Lucene search
+L

1373 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/25 12:00 a.m.15 views

The vulnerability of the sapi/fpm/fpm/fpm_log.c component, a PHP programming language interpreter, allows an attacker to disclose protected information or cause service failures.

The vulnerability of the sapi/fpm/fpm/fpmlog.c component, a PHP programming language interpreter, is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

9.4CVSS7.8AI score0.04099EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:00 a.m.10 views

The vulnerability of the ts_obj_print_bio function in the OpenSSL library, which allows a hacker to cause a service failure

The vulnerability of the tsobjprintbio function in the OpenSSL library is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS7.7AI score0.28411EPSS
SaveExploits1References26Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/21 12:00 a.m.17 views

The vulnerability of the ext/session/session.c component in the PHP programming language allows a attacker to cause a service failure or potentially cause other effects.

The vulnerability of the ext/session/session.c component of the PHP programming language interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially cause other adverse effects...

10CVSS7.5AI score0.05189EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:00 a.m.11 views

The vulnerability of the `php_wddx_push_element` function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the phpwddxpushelement function ext/wddx/wddx.c in the PHP programming language is caused by buffer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure due to an incorrect logical element in an XML document...

7.8CVSS7.7AI score0.11276EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.14 views

The vulnerability of the genptk_text component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the genptktext component of the .fig Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting the .fig file into a .ptk format...

7.8CVSS6.1AI score0.01059EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.13 views

The vulnerability of the Exiv2 metadata management library, related to the lack of zero-division checking, allows a perpetrator to trigger a service failure.

The vulnerability of the Exiv2 media metadata management library is related to the lack of checks for division by zero. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created image file...

7.1CVSS6.5AI score0.00984EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:00 a.m.10 views

The vulnerability of the Safe Browsing service in Microsoft Edge and Google Chrome browsers allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the Safe Browsing service in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially created malicious web page...

10CVSS8.2AI score0.00834EPSS
SaveExploits1References11Affected Software5
Prion
Prion
added 2022/02/24 3:15 p.m.20 views

Design/Logic Flaw

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

4.3CVSS5.5AI score0.00781EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/09 11:15 p.m.10 views

CVE-2022-20045

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS06126820...

7.8CVSS7.2AI score0.00146EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/09 11:15 p.m.12 views

CVE-2022-20044

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS06126814...

7.8CVSS7.2AI score0.00146EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/09 11:15 p.m.23 views

CVE-2022-20044

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS06126814...

7.8CVSS0.00146EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/09 11:15 p.m.7 views

CVE-2022-20045

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS06126820...

7.8CVSS7.2AI score0.00146EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/09 11:15 p.m.5 views

CVE-2022-20044

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS06126814...

7.8CVSS5.9AI score0.00146EPSS
SaveExploits0References1
NVD
NVD
added 2022/02/09 11:15 p.m.14 views

CVE-2022-20045

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS06126820...

7.8CVSS0.00146EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/09 11:15 p.m.24 views

Design/Logic Flaw

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS06126820...

4.6CVSS7.6AI score0.00146EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/02/09 11:15 p.m.21 views

Design/Logic Flaw

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS06126814...

4.6CVSS7.6AI score0.00146EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/02/09 10:05 p.m.101 views

CVE-2022-20045

CVE-2022-20045 describes a vulnerability in Bluetooth where a use-after-free can cause a service crash, enabling local escalation of privilege with no extra execution privileges required and no user interaction. The issue is evidenced across multiple sources (NVD, Red Hat, CVE List). The underlyi...

7.8CVSS7.7AI score0.00146EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/09 10:05 p.m.31 views

CVE-2022-20045

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126820; Issue ID: ALPS06126820...

7.9AI score0.00146EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/02/09 10:05 p.m.27 views

CVE-2022-20044

In Bluetooth, there is a possible service crash due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06126814; Issue ID: ALPS06126814...

7.9AI score0.00146EPSS
SaveExploits0References1
CVE
CVE
added 2022/02/09 10:05 p.m.86 views

CVE-2022-20044

CVE-2022-20044 involves a use-after-free in Bluetooth that can crash the Bluetooth service and enable local escalation of privilege without user interaction. Exploitation is local with low privileges required and LOW attack complexity; the vulnerability impacts confidentiality, integrity, and ava...

7.8CVSS7.7AI score0.00146EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder