Lucene search
+L

308 matches found

BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.6 views

The vulnerability of Eclipse Jetty servlet containers arises from insufficient validation of input data, allowing attackers to cause failures in the proxy script.

The vulnerability of Eclipse Jetty servlet containers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause failures in the proxy scenarios...

4CVSS6.5AI score0.01173EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/25 12:0 a.m.10 views

The vulnerability of the Windows Authentication component in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Authentication component in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted data...

7.5CVSS7.8AI score0.01163EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/11/23 12:0 a.m.74 views

Google TensorFlow buffer overflow vulnerability (CNVD-2022-80680)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from tf.rawops.ResizeNearestNeighborGrad's lack of length size validation of the input data. validation, an attacker could exploi...

7.5CVSS3.5AI score0.0044EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.9 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows a attacker to trigger a service failure.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.5CVSS7.4AI score0.00622EPSS
SaveExploits0References3
Broadcom
Broadcom
added 2022/11/08 12:0 a.m.57 views

CVE-2022-24903: A flaw in rsyslog TCP module could allow an attacker to craft a malicious message leading to a heap-based buffer overflow. (BSA-2022-2127)

Security Advisory ID: BSA-2022-2127 Component: Rsyslog Revision: 1.0 Rsyslog is vulnerable to remote code execution RCE due to improper validation of input data when octet-counted framing is used. An attacker could exploit this vulnerability by supplying a system with maliciously crafted messages...

8.1CVSS8AI score0.03933EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/10/31 12:0 a.m.8 views

The vulnerability in Google Chrome’s developer tools for web developers allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s developer tools relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

10CVSS6.8AI score0.00608EPSS
SaveExploits0References13Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:0 a.m.7 views

The vulnerability of the InnoDB component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

4.6CVSS6.3AI score0.00426EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:0 a.m.6 views

The vulnerability of the InnoDB component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component of the MySQL Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.3AI score0.0117EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.12 views

The vulnerability of Adobe Illustrator, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00456EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/15 12:0 a.m.12 views

The vulnerability of the Office Online Server web server, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the Office Online Server web server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...

8.4CVSS7.8AI score0.00781EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.6 views

The vulnerability of the AV1 Video Extension codec, which stems from insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the AV1 Video Extension codec is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...

7.8CVSS7.7AI score0.02118EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/24 12:0 a.m.9 views

The vulnerability of BIOS microprogramming software in Dell laptops, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

6.4CVSS7.5AI score0.00266EPSS
SaveExploits0References3Affected Software35
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.9 views

The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.02408EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.12 views

The vulnerability of the Adobe Bridge file manager, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02027EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.8 views

The vulnerability of the Intel Ethernet ixgbe driver for Linux allows a hacker to trigger a service failure.

The vulnerability of the Intel Ethernet ixgbe driver for Linux exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.7AI score0.00286EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:0 a.m.10 views

The vulnerability relates to the signature verification function of Authenticode for the Windows operating system, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Authenticode signature verification function in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.8CVSS6.3AI score0.8878EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/06/21 12:0 a.m.10 views

The vulnerability of the Adobe Bridge file manager, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02133EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/21 12:0 a.m.7 views

The vulnerability of the hardware virtualization system of the Windows Hyper-V operating system from Microsoft allows a perpetrator to trigger a service failure.

The vulnerability of the Windows Hyper-V hardware virtualization system of the Microsoft operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...

6.5CVSS6.9AI score0.00593EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:0 a.m.9 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

5.3CVSS7.2AI score0.01646EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/07 12:0 a.m.7 views

The vulnerability of the Wiser Smart programmable logic controllers from Schneider Electric, Wiser Controller EER21000 and Wiser Controller EER21001, related to insufficient validation of input data, allows attackers to exploit this to increase their privileges.

The vulnerability of the Wiser Smart programmable logic controllers from Schneider Electric, Wiser Controller EER21000 and Wiser Controller EER21001, relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a...

7.8CVSS6.7AI score0.00672EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder