Lucene search
+L

5243 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.11 views

The vulnerability of the event handler in Firefox browsers, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the event handlers in Firefox browsers, Firefox ESR, and the email client Thunderbird is related to accessing freed memory cells. Exploiting this vulnerability can allow an attacker to cause service interruptions while working with APIs...

9.8CVSS7.7AI score0.01638EPSS
SaveExploits0References4Affected Software4
CNVD
CNVD
added 2019/12/11 12:0 a.m.6 views

Intel Baseboard Management Controller Heap Corruption Vulnerability

The Intel Baseboard Management Controller BMC is a baseboard management controller from Intel Corporation USA. A heap corruption vulnerability exists in Intel BMC, which can be exploited by attackers to cause information disclosure, elevation of privilege, or denial of service...

9.8CVSS6.8AI score0.01561EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.10 views

The vulnerability of Netgear’s networking hardware’s microprogramming software, related to insufficient validation of input data, allows a intruder to trigger a service failure.

The vulnerability of Netgear’s networking hardware’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending specially crafted SOAP requests...

5CVSS5.5AI score
SaveExploits0References1Affected Software24
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability of the Cisco Wireless LAN Controller web interface allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Wireless LAN Controller web interface is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.7CVSS6.9AI score0.46305EPSS
SaveExploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.7 views

Vulnerability of the `sof_set_get_large_ctrl_data()` function (sound/soc/sof/ipc.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the sofsetgetlargectrldata function sound/soc/sof/ipc.c in the Linux kernel involves uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5.5CVSS6.6AI score0.00393EPSS
SaveExploits0References13Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability of the Extension.dll library in Intel PROSet/Wireless WiFi networking tools involves operations that go beyond the buffer in memory. This vulnerability allows attackers to exploit their privileges, cause service failures, and disclose sensitive information.

The vulnerability of the Extension.dll library used in Intel PROSet/Wireless WiFi networking tools involves operations that go beyond the buffer in memory. Exploiting this vulnerability can allow attackers to gain elevated privileges, cause service interruptions, and expose sensitive information...

8.7CVSS7.4AI score0.00343EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.13 views

The vulnerability of the Intel PROSet/Wireless WiFi networking utility lies in the insecure management of privileges, allowing attackers to elevate their privileges, cause service failures, and expose sensitive information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, and expose sensitive information...

8.2CVSS7.2AI score0.00381EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.7 views

The vulnerability of the ccp_run_sha_cmd() function (drivers/crypto/ccp/ccp-ops.c) in the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the ccprunshacmd function drivers/crypto/ccp/ccp-ops.c in the Linux kernel involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5.5CVSS6.7AI score0.00329EPSS
SaveExploits0References20Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to incorrect session duration settings. This allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

8.1CVSS7.3AI score0.01255EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the Cisco AsyncOS operating system’s web server interfaces, such as Cisco Web Security Appliance, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to cause service interruptions or gain unauthorized access to protected...

9CVSS7.6AI score0.00981EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.9 views

The vulnerability of the ReadSIXELImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the ReadSIXELImage function in the ImageMagick console-based graphics editor coders/sixel.c arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS8.1AI score0.0354EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of the Apache HTTP Server web server, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server is related to the issue of operations going beyond the buffer in memory after reaching the read size limit for HTTP headers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.3CVSS7.1AI score0.15264EPSS
SaveExploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of the mod_cache_socache module in the Apache HTTP Server, related to reading data beyond the buffer’s acceptable limit, allows attackers to cause service failures.

The vulnerability of the modcachesocache module in the Apache HTTP Server relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.3CVSS7.5AI score0.70279EPSS
SaveExploits0References16Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.5 views

The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server allows a attacker to cause service failures or lead to incorrect server configuration.

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures or lead to incorrect server configuration...

4.9CVSS6.5AI score0.08745EPSS
SaveExploits0References9Affected Software8
CNVD
CNVD
added 2019/11/28 12:0 a.m.7 views

Cesanta Mongoose Input Validation Error Vulnerability

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. An input validation error vulnerability exists in Cesanta Mongoose. The vulnerability stems from a network system or...

9.8CVSS7AI score0.41622EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/11/26 12:0 a.m.8 views

The vulnerability of the JunOS operating system, related to the SSL-Proxy function, allows a hacker to cause a service failure.

The vulnerability of the JunOS operating system is related to the SSL-Proxy function, which fails to handle hardware resource limitations. Exploiting this vulnerability allows a remote attacker to trigger repeated failures of the flowd daemon, which can lead to service interruption if the user...

7.8CVSS7.2AI score0.01064EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.9 views

The vulnerability of Modicon microprogrammed control devices, related to a data processing error in the REST API, allows a perpetrator to trigger a service failure.

The vulnerability of Modicon microprogrammed control devices is related to a data processing error in the REST API. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

8.6CVSS7.7AI score0.32974EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.6 views

The vulnerability of the difflib.IS_LINE_JUNK method in the Python interpreter allows a attacker to cause a service failure.

The vulnerability of the difflib.ISLINEJUNK method in the Python interpreter exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

7.8CVSS6.6AI score0.04979EPSS
SaveExploits0References17Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:0 a.m.7 views

The vulnerability of the json_populate_recordset and jsonb_populate_recordset functions in the PostgreSQL database management system allows a hacker to cause a service failure or gain unauthorized access to protected information.

The vulnerability of the jsonpopulaterecordset and jsonbpopulaterecordset functions in the PostgreSQL database management system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to...

8.5CVSS7.1AI score0.03723EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:0 a.m.7 views

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Web interface for Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose...

6.4CVSS6.4AI score0.01075EPSS
SaveExploits0References3
Rows per page
Query Builder