Lucene search
+L

66 matches found

BDU FSTEC
BDU FSTEC
added 2023/02/08 12:00 a.m.13 views

The vulnerability of the jxl::FindExifTagPosition function in the JPEG XL codec, which allows a hacker to cause a service failure.

The vulnerability of the jxl::FindExifTagPosition function in the JPEG XL codec is related to the execution of operations outside of the buffer’s boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

3.3CVSS5.7AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/25 12:00 a.m.26 views

Vulnerabilities of the xtables-nft-multi and xtables-legacy-multi tools in the iptables package of the EMIAS OS operating system, which allow a hacker to trigger a memory leak.

The vulnerabilities of the xtables-nft-multi and xtables-legacy-multi tools in the iptables package of the EMIAS OS operating system are related to memory release errors. Exploiting these vulnerabilities can allow an attacker to cause service failures or other adverse effects...

5.5CVSS5.5AI score
SaveExploits0Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/01/25 12:00 a.m.18 views

The vulnerability of the cbq_classify() function in the network packet scheduling subsystem (net/sched/sch_cbq.c) in the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the cbqclassify function in the network packet scheduling subsystem net/sched/schcbq.c of the Linux kernel is related to an incorrect definition of the class type. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00312EPSS
SaveExploits0References17Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:00 a.m.12 views

The vulnerability of the ngx_http_hls_module module in the NGINX Application Monitoring and Management Platform Ingress Controller allows a attacker to cause service interruptions or potentially exert other effects.

The vulnerability of the ngxhttphlsmodule module in the NGINX Application Monitoring and Management Controller platform relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service failures or potentially have other adver...

7CVSS7.4AI score0.0022EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/06/22 12:00 a.m.17 views

PT-2022-3176 · Emerson · Emerson Deltav Distributed Control System

Name of the Vulnerable Software and Affected Versions: Emerson DeltaV Distributed Control System DCS versions prior to 14.3 Description: The issue is related to insufficient verification of firmware integrity, specifically an inadequate checksum approach and lack of signature. This could...

7.8CVSS7.4AI score0.00149EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:00 a.m.12 views

The vulnerability of the XFRM subsystem in the Linux operating system allows a hacker to gain access to confidential information or cause a service failure.

The vulnerability of the XFRM subsystem in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

7.8CVSS6.5AI score0.00503EPSS
SaveExploits1References18Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:00 a.m.12 views

The vulnerability of the php_wddx_process_data function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the phpwddxprocessdata function ext/wddx/wddx.c in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures by using an invalid ISO 8601 time value...

10CVSS7.4AI score0.06538EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:00 a.m.17 views

The vulnerability of the Glances monitoring tool arises from improper restrictions on XML links to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Glances monitoring tool is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS7.8AI score0.01639EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.13 views

The vulnerability of Xen hypervisors on x86 Intel systems, related to the lack of a mechanism for managing privileges, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors on x86 Intel systems is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

7.8CVSS7.2AI score0.00359EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:00 a.m.10 views

The vulnerability of the X.org server, related to a countable loss of significance, allows a perpetrator to access confidential information or cause service failures.

The vulnerability of the X.org server is related to a countable amount of significance loss. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

7.8CVSS7.2AI score0.0105EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:00 a.m.11 views

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to trigger a service failure.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

6CVSS6.6AI score0.00434EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/14 12:00 a.m.11 views

The vulnerability of the master.py component in the Configuration Management system and the remote execution of SaltStack operations allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the master.py component of the Configuration Management system and the remote execution of SaltStack operations is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidentia...

10CVSS7.5AI score0.96614EPSS
SaveExploits22References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:00 a.m.10 views

The vulnerability of the pvrdma_realize function in the PVRDMA virtual network adapter allows a hacker to induce a service failure.

The vulnerability of the pvrdmarealize function in the PVRDMA virtual network adapter emulator for hardware emulation software QEMU is related to deficiencies in resource release after the expiration of its useful lifespan. Exploiting this vulnerability can allow an attacker to cause a service...

5.5CVSS6.5AI score0.00488EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:00 a.m.10 views

The vulnerability of the WriteTIFFImage function in the program for reading and editing ImageMagick graphic files involves accessing confidential data beyond the buffer limit of memory. This allows attackers to gain access to sensitive information and cause system failures.

The vulnerability of the WriteTIFFImage function in the ImageMagick program, which is used for reading and editing graphic files, is related to the absence or incomplete cleaning of input data. Exploiting this vulnerability can allow a malicious actor to compromise data confidentiality, as well a...

8.1CVSS6.7AI score0.03886EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/01/29 12:00 a.m.16 views

The vulnerability of the BGP protocol implementation in Cisco IOS XR allows a attacker to cause a service failure.

The vulnerability of the BGP protocol implementation in Cisco IOS XR lies in errors in the processing of BGP messages. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

8.6CVSS7.5AI score0.01312EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/01/15 12:00 a.m.12 views

Vulnerability of the npf_flower_spawn_phy_reprs() function (drivers/net/ethernet/netronome/nfp/flower/main.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the nfpflowerspawnPhyReprs function drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.1CVSS6.9AI score0.02814EPSS
SaveExploits0References12Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:00 a.m.11 views

The vulnerability of the mwifiex_process_country_ie() function (driver/net/wireless/marvell/mwifiex/sta_ioctl.c) in the Marvell WiFi driver for the Linux operating system exists due to a buffer overflow issue. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mwifiexprocesscountryie function driver/net/wireless/marvell/mwifiex/staioctl.c in the Marvell WiFi driver for the Linux operating system is related to memory buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data,...

10CVSS7.8AI score0.0776EPSS
SaveExploits0References62Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.8 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

6CVSS6.9AI score0.00606EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:00 a.m.12 views

The vulnerability in the UIProcess subsystem of the rendering module in WebKitGTK+ and WebKitGTK allows a attacker to cause a service failure or affect the confidentiality and integrity of the protected information.

The vulnerability of the UIProcess subsystem in display modules of WebKitGTK+ and WebKitGTK arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or compromise the confidentiality and integrity of...

10CVSS8AI score0.1318EPSS
SaveExploits4References5Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.10 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

7.8CVSS6.5AI score0.02191EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder