Lucene search
K

362 matches found

BDU FSTEC
BDU FSTEC
added 2024/01/25 12:0 a.m.2 views

The vulnerability of the Splunk Enterprise platform for operational analysis in Windows operating systems lies in the restoration of unreliable data in memory, allowing attackers to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the Splunk Enterprise operating system for Windows platform lies in the recovery of unreliable data in memory due to an incorrect path being used to access files on the disk partition. Exploiting this vulnerability can allow an attacker to compromise the integrity,...

7.5CVSS7.6AI score0.0022EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/15 12:0 a.m.3 views

The software for configuring, monitoring, and controlling industrial equipment, Easergy Studio, has a vulnerability related to the restoration of unreliable data in memory. This vulnerability allows an intruder to gain increased privileges.

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS7.2AI score0.00421EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.3 views

The vulnerability of the RMI software interface for controlling power sources in Voltronic Power View allows a perpetrator to execute arbitrary code.

The vulnerability of the RMI software interface for controlling power sources in Voltronic Power ViewPower is related to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created...

10CVSS8.2AI score0.01549EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.5 views

The vulnerability of the RMI interface in software for controlling power sources in Voltronic Power ViewPower Pro allows a intruder to execute arbitrary code.

The vulnerability of the RMI software interface for controlling power sources in Voltronic Power ViewPower Pro relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially created...

10CVSS8.2AI score0.0104EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.3 views

The vulnerability of the Jackson-Databind library from the FasterXML project allows for arbitrary code execution due to the inability to recover unreliable data from memory.

The vulnerability of the jackson-databind library from the FasterXML project relates to the restoration of unreliable data in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8.1CVSS7.9AI score0.07483EPSS
Exploits0References9Affected Software16
Tenable Nessus
Tenable Nessus
added 2024/01/09 12:0 a.m.51 views

Amazon Linux 2 : thunderbird (ALAS-2024-2379)

The version of thunderbird installed on the remote host is prior to 115.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2379 advisory. On some systems--depending on the graphics settings and drivers--it was possible to force an out-of-bounds read and...

8.8CVSS7.9AI score0.01406EPSS
Exploits0References16
CNNVD
CNNVD
added 2024/01/03 12:0 a.m.7 views

PackageKitd Security Vulnerability

PackageKitd is a graphical front-end page by Richard Hughes, a personal developer. PackageKitd has a security vulnerability that stems from the presence of post-release reuse of the Idle function, resulting in the loss of data in memory...

3.3CVSS6.9AI score0.00228EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/01/01 12:0 a.m.4 views

PT-2024-12380 · Qualcomm · Snapdragon +74

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a cryptographic problem in the automotive sector, specifically when unwrapping the key secs2d and verifying it with RPMB data. No...

7.1CVSS7AI score0.00087EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/12/15 12:0 a.m.3 views

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data in memory, allowing an attacker to execute commands with local administrator privileges.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute code with local administrator privileges...

10CVSS8AI score0.16573EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:0 a.m.3 views

The vulnerability of the SetSmartQoSSettings.php script in D-Link DIR-846 router software allows a hacker to execute arbitrary commands.

The vulnerability of the SetSmartQoSSettings.php script of the D-Link DIR-846 router operating system is related to the restoration of unreliable data in memory due to the failure to eliminate certain elements during the processing of parameters smartqoosexpressdevices and smartqoosnormaldevices...

9CVSS8.1AI score0.02347EPSS
Exploits1References3
RedHat Linux
RedHat Linux
added 2023/11/27 4:8 p.m.4 views

Mozilla: Out-of-bound memory access in WebGL2 blitFramebuffer

The Mozilla Foundation Security Advisory describes this flaw as: On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element...

6.5CVSS7.3AI score0.00827EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2023/11/27 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.5016EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/11/27 12:0 a.m.19 views

RHEL 9 : firefox (RHSA-2023:7510)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:7510 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox...

8.8CVSS7.7AI score0.01406EPSS
Exploits0References16
BDU FSTEC
BDU FSTEC
added 2023/11/23 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.4CVSS8.1AI score0.64558EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/23 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.80178EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2023/11/21 12:0 a.m.25 views

Mozilla Firefox < 115.5

The version of Firefox installed on the remote Windows host is prior to 115.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-50 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read and leak...

8.8CVSS7.9AI score0.01406EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2023/11/13 12:0 a.m.4 views

The vulnerability of the SPIP content management system, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the SPIP content management system is related to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using specially created data transmitted to the application...

10CVSS8.2AI score0.99662EPSS
Exploits23References8Affected Software2
CNVD
CNVD
added 2023/11/13 12:0 a.m.8 views

Apache Arrow Deserialization Vulnerability

Apache Arrow is a cross-language development platform for in-memory data processing from the U.S. Apache Apache Foundation. The platform supports programming languages such as C, C++, C, Go and Java, and provides features such as inter-process communication. A deserialization vulnerability exists...

9.8CVSS7AI score0.14414EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2023/10/25 12:0 a.m.3 views

The vulnerability of the GetParameterFormTemplateWithSelectionState function in the SolarWinds Access Rights Manager allows a violator to execute arbitrary code.

The vulnerability of the GetParameterFormTemplateWithSelectionState function in the SolarWinds Access Rights Manager software relates to the restoration of unreliable data in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

8CVSS8AI score0.02181EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/23 12:0 a.m.3 views

The vulnerability of the VMware Aria Operations for Logs network log analysis tool, related to the restoration of unreliable data in memory, allows a perpetrator to escalate their privileges.

The vulnerability of the VMware Aria Operations for Logs network log analysis tool is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

8.1CVSS7.1AI score0.00204EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder