Lucene search
+L

1596 matches found

BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.7 views

The vulnerability in the input method editor (IME) editing methods of Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the input method editor IME editing tools in Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after event handling is released. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.3CVSS7.1AI score0.02026EPSS
SaveExploits0References16Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/12/28 12:0 a.m.4 views

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to insufficient input validation, allowing attackers to trigger service failures.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

7.8CVSS7.5AI score0.02598EPSS
SaveExploits0References13Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/12/28 12:0 a.m.8 views

The vulnerability in the WebGL component of Firefox browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the WebGL component in Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS8.1AI score0.04687EPSS
SaveExploits1References18Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.11 views

The vulnerability of the realloc function in the Pillow image processing library allows a malicious actor to cause a service failure.

The vulnerability of the realloc function in the Pillow image processing library libImaging/TiffDecode.c is due to a numerical overflow during the processing of TIFF images. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

9.3CVSS6.5AI score0.01975EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.8 views

The vulnerability of the Kernel Routing Table module in the Junos operating system, which allows a hacker to cause a service failure

The vulnerability of the Kernel Routing Table module in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.0124EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.6 views

The vulnerability of the PCX P library for image processing in Pillow allows a hacker to trigger a service failure.

The vulnerability of the PCX P library for image processing in Pillow relates to the issue of the operation exceeding the buffer boundaries in memory during the encoding of PCX images. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

9.8CVSS6.7AI score0.0369EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:0 a.m.7 views

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to trigger a service failure.

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

10CVSS7.7AI score0.03622EPSS
SaveExploits1References16Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.6 views

The vulnerability of the Twisted Web network framework’s component, allowing a hacker to cause a service failure

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS7.4AI score0.03973EPSS
SaveExploits1References15Affected Software9
OSV
OSV
added 2020/12/09 7:15 p.m.10 views

CVE-2020-28086

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

7.5CVSS6.9AI score
SaveExploits0References1
NVD
NVD
added 2020/12/09 7:15 p.m.29 views

CVE-2020-28086

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

7.5CVSS7.7AI score0.00586EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/09 7:15 p.m.20 views

Default credentials

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

5CVSS7.6AI score0.00586EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/12/09 6:9 p.m.66 views

CVE-2020-28086

The CVE-2020-28086 issue affects pass through 1.7.3, where a mismatch allows decrypting the wrong password from a Git-managed password store. Exploitation requires the attacker to control the central Git server (or other members’ machines) and at least one service in the password store, then rena...

7.5CVSS7.7AI score0.00586EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/09 6:9 p.m.38 views

CVE-2020-28086

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

7.7AI score0.00586EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/12/01 12:0 a.m.8 views

The vulnerability of the input packet processing function implementation in Cisco IOS XR allows a attacker to trigger a service failure.

The vulnerability of the input packet processing function in Cisco IOS XR lies in resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.6CVSS7.5AI score0.01878EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/26 12:0 a.m.8 views

The vulnerability of Microsoft Exchange Server servers arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of Microsoft Exchange Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.5CVSS7.1AI score0.03633EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2020/11/24 12:0 a.m.7 views

The vulnerability of Intel SGX DCAP microprogramming software, which arises due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Intel SGX DCAP microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.5CVSS6.5AI score0.00584EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:0 a.m.9 views

The vulnerability of Cisco Firepower Management Center’s software management system allows a intruder to trigger a service failure.

The vulnerability of Cisco Firepower Management Center’s software management system is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.3CVSS5.9AI score0.00729EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/10 12:0 a.m.8 views

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms allows attackers to trigger a service failure.

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

3.7CVSS6.4AI score0.03758EPSS
SaveExploits0References17Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.10 views

The vulnerability of Cisco Aironet, Catalyst, and Business access points relates to uncontrolled resource consumption, allowing attackers to cause service interruptions.

The vulnerability of Cisco Aironet and Catalyst access points is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

8.6CVSS7.6AI score0.01415EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:0 a.m.10 views

The vulnerability in the implementation of the Control and Provisioning of Wireless Access Points (CAPWAP) protocol for the Cisco IOS XE operating system on Cisco Catalyst wireless network controllers and Catalyst 9100 access points allows a attacker to cause a service failure.

The vulnerability of the Control and Provisioning of Wireless Access Points CAPWAP implementation in the Cisco IOS XE operating system on Cisco Catalyst wireless network controllers and Catalyst 9100 access points is related to errors in processing input data. Exploiting this vulnerability can...

8.6CVSS7.6AI score0.01361EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder