Lucene search
+L

5254 matches found

BDU FSTEC
BDU FSTEC
added 2021/01/19 12:0 a.m.8 views

The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web-based management interfaces for microprogramming software used in Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W routers exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code or...

9CVSS7.5AI score0.02194EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/15 4:15 p.m.8 views

UBUNTU-CVE-2021-22166

An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method...

7.5CVSS7.1AI score0.01377EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:0 a.m.11 views

The vulnerability of the SProcXkbSelectEvents function in the X Window System Xorg-server allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SProcXkbSelectEvents function in the xkbSwap.c script of the X Window System Xorg-server is related to integer overflow. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

5.9CVSS7.3AI score0.00613EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:0 a.m.11 views

The vulnerability of NSS cryptographic libraries, related to improper verification of certificate authenticity, allows a perpetrator to cause service failures.

The vulnerability of NSS cryptographic libraries is related to improper verification of certificate authenticity. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

7.5CVSS6.8AI score0.01399EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:0 a.m.9 views

The vulnerability of the CUPS printing system relates to the occurrence of operations outside the buffer in memory. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CUPS printing system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

4.6CVSS7AI score0.00391EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.9 views

The vulnerability of Firefox browser relates to the issue of allowing operations to exceed the permissible data buffer limits. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox browser is related to the execution of operations that exceed the allowable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS8.1AI score0.01616EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.8 views

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client relates to the use of memory after element manipulation in the DOM. This allows an attacker to trigger a service failure.

The vulnerability of Firefox, Firefox ESR, and the Thunderbird email client relates to the use of memory after element manipulation in the DOM is released. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

10CVSS7.4AI score0.02643EPSS
SaveExploits1References17Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.7 views

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the Opus audio codec in browsers like Firefox, Firefox ESR, and the email client Thunderbird is related to reading data from memory beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

9.4CVSS7.3AI score0.03106EPSS
SaveExploits1References17Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.6 views

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client, related to the use of memory after release, allows a hacker to trigger a service failure.

The vulnerabilities of Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after deallocation. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...

10CVSS7.5AI score0.02631EPSS
SaveExploits0References15Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.11 views

The vulnerability in the implementation of the process for launching child elements in the Firefox sandbox broker allows a malicious actor to gain unauthorized access to protected information, compromise its integrity, or cause service failures.

The vulnerability of the process for launching child elements in the Firefox sandbox broker’s sandbox environment is related to a file truncation error. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, compromise its integrity, or cause...

7.8CVSS6.7AI score0.00338EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.9 views

The vulnerability of several functions in hw/usb/core.c of the QEMU hardware emulation software involves allowing operations to exceed the permissible buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of several functions in the hw/usb/core.c file of the QEMU hardware emulation software is related to the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrit...

4.9CVSS7.1AI score0.05447EPSS
SaveExploits1References19Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.8 views

The vulnerability of QEMU’s emulation software-related hardware software involves exceeding the permissible buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of QEMU’s emulation software-related hardware lies in the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

5.9CVSS7.2AI score0.00421EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.9 views

The vulnerability of Firefox browser relates to the issue of allowing operations to exceed the permissible data buffer limits. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Firefox browser is related to the execution of operations that exceed the allowable data buffer limits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS8.2AI score0.01168EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.11 views

The vulnerability in the implementation of the ConvolvePixel() function in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability in the implementation of the ConvolvePixel function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

9.4CVSS7.9AI score0.1853EPSS
SaveExploits5References19Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.12 views

The vulnerability of JIT optimization in Firefox browsers, related to access to data without type control, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of JIT optimization in Firefox browsers relates to access to data without type control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.8AI score0.01511EPSS
SaveExploits0References13Affected Software6
OSV
OSV
added 2021/01/12 3:15 p.m.7 views

CVE-2021-21446

SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, this has a high impact on the availability of the service...

7.5CVSS7.2AI score0.01441EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/01/08 3:15 p.m.5 views

CVE-2021-1057

NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confidentiality loss, denial of service, or information disclosure. This affects...

7.8CVSS5.5AI score0.00342EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:0 a.m.7 views

The vulnerability of the KVM GET_EMULATED_CPUID request in Linux kernel, related to the operation exceeding the data buffer’s permissible limits, allows an attacker to compromise data integrity and cause service failures. [source-iocs-preserved const=KVM_GET_EMULATED_CPUID]

The vulnerability of the KVM GETEMULATEDCPUID function in Linux operating systems is related to the operation exceeding the permissible data buffer limits. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures. source-iocs-preserved...

6.1CVSS7AI score0.00679EPSS
SaveExploits1References45Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/12/30 12:0 a.m.13 views

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises relates to the use of exploits after release. This allows attackers to gain access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises, is related to the use of after-release components. Exploitation of this vulnerability can allow attackers to access protected...

7.8CVSS7.5AI score0.03205EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/29 6:15 p.m.12 views

CVE-2020-9093

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...

5.5CVSS6AI score0.00488EPSS
SaveExploits0References1
Rows per page
Query Builder