Lucene search
+L

5188 matches found

CNVD
CNVD
added 2019/01/25 12:0 a.m.9 views

Facebook Wangle has an unspecified vulnerability

Facebook Wangle is a library for building protocols, application clients, and application servers from the American company Facebook. An unspecified vulnerability exists in Facebook Wangle. An attacker could exploit this vulnerability to cause a system used to accept TLS 1.3 protocol connections ...

5.9CVSS6.7AI score0.01055EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:0 a.m.18 views

The vulnerability of the Libvirt virtualization management library, related to a bug that leads to excessive memory consumption, allows a hacker to trigger a service failure.

The vulnerability of the Libvirt virtualization management library is related to an error that causes excessive memory consumption when processing large data streams by QEMU. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.3CVSS6.5AI score0.0291EPSS
SaveExploits0References7Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:0 a.m.14 views

The vulnerability of the Secure/Multipurpose Internet Mail Extensions (S/MIME) function in the Cisco AsyncOS operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Secure/Multipurpose Internet Mail Extensions S/MIME function in the Cisco AsyncOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending a specially crafted...

8.6CVSS7.6AI score0.02287EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:0 a.m.55 views

The vulnerability of the lz4::decompress function in the Graphite library used by Mozilla Firefox and Mozilla Firefox ESR browsers allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the lz4::decompress function in the Graphite library of Mozilla Firefox and Mozilla Firefox ESR browsers is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

6.8CVSS8.1AI score0.01418EPSS
SaveExploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:0 a.m.19 views

The vulnerability in the graphite2::Silf::readGraphite function of the Graphite library for Mozilla Firefox and Mozilla Firefox ESR browsers allows an attacker to cause a service failure or execute arbitrary code.

The vulnerability of graphite2::Silf::readGraphite in the Graphite 2 library for Mozilla Firefox and Mozilla Firefox ESR browsers relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary cod...

6.8CVSS8AI score0.01418EPSS
SaveExploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:0 a.m.20 views

The vulnerability of the xmlParsePEReference component in the libxml2 library, which is used for working with XML and HTML files, allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the xmlParsePEReference component in the libxml2 XML parsing library is related to insufficient restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures through a specially...

9.8CVSS7.4AI score0.02591EPSS
SaveExploits0References12Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:0 a.m.14 views

The vulnerability of the JunOS operating system allows a hacker to execute arbitrary code and cause service interruptions.

The vulnerability of the JunOS operating system arises from an uninitialized function pointer in the Packet Forwarding Engine manager fxpc. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and trigger a service failure using a specially crafted HTTP packet...

10CVSS8.2AI score0.05263EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:0 a.m.11 views

The vulnerability of the Java Server Faces component of the Oracle GlassFish Server software platform allows attackers to modify sensitive information or cause service failures.

The vulnerability of the Java Server Faces component of the Oracle GlassFish Server software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify protected information or cause service failures...

9.7CVSS7.5AI score0.01902EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.15 views

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions due to a failure in the routing daemon process rpd...

7.8CVSS7.2AI score0.01671EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/22 12:0 a.m.7 views

The vulnerability of the Junos operating system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the Junos operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by triggering a process failure of FPC...

7.8CVSS7.2AI score0.01706EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/01/16 7:30 p.m.7 views

CVE-2019-2480

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

5.3CVSS6.3AI score0.01879EPSS
SaveExploits0References2
OSV
OSV
added 2019/01/16 7:30 p.m.6 views

CVE-2019-2474

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS7.1AI score0.02052EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.10 views

The vulnerability of the CAPWAP Discovery Request analysis procedure implemented in the Cisco Wireless LAN Controller allows a attacker to cause a service failure.

The vulnerability of the CAPWAP request analysis process, where the Cisco Wireless LAN Controller is involved, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by reloading the targeted device with...

8.6CVSS7.5AI score0.03381EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.11 views

The vulnerability of the Fly-wm file manager in the Astra Linux operating system allows a hacker to gain unauthorized access to the user’s session, as well as to cause a service failure.

The vulnerability of the Fly-wm file manager in the Astra Linux operating system is related to an error that causes buffer overflows and unauthorized access to a locked user’s session when entering a specially crafted, large-length password. Additionally, there are security issues with the sumac...

8.4CVSS5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.5 views

The vulnerability of the RubyGems package management system, related to the creation of infinite loops, allows for the execution of arbitrary code.

The vulnerability of the RubyGems package management system is related to improper handling of the tar archive header, which can lead to the creation of an infinite loop. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.5CVSS6.8AI score0.04735EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.12 views

The vulnerability of the read_creator_block function in the GIMP graphic editor allows for reading beyond the buffer boundary of dynamic memory, enabling attackers to cause service failures, compromise data integrity, and undermine data confidentiality.

The vulnerability of the readcreatorblock function in the GIMP graphic editor’s plug-in/common/file-psp.c file is related to reading data beyond the buffer boundaries of dynamic memory. Exploiting this vulnerability could allow an attacker to cause service failures, compromise data integrity, and...

7.8CVSS6.7AI score0.01063EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.12 views

The vulnerability of the message processing mechanism implemented through the Cluster Management Protocol allows a attacker to cause a service failure in Cisco IOS and Cisco IOS XE operating systems.

The vulnerability of the message processing mechanism based on the Cluster Management Protocol CMP in Cisco IOS and Cisco IOS XE operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger service failures using...

7.4CVSS7.2AI score0.00856EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/27 12:0 a.m.7 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome browsers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a denial-of-service attack through a specially crafted web page...

8.8CVSS8.2AI score0.02653EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2018/12/25 12:0 a.m.15 views

The vulnerability of the Qualcomm TrustZone component of the Android operating system allows a hacker to trigger a service failure.

The vulnerability of the Qualcomm TrustZone component of the Android operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a perpetrator to cause service interruptions...

7.1CVSS5.9AI score0.00208EPSS
SaveExploits0References2
OSV
OSV
added 2018/12/24 4:29 p.m.5 views

CVE-2018-7793

A Credential Management vulnerability exists in FoxView HMI SCADA All Foxboro DCS, Foxboro Evo, and IA Series versions prior to Foxboro DCS Control Core Services 9.4 CCS 9.4 and FoxView 10.5. which could cause unauthorized disclosure, modification, or disruption in service when the password is...

8.7CVSS5.8AI score0.00322EPSS
SaveExploits0References1
Rows per page
Query Builder