Lucene search
+L

1902 matches found

BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•13 views

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird is related to reading data from memory beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

9.4CVSS7.3AI score0.03106EPSS
SaveExploits1References17Affected Software10
BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•9 views

The vulnerability of the application programming interface of the IndexedDB client storage in browsers such as Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.

The vulnerability of the application programming interface of the IndexedDB client storage engine in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause servic...

10CVSS7.4AI score0.02631EPSS
SaveExploits0References15Affected Software10
BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•11 views

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

10CVSS7.5AI score0.02631EPSS
SaveExploits0References15Affected Software10
BDU FSTEC
BDU FSTEC
•added 2021/01/13 12:00 a.m.•13 views

The vulnerability of the Skia graphic library in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the Skia graphic library in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS7.8AI score0.024EPSS
SaveExploits0References14Affected Software9
BDU FSTEC
BDU FSTEC
•added 2020/12/28 12:00 a.m.•8 views

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to insufficient input validation, allowing attackers to trigger service failures.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

7.8CVSS7.5AI score0.02565EPSS
SaveExploits0References13Affected Software9
BDU FSTEC
BDU FSTEC
•added 2020/12/28 12:00 a.m.•12 views

The vulnerability in the WebGL component of Firefox browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the WebGL component in Firefox browsers, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS8.1AI score0.04627EPSS
SaveExploits1References18Affected Software10
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•11 views

The vulnerability of the Kernel Routing Table module in the Junos operating system, which allows a hacker to cause a service failure

The vulnerability of the Kernel Routing Table module in the Junos operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.0124EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•11 views

The vulnerability of the PCX P library for image processing in Pillow allows a hacker to trigger a service failure.

The vulnerability of the PCX P library for image processing in Pillow relates to the issue of the operation exceeding the buffer boundaries in memory during the encoding of PCX images. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

9.8CVSS7AI score0.0369EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•12 views

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a perpetrator to trigger a service failure.

The vulnerability of SMIL animation functions in browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

10CVSS7.7AI score0.03575EPSS
SaveExploits1References16Affected Software10
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•19 views

The vulnerability of the realloc function in the Pillow image processing library allows a malicious actor to cause a service failure.

The vulnerability of the realloc function in the Pillow image processing library libImaging/TiffDecode.c is due to a numerical overflow during the processing of TIFF images. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

9.3CVSS6.5AI score0.01975EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2020/12/15 12:00 a.m.•10 views

The vulnerability of the Twisted Web network framework’s component, allowing a hacker to cause a service failure

The vulnerability of the Twisted Web network framework’s component involves insufficient validation of input data during the processing of HTTP headers. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS7.4AI score0.03973EPSS
SaveExploits1References15Affected Software9
OSV
OSV
•added 2020/12/09 7:15 p.m.•15 views

CVE-2020-28086

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

7.5CVSS6.9AI score
SaveExploits0References1
NVD
NVD
•added 2020/12/09 7:15 p.m.•36 views

CVE-2020-28086

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

7.5CVSS7.7AI score0.00683EPSS
SaveExploits0References1
Prion
Prion
•added 2020/12/09 7:15 p.m.•26 views

Default credentials

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

5CVSS7.6AI score0.00683EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/12/09 6:09 p.m.•52 views

CVE-2020-28086

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

7.7AI score0.00683EPSS
SaveExploits0References1
CVE
CVE
•added 2020/12/09 6:09 p.m.•80 views

CVE-2020-28086

The CVE-2020-28086 issue affects pass through 1.7.3, where a mismatch allows decrypting the wrong password from a Git-managed password store. Exploitation requires the attacker to control the central Git server (or other members’ machines) and at least one service in the password store, then rena...

7.5CVSS7.7AI score0.00683EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/12/09 6:09 p.m.•2 views

CVE-2020-28086

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

8.7CVSS0.00683EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/09 12:00 a.m.•3 views

CVE-2020-28086: Improper Verification of Cryptographic Signature

pass through 1.7.3 has a possibility of using a password for an unintended resource. For exploitation to occur, the user must do a git pull, decrypt a password, and log into a remote service with the password. If an attacker controls the central Git server or one of the other members' machines, a...

7.5CVSS5.9AI score0.00683EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/12/01 12:00 a.m.•16 views

The vulnerability of the input packet processing function implementation in Cisco IOS XR allows a attacker to trigger a service failure.

The vulnerability of the input packet processing function in Cisco IOS XR lies in resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.6CVSS7.5AI score0.01901EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/11/26 12:00 a.m.•17 views

The vulnerability of Microsoft Exchange Server servers arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of Microsoft Exchange Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

8.5CVSS7.1AI score0.03633EPSS
SaveExploits1References3
Rows per page
Query Builder