Lucene search
+L

9764 matches found

BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.14 views

The vulnerability of the `hdr_validate_segments()` function in the `lib/luks2/luks2_json_metadata.c` file of the Cryptsetup encryption software allows a hacker to access confidential data, compromise its integrity, and cause service failure.

The vulnerability of the hdrvalidatesegments function in the lib/luks2/luks2jsonmetadata.c file of the Cryptsetup encryption program is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and caus...

9.3CVSS7.5AI score0.01157EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.9 views

The vulnerability of the GdkPixbuf image loading library, related to writing beyond the buffer’s boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GdkPixbuf image loading library is related to writing beyond the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a specially create...

9.3CVSS7.6AI score0.01891EPSS
SaveExploits1References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.12 views

The vulnerability of the intuit_diff_type() function in the pch.c component of the Patch program allows a hacker to trigger a service failure.

The vulnerability of the intuitdifftype function in the pch.c component of the Patch program is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.4AI score0.08427EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/26 12:00 a.m.7 views

The vulnerability in the AudioWorklet interface of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the AudioWorklet interface in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to a lack of data type conversion mechanisms. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7AI score0.00702EPSS
SaveExploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/03/24 12:00 a.m.27 views

The vulnerability of Eltex “ESR-200” network interface microprogramming software, related to uncontrolled resource consumption, allows a intruder to cause a service failure.

The vulnerability of the microprogrammed service router “ESR-20” is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...

5.5CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:00 a.m.14 views

The vulnerability of the SSL-VPN portal for operating systems FortiOS and the proxy server used for protecting against internet attacks by FortiProxy allows attackers to induce a service failure.

The vulnerability of the SSL-VPN portal for FortiOS operating systems and the FortiProxy proxy server used to protect against internet attacks is related to the use of an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a...

6.8CVSS6.5AI score0.00818EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:00 a.m.10 views

The vulnerability lies in the executable file IGSSdataServer.exe of the SCADA system’s data server, IGSS Data Server, as well as the executable file DashBoard.exe of the IGSS Dashboard. Additionally, the RMS16.dll library from the report module Custom Reports can also be exploited, allowing an attacker to cause a service failure.

The vulnerability of the IGSSdataServer.exe executable of the SCADA system’s data server, the DashBoard.exe executable of the IGSS Dashboard, and the RMS16.dll library of the report module Custom Reports is related to insufficient verification of data authenticity. Exploiting this vulnerability c...

6.5CVSS6.7AI score0.00242EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:00 a.m.10 views

Vulnerability of the expr__ctx_new() function (tools/perf/util/expr.c): This function is part of the Linux operating system’s kernel utilities, which allows a hacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the exprctxnew function tools/perf/util/expr.c in the Linux kernel is related to incorrect checking of the returned value from a method or function. Exploiting this vulnerability could allow an attacker to cause a service failure or potentially have other adverse effects...

6.8CVSS6.6AI score0.00267EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:00 a.m.11 views

The vulnerability of the microprogramming software of the Intel(R) 82599 network adapter allows a hacker to cause a service failure.

The vulnerability of IntelR 82599 network adapters’ microprogramming software is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.9AI score0.00277EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.9 views

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.01654EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.11 views

The vulnerability of the ff_hevc_put_hevc_epel_pixels_8_sse function (sse-motion.cc) in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the ffhevcputhevcepelpixels8sse function sse-motion.cc in the H.265 Libde265 video codec implementation is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

5.5CVSS6.5AI score0.00292EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:00 a.m.14 views

The vulnerability of Microsoft Office packages, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of Microsoft Office packages is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.03829EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:00 a.m.10 views

The vulnerability of the Redis database management system lies in the insufficient control over internal resource consumption when executing commands like SCAN or KEYS with a specially created template. This allows attackers to trigger a service failure.

The vulnerability of the Redis database management system is related to insufficient control over internal resource consumption when executing commands like SCAN or KEYS with a specially created template. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.8AI score0.60532EPSS
SaveExploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:00 a.m.10 views

The vulnerability of the Linux operating system’s kernel memory management subsystem allows a hacker to cause a service failure or potentially execute arbitrary code.

The vulnerability of the Linux operating system’s kernel memory management subsystem is related to incorrect handling of counters for the anonvma structure, which leads to the creation of orphan pointers. Exploiting this vulnerability can allow an attacker to cause a service failure or potentiall...

5.5CVSS6.9AI score0.00871EPSS
SaveExploits3References36Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:00 a.m.11 views

The vulnerability of the microprogramming software of the FortiRecorder device allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of the FortiRecorder video surveillance system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through specially crafted requests...

7.8CVSS7.2AI score0.0723EPSS
SaveExploits3References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:00 a.m.17 views

The vulnerability of the uvesafb_setcmap function (drivers/video/fbdev/uvesafb.c) in the Linux operating system’s kernel allows a malicious actor to cause a service failure or gain increased privileges.

The vulnerability of the uvesafbsetcmap function drivers/video/fbdev/uvesafb.c in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

7.8CVSS6.5AI score0.00531EPSS
SaveExploits0References34Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/17 12:00 a.m.11 views

The vulnerability of the ares_set_sortlist function in the c-ares asynchronous DNS request library allows a attacker to cause service failures or have limited impact on confidentiality and integrity.

The vulnerability of the aressetsortlist function in the asynchronous DNS query library c-ares is related to the lack of validation for the input string. This allows for a possible overflow of the stack of any length. Exploiting this vulnerability could enable an attacker to cause service failure...

9CVSS7.1AI score0.01222EPSS
SaveExploits1References13Affected Software11
BDU FSTEC
BDU FSTEC
added 2023/03/17 12:00 a.m.10 views

The vulnerability of the cifsPut_tcpSession() function (fs/cifs/connect.c) in the SMB subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cifsPuttcpSession function fs/cifs/connect.c in the SMB subsystem of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00208EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/17 12:00 a.m.10 views

The vulnerability of the fill_files_note() function (fs/binfmt_elf.c) in the Linux kernel’s file system support subsystem, which allows a attacker to cause a service failure

The vulnerability of the fillfilesnote function fs/binfmtelf.c in the Linux kernel’s file system support subsystem is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.3CVSS6.7AI score0.00325EPSS
SaveExploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/17 12:00 a.m.12 views

The vulnerability of the __sys_socket_file() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the syssocketfile function in the Linux operating system’s kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00274EPSS
SaveExploits0References7Affected Software2
Rows per page
Query Builder