Lucene search
+L

1654 matches found

BDU FSTEC
BDU FSTEC
added 2020/11/02 12:00 a.m.10 views

The vulnerability of the Apache Tomcat application server arises from the execution of a loop with an unreachable exit condition, allowing attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

7.8CVSS6.8AI score0.86608EPSS
SaveExploits2References12Affected Software15
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:00 a.m.9 views

Vulnerability of software packages for monitoring and data collection: MC Works64/MC Works32, FrameWorX server, centralized configuration environment for HMI-/SCADA applications, Platform Services software platform, GenBroker64/GenBroker32 application for managing access rights. This vulnerability allows a malicious actor to trigger a service failure.

The vulnerabilities of the software packages for supervisory control and data collection MC Works64/MC Works32, the FrameWorX server, the centralized configuration environment for HMI-/SCADA applications, the Platform Services software platform, and the GenBroker64/GenBroker32 application for...

7.8CVSS7.2AI score0.03596EPSS
SaveExploits0References5Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:00 a.m.13 views

The vulnerability of the BGP protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in Cisco IOS XR lies in insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5CVSS5.5AI score0.01057EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:00 a.m.12 views

The vulnerability of the Ignition 8 Gateway industrial automation software lies in the lack of restrictions on audit log entries, allowing a perpetrator to trigger a service failure.

The vulnerability of the Ignition 8 Gateway industrial automation software is related to the lack of restrictions on audit log entries. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

9.4CVSS7.2AI score0.01278EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/14 12:00 a.m.10 views

Vulnerability of software packages for supervisory control and data collection: MC Works64/MC Works32, FrameWorX server, centralized configuration environment for HMI-/SCADA applications: Workbench, software platform: Platform Services, application for organization of API exchange: GenBroker64/GenBroker32. This vulnerability is related to deficiencies in the deserialization mechanism, allowing a intruder to trigger a service failure.

The vulnerabilities of the software packages for supervisory control and data collection MC Works64/MC Works32, the FrameWorX server, the centralized configuration environment for HMI-/SCADA applications, the Platform Services software platform, and the GenBroker64/GenBroker32 application for...

7.8CVSS7.4AI score0.02032EPSS
SaveExploits0References5Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/10/09 12:00 a.m.10 views

The vulnerability of the Umbrella Connector component in Cisco IOS XE software for Cisco Catalyst 9200 Series network devices allows a hacker to induce a service failure.

The vulnerability of the Umbrella Connector component in the Cisco IOS XE software for Cisco Catalyst 9200 Series network devices is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

8.6CVSS7.5AI score0.01375EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/10/09 12:00 a.m.6 views

Spring-webmvc command execution vulnerability in hessian-based remote service calls

spring-webmvc is a java development framework. A command execution vulnerability exists in spring-webmvc's hessian-based remote service invocation, which can be exploited by an attacker to gain control of the server...

7.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/10/08 12:00 a.m.11 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS and Cisco IOS XE operating systems is related to incorrect error handling. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.4CVSS7.2AI score0.00426EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/10/07 12:00 a.m.10 views

The vulnerability in the Intel Raid Web Console 3, which exists due to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of Intel Raid Web Console 3 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.01524EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/07 12:00 a.m.16 views

The vulnerability of the FPC module in JunOS and JunOS Evolved operating systems allows a hacker to trigger a service failure.

The vulnerability of the FPC module in JunOS and JunOS Evolved operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.0132EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/10/07 12:00 a.m.12 views

The vulnerability of the RPD daemon in the JunOS operating system, allowing a intruder to trigger a maintenance failure

The vulnerability of the RPD daemon in the JunOS operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.9CVSS6.2AI score0.00683EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/01 12:00 a.m.16 views

The vulnerability of the FreeBSD operating system, related to entering an infinite loop when certain input data are provided, allows a perpetrator to cause a service failure.

The vulnerability of the FreeBSD operating system is related to entering an infinite loop when certain input data are provided. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS7.2AI score0.04289EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/10/01 12:00 a.m.17 views

The vulnerability of JunOS’s High-End SRX Series routers lies in insufficient validation of input data, allowing attackers to trigger service interruptions.

The vulnerability of JunOS operating system’s High-End SRX series routers exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.01284EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/29 12:00 a.m.15 views

The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the possibility of an operation exceeding the buffer boundaries in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of Intel Active Management Technology and Standard Manageability implementations lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.5CVSS7.7AI score0.02952EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/29 12:00 a.m.12 views

The vulnerability of the Intel Converged Security and Manageability Engine implementation arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.

The vulnerability of the Intel Converged Security and Manageability Engine implementation exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.3AI score0.01864EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.11 views

The vulnerability of Windows DNS services in Windows operating systems allows a perpetrator to cause service failures.

The vulnerability of Windows DNS services for operating systems is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.05051EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.11 views

The vulnerability of the software package for comparing URL addresses, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the URL-regex comparison software package is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.1AI score0.0262EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/03 12:00 a.m.9 views

The vulnerability of the Protocol Independent Multicast (PIM) implementation in the Cisco NX-OS network operating system allows a attacker to trigger a service failure.

The vulnerability of the Cisco NX-OS network operating system’s Protocol Independent Multicast PIM implementation is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.01781EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2020/09/02 9:24 p.m.26 views

Malicious Package in donotinstallthis

The package donotinstallthis contained malicious code. The package contained a script that was run as part of the install script. The script contacted a remote service tracking how many installations were done. There is no further compromise. Recommendation Remove the package from your environmen...

2.1AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/02 9:24 p.m.10 views

GHSA-73HR-6785-F5P8 Malicious Package in donotinstallthis

The package donotinstallthis contained malicious code. The package contained a script that was run as part of the install script. The script contacted a remote service tracking how many installations were done. There is no further compromise. Recommendation Remove the package from your environmen...

9.8CVSS7.2AI score
SaveExploits0References1
Rows per page
Query Builder