Lucene search
+L

5261 matches found

BDU FSTEC
BDU FSTEC
added 2022/07/13 12:0 a.m.7 views

The vulnerability in the `register.c` component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the register.c component of the Vim text editor is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...

7.8CVSS6.8AI score0.01243EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:0 a.m.12 views

The vulnerability of microprogrammed software in industrial switches such as SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M lies in the copying of buffers without checking the size of the input data. This allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software in industrial switches SCALANCE X302-7, SCALANCE X304-2FE, SCALANCE X306-1LD FE, SCALANCE X307-2, SCALANCE X307-3, SCALANCE X307-3LD, SCALANCE X308-2, SCALANCE X310, SCALANCE X320-1, SCALANCE X408-2, SCALANCE XR324-4M, and SCALANCE XR324-12M, SIPL...

8.2CVSS7.2AI score0.01364EPSS
SaveExploits0References2Affected Software13
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:0 a.m.10 views

The vulnerability of the ASUS Control Center, which involves insecure management of privileges, allows a perpetrator to escalate their privileges or cause a partial service failure.

The vulnerability of the ASUS Control Center, a component of information technology management systems, is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to increase their privileges or cause partial service interruptions...

7.5CVSS6.6AI score0.00863EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/11 1:27 a.m.4 views

CVE-2022-32456

Digiwin BPM’s function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify, delete database or disrupt service...

9.8CVSS7.6AI score0.0156EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.19 views

The vulnerability of the cross-platform hypervisor Xen in Linux operating systems allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the cross-platform hypervisor Xen in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or cause service failures...

7.1CVSS6.4AI score0.00322EPSS
SaveExploits0References22Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.18 views

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

10CVSS8.8AI score0.78581EPSS
SaveExploits8References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.11 views

The vulnerability of the OSPF network protocol implementation in the microcomputer-based switching devices SCALANCE of the XM-400 and XR-500 series allows a intruder to trigger a service failure.

The vulnerability of the OSPF network protocol implementation in the microcomputer-based switching devices SCALANCE models XM-400 and XR-500 is related to the lack of integrity checks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.1AI score0.00601EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to insufficient validation of input data, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

10CVSS8AI score0.00905EPSS
SaveExploits0References5Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is freed, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a service failure...

10CVSS8.1AI score0.00879EPSS
SaveExploits0References5Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.8 views

The vulnerability of the fromAddressNat() function in the Tenda AC18 router’s microprogramming software allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the fromAddressNat function in the Tenda AC18 router’s microprogramming software is related to the issue of writing operations outside of the buffer memory when processing parameters entrys and mitInterface. Exploiting this vulnerability can allow a malicious actor to cause...

10CVSS8.3AI score0.0138EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.9 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to insufficient validation of input data, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

10CVSS8AI score0.01309EPSS
SaveExploits0References6Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.9 views

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

9.3CVSS6.8AI score0.86979EPSS
SaveExploits4References17Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.9 views

The vulnerability of the mod_sed content filter in the Apache HTTP Server allows a hacker to induce a service failure.

The vulnerability of the modsed content filter in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.9AI score0.90407EPSS
SaveExploits0References20Affected Software10
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.8 views

The vulnerability of the decode/encodeBody component in the Envoy proxy server allows a attacker to induce a service failure.

The vulnerability of the decode/encodeBody component in the Envoy proxy server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by uploading a specially created zip file...

10CVSS7.1AI score0.01537EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.7 views

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Flash Player software is related to the execution of operations beyond the buffer in memory when processing SWF content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially created malware file...

9.3CVSS8.3AI score0.70384EPSS
SaveExploits11References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:0 a.m.9 views

The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s BiosCfgTool allows a hacker to execute arbitrary code, increase their privileges, or cause service failures.

The vulnerability of the SBIOS component in the NVIDIA DGX A100 server’s BiosCfgTool is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, increase their privileges, or cause service failures...

8.2CVSS8.1AI score0.00243EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/01 12:0 a.m.16 views

The vulnerability of the implementation of Cisco IOS protocols for Integrated Services Routers Generation 2 allows a attacker to trigger a device reboot or cause a service failure.

The vulnerability of the Cisco IOS protocol for Integrated Services Routers Generation 2 ISR G2 is related to errors in Ethernet packet classification. Exploiting this vulnerability can allow a malicious actor to trigger a device reboot or cause service failure...

6.5CVSS6.5AI score0.02171EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/01 12:0 a.m.14 views

The vulnerability of the Border Gateway Protocol (BGP) implementation in the Ethernet VPN (EVPN) technology of the Cisco IOS XR operating system allows a attacker to cause a service failure.

The vulnerability of the Border Gateway Protocol BGP implementation of the Ethernet VPN EVPN technology in the Cisco IOS XR operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS6.1AI score0.05278EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/01 12:0 a.m.14 views

The vulnerability of the Link Layer Discovery Protocol (LLDP) implementation in Cisco IOS, Cisco IOS XE, and Cisco IOS XR operating systems allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco IOS, Cisco IOS XE, and Cisco IOS XR systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause...

8.8CVSS8.4AI score0.03376EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/01 12:0 a.m.12 views

The vulnerability of the Internet Key Exchange version 2 (IKEv2) function in Cisco IOS operating systems allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange version 2 IKEv2 module in Cisco IOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

8.6CVSS7.5AI score0.07237EPSS
SaveExploits0References3
Rows per page
Query Builder