Lucene search
+L

1596 matches found

Spring Security Advisories
Spring Security Advisories
added 2023/06/19 12:0 a.m.14 views

Spring Boot 3.1's ConnectionDetails abstraction

If you've used Spring Boot for a while, you're probably familiar with setting up connection details using properties. For example, you may have used spring.datasource.url to configure a JDBC connection. In Spring Boot 3.1 this continues to work as you'd expect, but we've changed things a bit unde...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/06/13 12:0 a.m.11 views

The vulnerability of Juniper Networks’ Junos operating system in Junos ACX2K Series devices, which allows a hacker to trigger a service failure.

The vulnerability of Juniper Networks’ Junos operating system in ACX2K Series devices is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger service failures remotely...

7.8CVSS7.1AI score0.00616EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/13 12:0 a.m.10 views

The vulnerability of the setUsbUnload function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure.

The vulnerability of the setUsbUnload function in the microprogramming software for Tenda AC18 routers is related to insufficient cleaning of input data during the processing of the deviceName parameter. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

10CVSS7.7AI score0.02426EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2023/06/13 12:0 a.m.10 views

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to incorrect handling of missing values. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/13 12:0 a.m.12 views

The vulnerability of the CMPv2 protocol implementation in Juniper Networks’ Junos OS allows a attacker to trigger a service failure.

The vulnerability of the CMPv2 certification management protocol implementation in Juniper Networks’ Junos OS lies in insufficient checks for exceptional states. Exploiting this vulnerability allows a malicious actor to trigger a service failure remotely...

7.8CVSS7.4AI score0.00417EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/13 12:0 a.m.8 views

The vulnerability of the Packet Forwarding Engine (PFE) module of the JunOS operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in the JunOS operating system is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.00616EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/13 12:0 a.m.9 views

The vulnerability of the BGP routing protocol on Juniper Networks’ Junos OS and Junos OS Evolved systems allows a attacker to cause a service failure.

The vulnerability of the BGP routing protocol in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.1AI score0.00644EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/13 12:0 a.m.12 views

The vulnerability of the Routing Protocol Demon (rpd) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerabilities of Time-of-Check-Time-of-Use TOCTOU and Race Conditions in the routing protocol daemon rpd of Juniper Networks’ Junos OS and Junos OS Evolved are related to state management errors. Exploitation of these vulnerabilities can allow an attacker to cause service interruptions...

5.9CVSS6.2AI score0.00456EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/09 12:0 a.m.8 views

The vulnerability of the routing protocol BGP implementation in Juniper Networks’ Junos OS and Junper Networks’ Junos OS Evolved systems allows a attacker to cause service interruptions.

The vulnerability of the Border Gateway Protocol BGP implementation in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotel...

7.8CVSS7.2AI score0.00616EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/09 12:0 a.m.10 views

The vulnerabilities of the MP4BytesProperty and MP4StringProperty classes in the library for creating, modifying, and reading MP4 files, mp4v2, allow attackers to cause service interruptions.

The vulnerability of the MP4BytesProperty and MP4StringProperty classes in the library for creating, modifying, and reading MP4 files, mp4v2, is related to the issue where operations are performed outside of the buffer during the processing of variable count values. Exploiting this vulnerability...

10CVSS6.1AI score0.00233EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:0 a.m.10 views

The vulnerability of the Cisco Discovery Protocol implementation in NX-OS and Cisco FXOS devices allows a attacker to induce a service failure.

The vulnerability of the Cisco Discovery Protocol implementation in NX-OS and Cisco FXOS devices relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.5CVSS6.5AI score0.00659EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/31 12:0 a.m.11 views

The vulnerability of the programming software for PLCs (programmable logic controllers), namely EcoStruxure Control Exper, arises from deficiencies in the separation of the controlled system area. This allows a intruder to carry out unauthorized maintenance actions.

The vulnerability of the EcoStruxure Control Exper programming tool for programmable logic controllers is related to deficiencies in the separation of the controlled system area. Exploiting this vulnerability could allow a malicious actor to perform a service failure remotely...

5.5CVSS5.9AI score0.00146EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.14 views

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software of Schneider Electric’s Modicon M340 programmable logic controller is related to the falsification of inter-site requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.0093EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/19 12:0 a.m.11 views

The vulnerability of the `bgp_openOptionParse()` function in the bgpd daemon, a software component for implementing routing on Unix-like systems, allows a attacker to cause a service failure.

The vulnerability of the bgpopenOptionParse function in the bgpd daemon, a software component for implementing routing protocols on Unix-like systems, is related to the issue of the operation going beyond the buffer during the processing of BGP OPEN messages with a value of 0xff. Exploiting this...

7.8CVSS7.1AI score0.01983EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/12 12:0 a.m.7 views

The vulnerability of the InnoDB component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component of the MySQL Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.1CVSS6.3AI score0.01372EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/12 12:0 a.m.10 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.8CVSS6.3AI score0.01116EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.11 views

The vulnerability of the BGP OPEN Message Handler component of the networking routing implementation software on Unix-like systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely.

The vulnerability of the BGP OPEN Message Handler component of the networking routing implementation software on Unix-like systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS7.3AI score0.01983EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.10 views

The vulnerabilities of the software implementations of OPC UA methods for integrating communication with the Softing OPC UA C++ SDK, the data integration tool Softing edgeAggregator, and the software modules for connecting controllers such as Softing edgeConnector Modbus, Softing edgeConnector 840D, and Softing edgeConnector Siemens, allow attackers to cause service interruptions.

The vulnerability of the implementation of OPC UA software for connection integration with Softing OPC UA C++ SDK, the data integration tool Softing edgeAggregator, and the software modules for connecting controllers such as Softing edgeConnector Modbus, Softing edgeConnector 840D, and Softing...

7.8CVSS7.1AI score0.00892EPSS
SaveExploits0References4Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.8 views

The vulnerability of the SIP ALG server of Juniper Networks Junos OS allows a attacker to trigger a service failure.

The vulnerability of the SIP ALG server of Juniper Networks Junos OS is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.1AI score0.00616EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/03 12:0 a.m.11 views

The vulnerability of the IBM DB2 database management system, related to errors in processing input data, allows a perpetrator to cause a service failure.

The vulnerability of the IBM DB2 database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.1AI score0.01018EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder