Lucene search
+L

190 matches found

Veracode
Veracode
•added 2022/09/19 7:48 p.m.•25 views

NULL Pointer Dereference

fis-gtm is vulnerable to null pointer difference. The vulnerability exist in FIS GT.M where the attacker uses a crafted input to causa a call to ZREAD to crash...

7.5CVSS3AI score0.01597EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/09/19 7:48 p.m.•23 views

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to lack of input validation in doverify.c which allows an attacker to crash the application by corrupting a function pointer...

7.5CVSS4AI score0.01662EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/09/19 7:48 p.m.•25 views

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists in due to null pointer dereference which allows an attacker to cause an application crash via malicious input...

7.5CVSS4.1AI score0.01554EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/09/19 7:48 p.m.•16 views

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists in iousopen function of srunix/iousopen.c due to lack of null checks which allows an attacker to cause an application crash by dereferencing a NULL pointer...

7.5CVSS3.3AI score0.01658EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/09/19 7:47 p.m.•28 views

Denial Of Service (DoS)

fis-gtm is vulnerable denial of service. The vulnerability exists due to a segment fault in FIS GT.M where the attacker can cause a calculation of the size of call to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to crash the application...

7.5CVSS2.9AI score0.01662EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/08/30 1:31 a.m.•27 views

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference in the function fincr in srport/fincr.c allowing an attacker to crash the system with a maliciously crafted input...

7.5CVSS4.2AI score0.01662EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/08/30 1:31 a.m.•26 views

Buffer Overflow

fis-gtm:sid is vulnerable to buffer overflow.The vulnerability exists due improper configuration of buffer size which allows an attacker to crash the system via memcpy call...

7.5CVSS4.5AI score0.0168EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/08/30 1:31 a.m.•21 views

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service DoS attacks. An attacker is able to cause a type to be incorrectly initialized in the function fincr of srport/fincr.c and cause a NULL pointer dereference via a crafted input resulting in an application crash...

7.5CVSS3.6AI score0.01662EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
•added 2022/08/30 1:31 a.m.•21 views

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to the use after free condition in a pointer which pushed into previously free memory by the loop, allowing an attacker to cause an application crash by providing a malicious input...

7.5CVSS3.9AI score0.0151EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2022/06/20 9:10 p.m.•10 views

MAL-2022-3493 Malicious code in gtm-tracking-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e849bf91f82dbd6013c54266e0b8ab5b8107604190298ca59817cdf94fe2aba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:20 p.m.•13 views

MAL-2022-438 Malicious code in @msmg/gtm-events (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e5755beca6bf1d5544c49f75ca17d6094c45ade4dc924cd8fb8adddeef176f4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:14 p.m.•5 views

Malicious code in @frontend-metrics/gtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5743ebe739a7fe8bb76a512075ce5fc3e9b4936813b47d6d8e83cce538db40be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:14 p.m.•10 views

MAL-2022-279 Malicious code in @frontend-metrics/gtm (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5743ebe739a7fe8bb76a512075ce5fc3e9b4936813b47d6d8e83cce538db40be Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/15 6:15 p.m.•13 views

CVE-2021-44508

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer...

7.5CVSS7.2AI score0.01658EPSS
SaveExploits0References4
OSV
OSV
•added 2022/04/15 6:15 p.m.•6 views

DEBIAN-CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

7.5CVSS7.4AI score0.01597EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/15 6:15 p.m.•5 views

DEBIAN-CVE-2021-44498

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

7.5CVSS7.2AI score0.01662EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/15 6:15 p.m.•7 views

DEBIAN-CVE-2021-44508

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of NULL checks in calls to iousopen in srunix/iousopen.c allows attackers to crash the application by dereferencing a NULL pointer...

7.5CVSS7.4AI score0.01658EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/15 6:15 p.m.•15 views

DEBIAN-CVE-2021-44510

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a calculation of the size of calls to memset in opfnj3 in srport/opfnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the...

7.5CVSS7.3AI score0.01662EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/15 6:15 p.m.•7 views

CVE-2021-44507

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. A lack of parameter validation in calls to memcpy in strtok in srunix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer...

7.5CVSS7.2AI score0.01597EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/04/15 6:15 p.m.•8 views

CVE-2021-44498

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...

7.5CVSS7.1AI score0.01662EPSS
SaveExploits0References4
Rows per page
Query Builder