Lucene search
+L

309 matches found

BDU FSTEC
BDU FSTEC
added 2018/12/18 12:0 a.m.13 views

The vulnerability of the sshd server functions of the OpenSSH cryptographic protection mechanism, which allows a hacker to cause a service failure.

The vulnerability of the sshd server functions kex.c and packet.c in the OpenSSH cryptographic protection mechanism exists due to a bug that causes the null pointer to be reassigned when processing an emergency message NEWKEYS. Exploiting this vulnerability could allow a remote attacker to cause ...

7.5CVSS6.6AI score0.15716EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.25 views

F5 Networks BIG-IP : TMM DIAMETER vulnerability (K54130510)

When processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may restart. CVE-2018-5522 Impact This vulnerability allows for a remoteunauthorized disruption of service by way of an unspecified DIAMETER packet. C Tenable Network Security, Inc. The descriptive text and...

5.9CVSS6AI score0.01502EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.28 views

F5 Networks BIG-IP : TMOS vulnerability (K49440608)

When a specifically configured virtual server receives traffic of an undisclosed nature, the Traffic Management Microkernel TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration that exposes this issue is not common and in general does...

7.8CVSS7.3AI score0.02808EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2018/11/02 12:0 a.m.44 views

F5 Networks BIG-IP : TMM vulnerability (K25573437)

Malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs. CVE-2018-5517 Impact This vulnerability allows remotedisruption of...

7.5CVSS7.3AI score0.01776EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2018/08/14 12:0 a.m.13 views

The vulnerability of the API components of Sun ZFS Storage Appliance Kit allows a perpetrator to gain unauthorized access to protected data or cause service failures.

The vulnerability of the API components of Sun ZFS Storage Appliance Kit AK is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data or cause service failures using network protocols...

7.4CVSS7.8AI score0.01168EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/05/18 8:29 p.m.3 views

CVE-2018-8867

In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 and prior, PACSystems RSTi-EP CPE 100 all versions, and PACSystems CPU320/CRU320 RXi all versions, the device does not properly validate input, which could allow a remote attacke...

7.8CVSS5.6AI score0.0343EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/04/27 12:0 a.m.11 views

The vulnerability of the FTP URI processor of the software tool for interacting with servers via cURL allows a hacker to induce a service failure.

The vulnerability of the FTP URI handler of the software interface to interactions with servers via cURL arises due to buffer overflows. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.8CVSS7.4AI score0.11823EPSS
SaveExploits0References19Affected Software9
BDU FSTEC
BDU FSTEC
added 2018/02/07 12:0 a.m.8 views

The vulnerability in the implementation of TLS 1.2 in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to induce a service failure.

The vulnerability in the implementation of TLS 1.2 in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.6CVSS7.4AI score0.03113EPSS
SaveExploits0References18Affected Software12
BDU FSTEC
BDU FSTEC
added 2018/02/07 12:0 a.m.9 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation, allowing an attacker to cause a service failure.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after freeing resources during manipulation of ARIA elements in DOM containers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.6CVSS7.7AI score0.03377EPSS
SaveExploits1References18Affected Software10
BDU FSTEC
BDU FSTEC
added 2017/11/14 12:0 a.m.10 views

The vulnerability of the SQLite component in Mac OS X and iOS operating systems allows a hacker to cause a service failure.

The vulnerability of the SQLite component in Mac OS X and iOS operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.8CVSS8.1AI score0.01792EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/09/15 12:0 a.m.10 views

The vulnerability of the ReadWEBPImage function (coders/webp.c) in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.

The vulnerability of the ReadWEBPImage function coders/webp.c in the console-based image editing tool ImageMagick arises from an operation that occurs outside the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.5CVSS7.4AI score0.01162EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2017/08/30 12:0 a.m.9 views

JasPer Denial of Service Vulnerability (CNVD-2017-25686)

JasPer is an open source project that aims to provide a free software-based reference implementation of the codecs specified in the JPEG-2000 Part-1 standard. A denial of service vulnerability exists in the jpcdequantize function in jpc/jpcdec.c in JasPer, which can be exploited by a remote...

7.5CVSS6AI score0.03623EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2017/08/18 12:0 a.m.11 views

The vulnerability of the Oniguruma library, related to writing beyond the buffer boundaries on the stack, allows a hacker to cause a service failure.

The vulnerability of the Oniguruma library exists due to the improper handling of the code position 0xFFFFFFFF in the unicodeunfoldkey function during the compilation of regular expressions. As a result, when the nigencunicodegetcasefoldcodesbystr function is called, 4 bytes will be written at th...

7.5CVSS7.2AI score0.0308EPSS
SaveExploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/08/10 12:0 a.m.8 views

The vulnerability of the parser_yyerror function in the UTF-8 format interpreter for Ruby allows a violator to trigger a service failure or cause other effects.

The vulnerability of the parseryyerror function in the UTF-8 format interpreter for Ruby is related to reading or writing beyond the buffer’s boundaries. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures or other effects to bypass the $SAFE...

7.5CVSS7.7AI score0.01677EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/07/20 12:0 a.m.16 views

The vulnerability of the ReadMATImage function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadMATImage function in the console-based image editing tool ImageMagick arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions by...

7.1CVSS7.5AI score0.01669EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/07/14 12:0 a.m.8 views

The vulnerability of the CURLFile service implementation in the ext/curl/curl_file.c file of the PHP interpreter allows a attacker to cause a service failure or exert other effects.

The vulnerability of the CURLFile service implementation in the ext/curl/curlfile.c file of the PHP interpreter relates to the use of memory after it is freed. Exploiting this vulnerability may allow a malicious actor, operating remotely, to cause service failures or other effects through special...

7.5CVSS7.4AI score0.05363EPSS
SaveExploits1References7Affected Software1
CNVD
CNVD
added 2017/07/03 12:0 a.m.7 views

GNU Libtasn1 '_asn1_check_identifier' Denial of Service Vulnerability

Libtasn1 is the ASN.1 library used by GnuTLS. A denial of service vulnerability exists in GNU Libtasn1 'asn1checkidentifier'. The vulnerability stems from the asn1checkidentifier function reading specially designed input, which can be exploited by an attacker to cause a remote denial of service...

7.5CVSS6.9AI score0.0499EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2017/04/27 12:0 a.m.11 views

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud allow attackers to trigger service interruptions.

The vulnerability of JPEG 2000 stream parser programs for viewing and editing PDF files from Adobe Reader, Adobe Acrobat, Adobe Acrobat Document Cloud, and Adobe Reader Document Cloud is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause service interruptions...

4.3CVSS6.7AI score0.03959EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2017/01/13 12:0 a.m.9 views

The vulnerability of the control device in the electrical energy sector of SICAM PAS allows a intruder to cause a service failure or execute an arbitrary code.

The vulnerability of the telecontrol device in the electrical energy sector, SICAM PAS, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service interruptions or execute arbitrary commands by sending specially...

7.5CVSS8.1AI score0.03255EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2016/10/25 2:29 p.m.7 views

CVE-2016-5488

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0 and 12.1.3.0 allows remote attackers to affect availability via vectors related to Web Container, a different vulnerability than CVE-2016-3445...

5.3CVSS5.8AI score0.03525EPSS
SaveExploits0References3
Rows per page
Query Builder