Lucene search
+L

5188 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.11 views

The vulnerability of the console utility for downloading Wget files allows a hacker to execute arbitrary code or trigger a service failure.

The vulnerability of the console utility for downloading Wget files is related to the execution of operations beyond the buffer limit in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

8.8CVSS8.6AI score0.05862EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.5 views

The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Skia graphic library in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to buffer overflow in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

10CVSS8AI score0.04975EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.24 views

The vulnerability in the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to cause a service failure.

The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Conference Phone 8832, IP Phone 8821, and IP Phone 8821-EX—is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.2AI score0.01939EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.8 views

The vulnerability of the InsertRow function in the ImageMagick program for reading and editing graphic files allows a attacker to cause a service failure.

The vulnerability of the InsertRow function in the ImageMagick software suite for reading and editing graphic files is related to writing data beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially...

3.3CVSS6.9AI score0.03037EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.6 views

The vulnerability of the web interface of the microprogramming software for Cisco IP Phones series 8800 allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Phone 7800, IP Phone 8821, IP Phone 8821-EX, and IP Conference Phone 8831—is related to deficiencies in the validation of user input data during authentication. Exploiting this vulnerability could allow a malicious actor ...

7.8CVSS7.8AI score0.0311EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.8 views

The vulnerability of the ISDN function implementations in Cisco IOS and Cisco IOS XE operating systems allows a intruder to trigger a service failure.

The vulnerability of ISDN operating system functions in Cisco IOS and Cisco IOS XE exists due to errors in processing certain values in the Q.931 elements. Exploiting this vulnerability can allow an attacker to trigger a device reboot, resulting in service failure...

7.8CVSS7.3AI score0.02516EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.10 views

The vulnerability of the xen_failsafe_callback function in Xen hypervisors allows a malicious actor to trigger a service failure or increase their privileges.

The vulnerability of the xenfailsafecallback function in Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker running on a guest OS to cause service failures or increase their privileges...

7.8CVSS6.6AI score0.00409EPSS
SaveExploits0References22Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.7 views

The vulnerability of the Network-Based Application Recognition technology implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

7.8CVSS7.3AI score0.02516EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.8 views

The vulnerability of the Network-Based Application Recognition technology implementation in Cisco IOS and Cisco IOS XE operating systems allows attackers to trigger a service failure.

The vulnerability of the Network-Based Application Recognition technology in Cisco IOS and Cisco IOS XE operating systems exists due to errors in syntactic analysis of DNS packets. Exploiting this vulnerability allows a malicious actor, who has not undergone authentication checks, to trigger a...

7.8CVSS7.3AI score0.02186EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.7 views

The vulnerability of the ebl_object_note() function in the ELF modification and analysis utility Elfutils allows a perpetrator to cause a service failure.

The vulnerability of the eblobjectnote function in the ELF modification and analysis utility Elfutils relates to the ability to read buffers in memory from outside the program. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted ELF file...

4.3CVSS6AI score0.01508EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.6 views

The vulnerability of the exif_process_IFD_in_MAKERNOTE module in the PHP programming language, related to reading beyond buffer boundaries, allows attackers to cause service failures.

The vulnerability of the exifprocessIFDinMAKERNOTE module located in ext/exif/exif.c in the PHP programming language is related to incorrect image processing. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created JPEG file...

5.5CVSS6.7AI score0.04306EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.6 views

The vulnerability of the Tianocore edk2 library, caused by insufficient validation of user input data, allows attackers to escalate their privileges or cause service failures.

The vulnerability of the Tianocore edk2 library arises from insufficient validation of the data entered by users. Exploiting this vulnerability can allow a malicious actor to increase their privileges or cause service failures...

7.2CVSS7.7AI score0.02271EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.6 views

The vulnerability of the imap_mail function in the PHP programming language allows a hacker to cause a service failure.

The vulnerability of the imapmail function in the PHP programming language is related to errors in handling empty strings in message arguments. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS6.8AI score0.06278EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.7 views

The vulnerability of the Django library for the Python programming language, which allows attackers to compromise the integrity of protected information

The vulnerability of the Django library for the Python programming language is related to insufficient elimination of special elements in the output data used by the lower-level component. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.5CVSS6.5AI score0.03425EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.9 views

The vulnerability of the Libarchive library for working with archives, related to memory management after deallocation, allows an attacker to trigger a service failure.

The vulnerability of the library for working with Libarchive archives libarchive/archivereadsupportformatrar.c is related to a bug in the RAR format decoder. Exploiting this vulnerability may allow an attacker to cause service interruptions...

9.3CVSS6.5AI score0.04449EPSS
SaveExploits0References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.7 views

The vulnerability of the libssh2 library, related to reading beyond the buffer in memory, allows an attacker to cause a service failure or expose protected information.

The vulnerability of the libssh2 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information...

9.1CVSS7.3AI score0.05118EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.7 views

The vulnerability of the Wireshark traffic analyzer program, related to reading data beyond the memory boundaries, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer program relates to reading data beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially crafted package...

5.5CVSS6.6AI score0.0144EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.8 views

The vulnerability of the `load_specificdebug_section` function in the GNU Binutils, related to integer overflow, allows a attacker to cause a service failure.

The vulnerability of the loadspecificdebugsection function in objdump.c within the GNU Binutils package is related to integer overflow, which can lead to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.8AI score0.01973EPSS
SaveExploits1References9Affected Software3
CNVD
CNVD
added 2019/03/27 12:0 a.m.8 views

ENTTEC Datagate MK2, Storm 24 and Pixelator Denial of Service Vulnerabilities

ENTTEC Datagate MK2 and others are products of ENTTEC Australia.ENTTEC Datagate MK2 is a lighting controller.ENTTEC Storm 24 is an Ethernet to DMX512 converter.ENTTEC Pixelator is a pixel controller. A denial of service vulnerability exists in ENTTEC Datagate MK2, Storm 24, and Pixelator, which c...

7.8CVSS6.9AI score0.01516EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/03/26 12:0 a.m.9 views

ArcSight Logger XML External Entity Parsing Vulnerability

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. An XML external entity injection vulnerability exists in Micr...

7.5CVSS7AI score0.01705EPSS
SaveExploits0References1
Rows per page
Query Builder