Lucene search
+L

1524 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.10 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

6.8CVSS6.5AI score0.05141EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.9 views

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from insufficient checking of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02159EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.7 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

9.1CVSS8.2AI score0.10342EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.11 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

4.6CVSS6.5AI score0.00346EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.9 views

The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to disclose protected information.

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

6.6CVSS6.4AI score0.00358EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.11 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

6.2CVSS6.5AI score0.00349EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2019/10/29 7:15 p.m.3 views

DEBIAN-CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.5CVSS6.8AI score0.09156EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/29 7:15 p.m.30 views

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.5CVSS6.5AI score
SaveExploits0References42
Prion
Prion
added 2019/10/29 7:15 p.m.25 views

Design/Logic Flaw

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.8CVSS8.1AI score0.09156EPSS
SaveExploits0References42Affected Software3
GitLab Advisory Database
GitLab Advisory Database
added 2019/10/29 12:0 a.m.42 views

Loop with Unreachable Exit Condition (Infinite Loop)

In Apache Thrift, a server or client may run into an endless loop when feed with specific input data...

7.8CVSS2.2AI score0.09156EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:0 a.m.65 views

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch allows a attacker to gain access to protected information.

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...

7.8CVSS5.5AI score0.05802EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/10/28 10:32 p.m.36 views

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.4AI score0.09156EPSS
SaveExploits0References42
CVE
CVE
added 2019/10/28 10:32 p.m.437 views

CVE-2019-0205

CVE-2019-0205 affects Apache Thrift up to version 0.12.0, where a server or client may enter an endless loop when fed specific input data. The issue was partially fixed in 0.11.0, and depending on the language binding, only certain bindings are impacted. Exploitation details are not provided in t...

7.8CVSS7.3AI score0.09156EPSS
SaveExploits0References42Affected Software1
Debian CVE
Debian CVE
added 2019/10/28 10:32 p.m.48 views

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.8CVSS6.7AI score0.09156EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.13 views

The vulnerability of Cisco IOS and Cisco IOS XE operating systems, related to the lack of measures for cleaning input data, allows attackers to execute cross-site scripting attacks.

The vulnerability of Cisco IOS and Cisco IOS XE systems is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to perform domain-to-domain scenario attacks using the HTTP banner parameter...

5.5CVSS5.5AI score0.00804EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.10 views

The vulnerability of the Cisco IOS XE operating system, related to the lack of measures for cleaning input data, allows attackers to perform domain-based scenario attacks.

The vulnerability of the Cisco IOS XE operating system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to perform domain-joining attacks...

5.5CVSS5.5AI score0.00804EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/09/27 12:0 a.m.9 views

The embedded software of Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards is vulnerable due to insufficient testing of input data. This vulnerability allows attackers to escalate their privileges, disclose sensitive information, or cause service failures.

The vulnerability of the built-in software in Intel NUC Kits, Intel Compute Sticks, and Intel Compute Cards exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges, expose sensitive information, or cause system failures...

7.5CVSS5.5AI score0.0036EPSS
SaveExploits0References4Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/09/13 12:0 a.m.6 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system exists due to insufficient verification of input data on the host server. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created application...

5.4CVSS5.5AI score0.01721EPSS
SaveExploits0References2
Prion
Prion
added 2019/09/11 8:15 p.m.21 views

Sql injection

The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated malicious user could potentially exploit this vulnerability to execute SQL commands on the back-e...

6.5CVSS8.9AI score0.01214EPSS
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/10 12:0 a.m.6 views

The vulnerability of Cisco Enterprise NFV Infrastructure Software (NFVIS) arises from insufficient validation of input data, allowing attackers to disclose sensitive information that should be protected.

The vulnerability of Cisco Enterprise NFV Infrastructure Software NFVIS exists due to insufficient testing of input data. Exploiting this vulnerability could allow a attacker to disclose protected information...

4.9CVSS5.5AI score0.00351EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder