Lucene search
+L

1525 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.7 views

The vulnerability of the network programming environments Envoy and Istio lies in their susceptibility to entering an infinite loop when processing certain input data. This allows attackers to cause service failures.

The vulnerability of the network programming environments Envoy and Istio is related to the entry into an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a attacker to cause service failures...

7.8CVSS7.2AI score0.01938EPSS
SaveExploits1References5Affected Software2
RedHat Linux
RedHat Linux
added 2020/05/18 10:24 a.m.21 views

thrift: Endless loop when feed with specific input data

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.8CVSS7.3AI score0.09156EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.8 views

The vulnerability of the WordPress website content management system, related to insufficient validation of input data, allows attackers to compromise the integrity of the data.

The vulnerability of the WordPress website content management system is related to a JSON GET cache infection error. Exploiting this vulnerability allows an attacker to compromise data integrity...

7.8CVSS7.3AI score0.03154EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.9 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for checking input data, allowing attackers to trigger a service failure.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause service failures...

6.5CVSS6.8AI score0.00347EPSS
SaveExploits0References8Affected Software11
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.9 views

The vulnerability of Google Chrome’s payment security policy, related to the lack of a mechanism for verifying input data, allows attackers to compromise the integrity of data.

The vulnerability of Google Chrome’s payment security policy is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

7.1CVSS6.6AI score0.01219EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.13 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for verifying input data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

7.2CVSS6.8AI score0.00352EPSS
SaveExploits0References8Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.8 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for verifying input data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

8.8CVSS6.8AI score0.00353EPSS
SaveExploits0References7Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.12 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for checking input data, allowing attackers to trigger a service failure.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause service failures...

6.5CVSS6.8AI score0.0035EPSS
SaveExploits0References8Affected Software11
CNVD
CNVD
added 2020/04/24 12:0 a.m.11 views

Command Injection Vulnerability in Multiple NETGEAR Products (CNVD-2021-50928)

NETGEAR EX7000 and others are products of NETGEAR Corporation.NETGEAR EX7000 is a wireless network signal extender.NETGEAR R8500 is a wireless router.NETGEAR D6400 is a wireless modem.NETGEAR R8500 is a wireless router.NETGEAR R8500 is a wireless router.NETGEAR R8500 is a wireless router.NETGEAR...

9.8CVSS7.7AI score0.03353EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.11 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.1AI score0.00847EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.15 views

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the console-based graphic editor ImageMagick is caused by a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure termination of the application by sending large input data...

6.8CVSS7AI score0.01457EPSS
SaveExploits1References9Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.10 views

The vulnerability of Firefox’s browser security policy, related to the lack of input data validation mechanisms, allows attackers to compromise data integrity.

The vulnerability of Firefox’s browser security policy is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to compromise data integrity by using the HTTP protocol...

4.3CVSS6.4AI score0.00734EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.8 views

The vulnerability of the `gdImageCreateFromXbm` function in the GD graphics library for the PHP programming language allows a malicious actor to gain unauthorized access to sensitive information, due to a lack of mechanisms to verify the correctness of input data.

The vulnerability of the gdImageCreateFromXbm function in the GD graphics library for the PHP programming language is related to the lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to sensitive information...

7.8CVSS5.9AI score0.04332EPSS
SaveExploits1References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.11 views

The vulnerability of Google Chrome’s browser extension security policies, related to the lack of a mechanism for verifying input data, allows attackers to trigger a service failure.

The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure through the created HTML page...

7.1CVSS6.6AI score0.01217EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.15 views

The vulnerability of the Ceph storage system arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Ceph storage system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

6.8CVSS6.7AI score0.02136EPSS
SaveExploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.10 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

7.1CVSS6.8AI score0.01915EPSS
SaveExploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.10 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures or increase their privileges.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...

8.8CVSS6.8AI score0.00349EPSS
SaveExploits0References8Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.14 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.7AI score0.0035EPSS
SaveExploits0References7Affected Software10
CNVD
CNVD
added 2020/04/08 12:0 a.m.7 views

express-mock-middleware input validation error vulnerability

express-mock-middleware is a mock middleware. An input validation error vulnerability exists in express-mock-middleware version 0.0.6 and earlier. The vulnerability stems from a network system or product that does not properly validate input data. No detailed vulnerability details are provided at...

5.3CVSS7AI score0.01243EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/03/31 9:30 p.m.29 views

CVE-2020-5344

Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially...

7CVSS10AI score0.03842EPSS
SaveExploits0References1
Rows per page
Query Builder