Lucene search
+L

5255 matches found

BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.12 views

Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to cause service failures or gain access to modify, add, or delete data.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain access to modify, add, or delete data using the MySQL network protocol...

7CVSS6.4AI score0.01223EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.14 views

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster, which allows attackers to disclose sensitive information or cause service failures.

Vulnerability of the Oracle MySQL Cluster component: The general system management of databases in Oracle MySQL Cluster is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

6.5CVSS6.2AI score0.01443EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.13 views

The vulnerability of the legacy_parse_param function in the Linux operating system’s kernel, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the legacyparseparam function in the Linux operating system’s kernel is related to incorrect checking of the length of passed parameters. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

8.4CVSS7AI score0.25151EPSS
SaveExploits11References21Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.9 views

Vulnerability of the MySQL Server component: The Optimizer component of the MySQL database management system allows a hacker to cause service failures or gain access to modify, add, or delete data.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

5.3CVSS6.4AI score0.0169EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.10 views

Vulnerability of the Server component: The Information Schema of the MySQL Server database management system, which allows a hacker to cause a service failure.

Vulnerability of the MySQL Server component: The information schema of the MySQL Server database management system is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...

6.3CVSS6.3AI score0.0136EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.12 views

The vulnerability of the GPU Process browser processes in Microsoft Edge and Google Chrome allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the GPU Process browser engines in Microsoft Edge and Google Chrome is related to buffer overflows during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created...

10CVSS8.3AI score0.01EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.14 views

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to the manipulation of the null pointer pointer, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...

6.5CVSS6.5AI score0.0182EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.12 views

The vulnerability of the SymCrypt library in the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the SymCrypt library in the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.4AI score0.03663EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:0 a.m.10 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6.8AI score0.56376EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.7 views

The vulnerability of the BN_mod_sqrt() function in the OpenSSL library, which allows a hacker to cause a denial-of-service attack

The vulnerability of the BNmodsqrt function in the OpenSSL library is related to the execution of a loop without sufficient restrictions on its execution count. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.8CVSS7AI score0.73188EPSS
SaveExploits2References28Affected Software21
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.11 views

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.1CVSS8AI score0.01056EPSS
SaveExploits0References11Affected Software6
ATTACKERKB
ATTACKERKB
added 2022/03/15 9:15 p.m.4 views

CVE-2022-23989

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

7.5CVSS5.5AI score0.0093EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/03/14 12:0 a.m.6 views

PT-2022-7556 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.3 Safari versions prior to 15.4 watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 WebKitGTK affected versions not specified WPE WebKit affect...

10CVSS8.3AI score0.06701EPSS
SaveExploits1References142
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.10 views

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), related to reading data beyond the specified buffer, allows a intruder to trigger a service failure.

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, is related to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.2AI score0.18178EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.34 views

The vulnerability of software for the development and mass production of printed circuit boards, related to errors in processing uploaded files, allows a perpetrator to gain access to protected information or cause service failures.

The vulnerability of software for the development and mass production of printed circuit boards is related to errors in processing uploaded files. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures by sending a specially...

9.3CVSS5.5AI score0.01268EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.9 views

The vulnerability of the RouterOS operating system in MikroTik routers allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik routers lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure through a specially crafted FTP request...

7.8CVSS7.4AI score0.0125EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/03/02 1:33 a.m.6 views

CVE-2022-23970

ASUS RT-AX56U’s updatejson function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated LAN attacker can overwrite a system file by uploading another file with the same file name, which results in service disruption...

8.1CVSS5.5AI score0.00484EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:0 a.m.11 views

The vulnerability of the software development service provided by SAP NetWeaver Development Infrastructure allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the software development service for SAP NetWeaver Development Infrastructure lies in the insufficient verification of incoming requests. Exploiting this vulnerability allows a malicious actor to disclose sensitive information or cause service failures...

9.9CVSS7.6AI score0.67699EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/03/01 12:0 a.m.9 views

Asus Rog Live Service 后置链接漏洞

ASUS Rog Live Service is a Desktop Shareware program from ASUS in China. A security vulnerability exists in ASUS Rog Live Service, which stems from a feature in ROG Live Service that deletes temporary files created by the installation without verifying the path before deletion, which can be...

7.7CVSS7.5AI score0.00257EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/28 12:0 a.m.7 views

CVE-2020-4925

A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests. IBM X-Force ID: 191599...

6.2CVSS5.5AI score0.00229EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder