Lucene search
+L

1566 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.11 views

The vulnerability in the `read_objects` function of the `read.c` component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the readobjects function in the read.c component of the .fig conversion utility Fig2dev involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.1CVSS6.8AI score0.00716EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.8 views

The vulnerability of the DataBuf function data(subBox.length-sizeof(box)) in the image.cpp component of the Exiv2 metadata management library, which allows a hacker to cause a service failure.

The vulnerability of the DataBuf function datasubBox.length-sizeofbox in the image.cpp component of the Exiv2 metadata management library is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.1CVSS6.8AI score0.01664EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.9 views

The vulnerability of the printLong function in the tags_int.cpp component of the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the printLong function in the tagsint.cpp component of the Exiv2 media metadata management library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created tif file...

7.1CVSS6.6AI score0.01309EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.10 views

The vulnerability of the put_epel_hv_fallback function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putepelhvfallback function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

7.8CVSS7.1AI score0.0122EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.10 views

The vulnerability of component 2D of the Oracle GraalVM Enterprise Edition, which allows a hacker to trigger a service failure

The vulnerability of the 2D component of the Oracle GraalVM Enterprise Edition exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.2AI score0.03306EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.9 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020, which exploit memory after it is released, allow attackers to trigger service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these...

5.5CVSS6.6AI score0.0275EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.9 views

The vulnerability of the ImageIO component in the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS6.1AI score0.03486EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.12 views

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol allows a perpetrator to cause a service failure.

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS5.8AI score0.04521EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.11 views

Vulnerability of the Server component: DML of the MySQL database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server component: The DML part of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.5AI score0.01718EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.7 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.02088EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.9 views

Vulnerability of the Server component: Locking of the MySQL database management system, allowing attackers to cause service interruptions.

The vulnerability of the Server component: Locking the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.5AI score0.02088EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.11 views

Vulnerability of the Server component: DML of the MySQL database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server component: The DML mechanism of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.5AI score0.02518EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:0 a.m.9 views

The vulnerability of the PROXY protocol library in the Golang language, Go-proxyproto, allows a hacker to induce a service failure.

The vulnerability of the PROXY protocol library in the Golang language is related to the absence of a timeout during the waiting for the proxy protocol header. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01648EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.15 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.02196EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.11 views

The vulnerability of the elf::section::as_strtab function in the library for reading ELF and DWARF v4 files in Libelfin allows a attacker to cause a service failure.

The vulnerability of the elf::section::asstrtab function in the library for reading ELF and DWARF v4 files is related to insufficient elimination of special elements in the request. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created ELF...

7.1CVSS5.9AI score0.00689EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.4 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.02588EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.8 views

The vulnerability of the TIFFVGetField function in the libtiff/tif_dir.c component of the LibTIFF library allows a attacker to cause a service failure.

The vulnerability of the TIFFVGetField function in the libtiff/tifdir.c component of the LibTIFF library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

7.1CVSS6.7AI score0.01456EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.10 views

The vulnerability of the mbedtls_pkcs12_derivation function in Mbed TLS software implementations allows a attacker to cause a service failure.

The vulnerability of the mbedtlspkcs12derivation function in Mbed TLS software implementations for TLS and SSL protocols is related to errors in processing the length of the input password. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

5.3CVSS7.1AI score0.02214EPSS
SaveExploits1References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:0 a.m.8 views

The vulnerability of the Windows IKE extension of the Windows operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Windows IKE extension in the Windows operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.3AI score0.04163EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/02/21 12:0 a.m.6 views

libsolv 缓冲区错误漏洞

libsolv is a library for checking package dependencies. libsolv suffers from a buffer overflow vulnerability that stems from two heap overflow vulnerabilities in the resolvedependencies function in src/solver.c in the decision mapping variable, which can be exploited by an attacker to cause a...

6.5CVSS6.1AI score0.01794EPSS
SaveExploits1References6
Rows per page
Query Builder