Lucene search
+L

308 matches found

BDU FSTEC
BDU FSTEC
added 2016/05/11 12:0 a.m.12 views

The vulnerability of the XSLTResult class implementation in the Apache Struts software platform allows attackers to execute arbitrary code.

The vulnerability of the XSLTResult class implementation in the Apache Struts software framework is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the stylesheetLocation parameter...

10CVSS8.2AI score0.20167EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2016/02/08 12:0 a.m.10 views

The vulnerability of the Cisco Firepower Extensible Operating System allows a intruder to trigger a maintenance failure.

The vulnerability of the Cisco Firepower Extensible Operating System’s driver exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor, operating locally, to trigger a service failure using a pre-prepared USB device that transmits erroneous USB...

4.9CVSS5.5AI score0.00309EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/12/14 12:0 a.m.4 views

The vulnerability of the FFmpeg multimedia library, which allows a hacker to trigger a service failure

The vulnerability of the inittile function in the libavcodec/jpeg2000dec.c file of the FFmpeg multimedia library exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure using specially crafted JPEG 2000 data...

7.5CVSS7.4AI score0.02001EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/10/01 12:0 a.m.8 views

The vulnerability of the multimedia player iTunes and the iOS operating system allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the WebKit component in the multimedia player iTunes and the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted...

6.8CVSS7.2AI score0.02782EPSS
Exploits0References5Affected Software2
securityvulns
securityvulns
added 2012/04/09 12:0 a.m.130 views

[waraxe-2012-SA#083] - Multiple Vulnerabilities in Uploadify 2.1.4

waraxe-2012-SA083 - Multiple Vulnerabilities in Uploadify 2.1.4 =============================================================================== Author: Janek Vind "waraxe" Date: 05. April 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-83.html Description of vulnerable software:...

0.4AI score
Exploits0
Cvelist
Cvelist
added 2011/02/10 3:0 p.m.32 views

CVE-2010-4195

The TextXtra module in Adobe Shockwave Player before 11.5.9.620 does not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors...

7.3AI score0.05561EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2009/01/13 12:0 a.m.21 views

Firefox Browser designMode Null Pointer Dereference DoS Vulnerability - Win

Mozilla Firefox browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

2.6CVSS9.3AI score0.06586EPSS
Exploits2References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2006/04/26 12:0 a.m.39 views

JVN#72225922 Apache Struts Validator allows to bypass input data validation

Impact Depending on the web application, an attacker may be able to manipulate unexpected operations by bypassing validation of input data. For example, unintended format data may be saved. Solution Products Affected Apache Struts 1.2.8 and earlier...

7.5CVSS7.4AI score0.06142EPSS
Exploits0
Rows per page
Query Builder