decode_extradata function in the libavformat/adtsenc.c component of the FFmpeg multimedia library, related to an unvalidated return value, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the adtsdecodeextradata function in the libavformat/adtsenc.c component of the FFmpeg multimedia library is related to an unvalidated return value of initgetbits. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, compromise its...

9.8CVSS7.7AI score0.02411EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•17 views

The vulnerability of the read_objects() function in the .fig Fig2dev file conversion utility involves a buffer overflow issue in memory operations. This vulnerability allows an attacker to compromise data integrity and cause service failures.

The vulnerability of the readobjects function in the .fig Fig2dev file conversion utility is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise data integrity and cause service failures...

7.1CVSS6.6AI score0.01178EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•18 views

The vulnerability of the get_block_row function in the Ffmpeg multimedia library, related to buffer overflows in memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the getblockrow function in the Ffmpeg multimedia library is related to buffer overflow in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.4AI score0.01172EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•18 views

The vulnerability of the ff_fill_rectangle function in the multimedia library Ffmpeg, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the fffillrectangle function in the multimedia library Ffmpeg is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

8.8CVSS6.8AI score0.01425EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/01/17 12:00 a.m.•16 views

The vulnerability of the htmldoc web page transformation software, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the htmldoc web page conversion software is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.8AI score0.02477EPSS
SaveExploits1References8Affected Software5
Rows per page
Query Builder