Lucene search
+L

5271 matches found

BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.11 views

The vulnerability of the _arc_error_normalized function in the Cairo vector graphics library’s cairo-arc.c component allows a hacker to cause a service failure.

The vulnerability of the arcerrornormalized function in the Cairo vector graphics library’s cairo-arc.c file is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.6AI score0.02142EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.7 views

The vulnerability of the DNS BIND server, related to the allocation of unlimited memory, allows attackers to cause service failures.

The vulnerability of the DNS BIND server is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.6AI score0.03776EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.14 views

The vulnerability of the Shadow account management tool is related to insufficient checking of the status of shared resources. This allows a perpetrator to compromise data integrity and also cause service interruptions.

The vulnerability of the Shadow account management tool is related to insufficient checks on the status of the shared resource. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

4CVSS5.9AI score0.00308EPSS
SaveExploits0References19Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.11 views

The vulnerability of NVIDIA Virtual GPU driver relates to the use of files and directories accessible from external parties. This allows attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service interruptions.

The vulnerability of NVIDIA Virtual GPU driver relates to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service...

7.8CVSS7.5AI score0.00194EPSS
SaveExploits0References3Affected Software16
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.12 views

The vulnerability of the C-ares asynchronous DNS query library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the C-ares asynchronous DNS query library is related to an uncontrolled resource consumption when the packet length is interpreted incorrectly. Exploiting this vulnerability can allow a malicious actor to cause service failures through corrupted UDP packets...

7.8CVSS6.5AI score0.01577EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.12 views

The vulnerability of the PDF processing library PyPDF2, related to algorithmic complexity, allows attackers to trigger a service denial.

The vulnerability of the PyPDF2 library for processing PDF files is related to algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.5AI score0.00625EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.13 views

The vulnerability of the cvtGlyph function in the FoFiType1C component of the Poppler PDF rendering library allows a malicious actor to cause a service failure.

The vulnerability of the cvtGlyph function in the FoFiType1C component of the Poppler PDF rendering library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created P...

7.8CVSS7AI score0.01167EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.10 views

The vulnerability of the NILFS file system driver in Linux operating systems allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NILFS file system driver in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.6AI score0.00243EPSS
SaveExploits0References33Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.8 views

The vulnerability of the LZ4 data compression algorithm, which allows unauthorized access to confidential data by writing beyond the buffer boundaries, thereby enabling attackers to compromise the integrity of sensitive information and cause service interruptions.

The vulnerability of the lossless LZ4 data compression algorithm is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions...

9.3CVSS7.1AI score0.09116EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.21 views

The vulnerability of the PDF component in the Google Chrome web browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created PD...

10CVSS7.6AI score0.00954EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.15 views

The vulnerability of the OpenImageIO image processing library, related to uncontrolled recursion, allows a hacker to cause a service failure.

The vulnerability of the OpenImageIO image processing library is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created image file...

7.8CVSS7.4AI score0.01344EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.8 views

The vulnerability of the PDF component in the Google Chrome web browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the PDF component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created PD...

10CVSS7.6AI score0.00918EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.10 views

The vulnerability of the H5O_dtypeDecodeHelper() function in the H5Odtype.c component of the HDF5 processing library allows a attacker to cause a service failure.

The vulnerability of the H5OdtypeDecodeHelper in the H5Odtype.c component of the HDF file processing library HDF5 is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause service interruptions by using a...

7.8CVSS7AI score0.01332EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.10 views

The vulnerability in the get_token function of the pnm2png.c component from the PNG bitmap library allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gettoken function in the pnm2png.c component of the PNG bitmap handling library involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

10CVSS7.2AI score0.03541EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.9 views

The vulnerability of the Gstreamer multimedia framework, related to reading data beyond the buffer’s acceptable limits, allows a hacker to cause a service failure.

The vulnerability of the Gstreamer multimedia framework is related to reading data from buffer areas beyond their acceptable limits. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7AI score0.05372EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.10 views

The vulnerability of the auth_start_session() function on the XRDP server allows a hacker to trigger a service failure.

The vulnerability of the authstartsession function on the XRDP server relates to bypassing session restrictions. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.8CVSS6.1AI score0.00734EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.12 views

The vulnerability of the compiler for processing Markdown Marked, related to incorrect handling of regular expressions, allows a hacker to trigger a service failure.

The vulnerability of the compiler for processing Markdown marked text is related to incorrect handling of regular expressions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01758EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2023/11/09 2:12 p.m.34 views

Buffer Overflows

vlc is vulnerable to Buffer Overflows. An integer underflow vulnerability allows an attacker to exploit a flaw in the way that VLC handles packet lengths to cause a buffer overflow. The attacker could then use the vulnerability to execute arbitrary code on a vulnerable system, steal data, or...

7.5CVSS8AI score0.00914EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/08 12:00 a.m.13 views

The vulnerability of the aper.GetBitString function in the NGAP Message Handler component of the software for fifth-generation mobile communication networks (5G), free5GC, allows a attacker to cause a service failure.

The vulnerability of the aper.GetBitString function in the NGAP Message Handler component of the 5G mobile communication network management software free5GC is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.2AI score0.00724EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/08 12:00 a.m.11 views

The vulnerability of the Marked compiler/analyzer, related to incorrect processing of regular expressions, allows a hacker to trigger a service failure.

The vulnerability of the Marked compiler and analyzer is related to the incorrect processing of the regular expression inline.reflinkSearch. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS6.7AI score0.02743EPSS
SaveExploits1References6Affected Software3
Rows per page
Query Builder