Lucene search
+L

5255 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.9 views

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE routers cBR-8 allows a attacker to cause a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE routers cBR-8 is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.7CVSS7.2AI score0.01101EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/12/22 12:0 a.m.9 views

Fortinet FortiWeb Resource Management Error Vulnerability (CNVD-2024-26508)

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

7.5CVSS7.2AI score0.01119EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/12/21 7:16 a.m.17 views

Improper Input Validation

Apache Parquet is vulnerable to improper input validation. The vulnerability exits in util.java of parquet-mr which allows an attacker to perform service disruption using malicious parquet files...

7.5CVSS4AI score0.03052EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/21 12:0 a.m.9 views

The vulnerability of the UAS emulation device’s hardware emulation by QEMU, related to writing beyond the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the UAS emulation device’s hardware emulation software, QEMU, lies in the lack of flow number verification. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and even cause service failures...

7.4CVSS6.8AI score0.00566EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/21 12:0 a.m.10 views

The vulnerability of the VIRTIO_GPU_CMD_GET_CAPSET command in the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the VIRTIOGPUCMDGETCAPSET command in the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.2CVSS6.7AI score0.00463EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.10 views

The vulnerability of the SwiftShader library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SwiftShader library in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure through a specially created web page...

10CVSS8.2AI score0.0075EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.9 views

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code or trigger service interruptions.

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

10CVSS8.1AI score0.01315EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.12 views

The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome is related to insufficient resource management during its existence. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service interruptions through a specially created malicious web...

6.5CVSS8.1AI score0.0075EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.9 views

The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending a specially crafted request...

10CVSS8.2AI score0.01273EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.8 views

The vulnerability of the mod_proxy_uwsgi function in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modproxyuwsgi function in the Apache HTTP Server is related to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure for an application through a uri-path request...

7.8CVSS7.4AI score0.62887EPSS
SaveExploits0References15Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.9 views

The vulnerability of the Android EMUI operating system’s shell, which arises due to insufficient validation of input data, allows a hacker to disclose protected information or cause service failures.

The vulnerability of the Android EMUI operating system’s shell exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

10CVSS7.7AI score0.00741EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.13 views

The vulnerability of the HarmonyOS operating system’s kernel, related to writing beyond buffer boundaries in memory, allows a attacker to trigger a service failure or disclose sensitive information.

The vulnerability of the HarmonyOS operating system is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information...

9.4CVSS8AI score0.00901EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:0 a.m.9 views

The vulnerability of the communication standard set for IEEE 802.11 by the computer network traffic analyzer Wireshark allows a hacker to cause a service failure.

The vulnerability of the IEEE 802.11 communication standard set for computer network traffic analyzers like Wireshark is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by injecting specially crafted packets...

7.8CVSS6.8AI score0.05501EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.11 views

The vulnerability of the Internet Key Exchange (IKEv2) implementation of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKEv2 implementation of Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sendi...

6.3CVSS6.5AI score0.00983EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.15 views

The vulnerability of Mali graphics processor drivers based on Midgard, Bifrost, and Valhall architectures lies in their lack of access control mechanisms. This allows attackers to escalate their privileges, gain unauthorized access to protected information, or cause service failures.

The vulnerability of Mali graphics processor drivers based on Midgard, Bifrost, and Valhall architectures is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges, gain unauthorized access to protected information, or caus...

9CVSS7.8AI score0.05407EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.8 views

The vulnerability of the Apache HTTP Server’s web server, related to the assignment of the zero pointer, allows attackers to trigger a service failure.

The vulnerability of the Apache HTTP Server web server is related to the assignment of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service interruptions through specially crafted HTTP requests...

7.5CVSS7.3AI score0.64509EPSS
SaveExploits0References26Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.10 views

The vulnerability of the newusers tool in the shadow account management utility allows for data leakage when operations are performed outside of the buffer in memory. This enables attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the newusers tool in the shadow account management utility is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.8CVSS6.7AI score0.02659EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.10 views

The vulnerability of the shadow account management tool is related to insecure management of privileges, allowing a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shadow account management tool is related to the incorrect specification of pts/o and pts/1 as physical terminals in the /etc/securetty file. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...

7.8CVSS7.1AI score0.00404EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.12 views

The vulnerability of Cisco’s software algorithm, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Cisco software algorithms is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.5CVSS7.4AI score0.01248EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.10 views

The vulnerability of the mail client in operating systems such as iOS, iPadOS, and watchOS allows a hacker to trigger a service failure.

The vulnerability of the email client in operating systems such as iOS, iPadOS, and watchOS is related to the operation of writing data beyond the buffer in memory when processing malicious email messages. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.3CVSS5.7AI score0.02178EPSS
SaveExploits0References6Affected Software3
Rows per page
Query Builder