Lucene search
+L

1596 matches found

BDU FSTEC
BDU FSTEC
added 2021/09/03 12:0 a.m.8 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the manipulation of the null pointer, allowing attackers to trigger service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the handling of the null pointer. Exploiting these vulnerabilities can allow...

7.8CVSS5.9AI score0.02029EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/09/02 12:0 a.m.9 views

The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Expert, allows a intruder to trigger a service failure.

The vulnerability of the programming software for PLCs programmable logic controllers, EcoStruxure Control Expert, lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system remotely...

10CVSS7.2AI score0.01882EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2021/08/26 12:0 a.m.9 views

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application, which arises due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the graphic editor application for the Adobe Creative Cloud Desktop Application exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.03668EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/26 12:0 a.m.10 views

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application, which arises due to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the graphic editor application for the Adobe Creative Cloud Desktop Application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS7.7AI score0.06529EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.8 views

The vulnerability of the implementation of TFTP packet processing functions in the TCP/IP NicheLite and InterNiche solutions allows a hacker to induce a service failure.

The vulnerability of the implementation of TFTP packet processing functions in TCP/IP NicheLite and InterNiche lies in errors that occur when a string or array is terminated with a NULL character. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.4AI score0.023EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/08/23 12:0 a.m.10 views

The vulnerability of the programming software for PLCs (programmable logic controllers), EcoStruxure Control Expert, allows a intruder to trigger a service failure.

The vulnerability of the EcoStruxure Control Expert programming tool for programmable logic controllers is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

7.8CVSS7.2AI score0.01272EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:0 a.m.14 views

Vulnerability of the extract_name() function (rfc1035.c): The Dnsmasq DNS server has a vulnerability related to the failure of operations beyond the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability of the extractname function rfc1035.c in the Dnsmasq DNS server is related to the lack of length checking on input data. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.1CVSS6.5AI score0.86692EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/08/13 12:0 a.m.7 views

The vulnerability of the Google Chrome browser’s Web Serial API interface allows a perpetrator to trigger a service failure.

The vulnerability of the Google Chrome browser’s Web Serial API interface is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

10CVSS7.8AI score0.01312EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/08/09 12:0 a.m.6 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to uncontrolled resource consumption, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat 2019, Adobe Acrobat Reader 2019, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, and Adobe Acrobat Reader 2015 are related to uncontrolled resource consumption. Exploiting these vulnerabilities can...

10CVSS5.9AI score0.01909EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/07/30 12:0 a.m.12 views

The vulnerability of the VNC client software for remote desktop management, UltraVNC, relates to writing beyond the buffer boundaries in memory. This allows a malicious actor to trigger a service failure.

The vulnerability of the VNC client software for remote desktop management, UltraVNC, is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

7.1CVSS7.4AI score0.0248EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.10 views

The vulnerability of the HTTP/2 module in the Apache Traffic Server, which exists due to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.1AI score0.02447EPSS
SaveExploits0References5Affected Software2
CNNVD
CNNVD
added 2021/07/24 12:0 a.m.11 views

Atlassian JIRA Data Center 访问控制错误漏洞

Atlassian JIRA Data Center is the data center version of Atlassian JIRA from Atlassian Australia. An Access Control Error vulnerability exists in Jira Data Center due to a lack of authentication in the Ehcache RMI web service that listens on ports 40001 TCP and 40011 TCP.A remote, unauthenticated...

9.8CVSS8.9AI score0.46689EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.6 views

The vulnerability of component tftpserver.c in the client authentication library libssh, related to pointer dereferencing errors, allows a perpetrator to cause a service failure.

The vulnerability of the tftpserver.c component in the client authentication library libssh is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.1CVSS6.5AI score0.04105EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.7 views

The vulnerability of the ldebug.c component of the Lua script interpreter, related to a numerical loss of significance, allows an attacker to trigger a service failure.

The vulnerability of the ldebug.c component of the Lua script interpreter is related to a numerical loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

5.3CVSS6.3AI score0.03833EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.5 views

The vulnerability of the software for implementing VNC functions of LibVNCServer lies in the lack of checks for division by zero, which allows a perpetrator to trigger a service failure.

The vulnerability of the software for implementing VNC functions of LibVNCServer is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.5CVSS7.3AI score0.01613EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.12 views

The vulnerability of the EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate functions in the OpenSSL library for TLS and SSL protocols, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability of the EVPCipherUpdate, EVPEncryptUpdate, and EVPDecryptUpdate functions in the OpenSSL library for TLS and SSL protocols is related to a numerical overflow condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.5CVSS6.6AI score0.50732EPSS
SaveExploits0References20Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.18 views

The vulnerability of the Apache Traffic Server web server arises from insufficient validation of input data, allowing attackers to trigger service interruptions.

The vulnerability of the Apache Traffic Server web server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.02515EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.8 views

The vulnerability of the RPL routing protocol implementation in Contiki-NG operating systems for IoT devices allows a attacker to cause service failures.

The vulnerability of the RPL routing protocol implementation in Contiki-NG IoT devices is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

8.6CVSS7.7AI score0.00993EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.7 views

The vulnerability in the pickle.c module of the Python programming language, related to integer overflow, allows attackers to cause a service failure.

The vulnerability in the pickle.c module of the Python programming language is related to a numerical overflow due to the large value of LONGBINPUT. This value is incorrectly handled when attempting to double the size of an object. Exploiting this vulnerability can allow a remote attacker to caus...

7.5CVSS6.8AI score0.05789EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.10 views

The vulnerability of the `FindServiceControlURLPath` and `FindServiceEventURLPath` functions in the Portable UPnP SDK library, related to pointer dereferencing errors, allows a malicious actor to trigger a service failure.

The vulnerability of the FindServiceControlURLPath and FindServiceEventURLPath functions in the Portable UPnP SDK library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failure remotely...

7.5CVSS7.1AI score0.03469EPSS
SaveExploits0References11Affected Software4
Rows per page
Query Builder