Lucene search
+L

5255 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.9 views

The vulnerability of the application management tools and Flatpak environments, related to insufficient validation of input data, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the application and Flatpak environment management tools is related to the absence of blocking in the seccomp filter for system calls related to mounting. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

7.8CVSS6.6AI score0.00436EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.9 views

The vulnerability of WebKitGTK and WPE WebKit rendering modules, related to data type conversion errors, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to data type conversion errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

8.8CVSS7AI score0.01664EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.9 views

The vulnerability of the wireshark traffic analysis program, related to reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the wireshark traffic analysis program lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.5CVSS7.1AI score0.03109EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.10 views

The vulnerability of the hd_strlcpy() function in software for converting web pages using htmldoc, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hdstrlcpy function in software for converting web pages to htmldoc format is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.01135EPSS
SaveExploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.9 views

The vulnerability in the implementation of the ntfs_get_attribute_value function of the NTFS file system driver for the FUSE NTFS-3G module allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the ntfsgetattributevalue function in the NTFS file system driver for the FUSE NTFS-3G module is related to an incorrect check of the bytesinuse value. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...

7.8CVSS6.6AI score0.00415EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.11 views

The vulnerability of the convolution_y_8bit function in the multimedia library Ffmpeg, related to writing beyond buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the convolutiony8bit function in the multimedia library Ffmpeg is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.5AI score0.01486EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.8 views

The vulnerability of the ntfs inode_lookup_by_name function in the NTFS file system driver for the FUSE NTFS-3G module, related to buffer overflow attacks, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inodelookupbyname function in the NTFS file system driver for the FUSE NTFS-3G module is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures through th...

7.8CVSS7AI score0.00455EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.11 views

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures using a specially created NTFS ind...

7.8CVSS6.8AI score0.00488EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.17 views

The vulnerability of the `slice_get_derivative` function in the Ffmpeg multimedia library, related to writing beyond buffer boundaries, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the slicegetderivative function in the Ffmpeg multimedia library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

8.8CVSS7.2AI score0.01499EPSS
SaveExploits1References9Affected Software4
OSV
OSV
added 2022/01/14 5:15 a.m.4 views

CVE-2022-22055

The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system or disrupt service...

9.8CVSS6AI score0.02467EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/14 4:36 a.m.12 views

CVE-2022-22056

The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service...

10CVSS7.3AI score0.02259EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.11 views

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogramming-based chips from the Demon model in 1905 allows a hacker to trigger a service failure.

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogrammed software chips in 1905 is related to the lack of authentication. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.8CVSS7.3AI score0.01038EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.11 views

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogramming-based chips from the Demon model in 1905 allows a hacker to trigger a service failure.

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogrammed software chips in 1905 is related to the lack of authentication. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.8CVSS7.3AI score0.01118EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.23 views

The vulnerability of Adobe Premiere Rush software arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to trigger a service failure.

The vulnerability of Adobe Premiere Rush arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

9.3CVSS7.4AI score0.02273EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/11 12:0 a.m.3 views

PT-2022-1495 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the incorrect clearing or release of resources in the Windows IKE extension, which can lead to a denial-of-service condition. This can be exploited by a remote...

7.5CVSS9.2AI score0.0303EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.8 views

The vulnerability of the CAPWAP control protocol implementation in the Cisco IOS XE operating system allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CAPWAP control protocol implementation in the Cisco IOS XE operating system is related to buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS8AI score0.02964EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/01/03 10:15 a.m.8 views

CVE-2021-45916

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

3.5CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/03 10:15 a.m.20 views

Authentication flaw

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...

7.7CVSS9.1AI score0.00451EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/01/03 10:15 a.m.19 views

Input validation

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

2.7CVSS4AI score0.00302EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.12 views

The vulnerability in the sound/usb/mixer.c component of the Linux operating system, which occurs when the operation exceeds the permissible buffer data limits, allows an attacker to access confidential information or cause service failures.

The vulnerability in the sound/usb/mixer.c component of the Linux kernel is related to the operation of pushing data beyond the buffer’s allowed limits. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

7.8CVSS6.5AI score0.00613EPSS
SaveExploits0References44Affected Software5
Rows per page
Query Builder