Lucene search
+L

5254 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.6AI score0.02926EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of Google Chrome’s browser password managers allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s browser password managers is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

7.3CVSS7.7AI score0.01452EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.14 views

The vulnerability of the ZipFile and ZipArchiveInputStream class implementations in the Commons Compress toolset relates to infinite loop conditions, which allow attackers to cause service failures.

The vulnerability of the ZipFile and ZipArchiveInputStream classes in the Commons Compress toolset relates to infinite loop execution. Exploiting this vulnerability could allow an attacker to cause service failures...

6.5CVSS6.5AI score0.03681EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability of Linux operating system SCSI kernel drivers, related to the improper assignment of permissions to critical resources, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux operating system’s SCSI kernel driver is related to an error in privilege escalation within the driver. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.1AI score0.00388EPSS
SaveExploits0References33Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the Google Chrome browser’s CSS component relates to the use of memory areas after they are freed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome browser’s CSS component is related to the use of a memory area after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

6.8CVSS7.7AI score0.00982EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of Google Chrome’s Skia graphics library allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Skia graphics library is related to the execution of operations that go beyond the allowed data buffer limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

6.8CVSS8.1AI score0.01857EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

Vulnerability of the PngChunk::readRawProfile function in the pngchunk_int.cpp file of the Exiv2 media metadata management library, allowing a hacker to cause a service failure

The vulnerability of the PngChunk::readRawProfile function in the pngchunkint.cpp file of the Exiv2 media metadata management library is related to incorrect processing of PNG files. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.7AI score0.02087EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.7 views

The vulnerability of the arlib_add_symbols() function in the arlib.c file of the ELF object processing utility suite Elfutils, related to division by zero, allows a malicious actor to cause a service failure.

The vulnerability of the arlibaddsymbols function in the arlib.c file of the ELF object processing utility Elfutils is related to incorrect handling of zero shentsize. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.4AI score0.01825EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the dwarf_getaranges function in the dwarf_getaranges.c file of the ELF object processing utility Elfutils, related to reading beyond the allowable buffer data size, allows a attacker to cause a service failure.

The vulnerability in the dwarfgetaranges.c function of the ELF object processing utility Elfutils relates to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.6AI score0.01729EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.46 views

The vulnerability of the DecodeManager::decodeRect function in the VNC TigerVNC software allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DecodeManager::decodeRect function in the VNC TigerVNC software is related to the execution of operations within acceptable buffer data limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

7.2CVSS7.5AI score0.04485EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.13 views

The vulnerability of the `Exiv2::StringValueBase::read` function in the `value.cpp` library of the Exiv2 media metadata management library is related to the issue of allowing the operation to exit within acceptable buffer limits. This allows a malicious actor to cause a service failure.

The vulnerability of the Exiv2::StringValueBase::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.6AI score0.01071EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.13 views

The vulnerability of the ZRLEDecoder software, which is part of VNC TigerVNC, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the ZRLEDecoder software, developed for VNC and TigerVNC protocols, relates to operations involving resources after their expiration. Exploiting this vulnerability can allow unauthorized individuals to gain access to confidential data, compromise its integrity, and cause...

7.2CVSS7AI score0.04719EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the UNIX command-line shell script processor Zsh, related to the lack of input validation mechanisms, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the UNIX command-line shell script processor Zsh is related to the improper handling of scripts containing !. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.4AI score0.02487EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability in the implementation of the SCTP control protocol by Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SCTP protocol implementation in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS7.7AI score0.01294EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.12 views

The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Blink rendering module is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.9AI score0.01597EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the `contrib/pmcisconames/pmcisconames.c` file, a software utility for processing Rsyslog logs, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the contrib/pmcisconames/pmcisconames.c file, a software utility for processing Rsyslog logs, is related to the lack of checks for the presence of message delimiters. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data,...

9.8CVSS6.7AI score0.03066EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.13 views

The vulnerability of the unicode_to_ansi_copy() function in the DriverManager/__info.c file of the ODBC library for UNIX UnixODBC allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the unicodetoansicopy function in the DriverManager/info.c file of the ODBC library for UNIX UnixODBC is related to the operation exceeding the allowable buffer data size limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

9.8CVSS7.4AI score0.02649EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the Google Chrome browser’s audio component relates to the use of memory after it is freed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the audio component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

6.8CVSS7.7AI score0.01369EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the audio component in the Google Chrome browser allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the audio component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

7.3CVSS7.7AI score0.02482EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.12 views

The vulnerability of Google Chrome browser extensions, related to deficiencies in access control for certain functions, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browsers is related to the improper application of policies. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

7.3CVSS7.8AI score0.01473EPSS
SaveExploits1References16Affected Software6
Rows per page
Query Builder