Lucene search
+L

2269 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.9 views

The vulnerability of the filter_frame component in the Ffmpeg library, related to writing beyond the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the filterframe component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

8.8CVSS6.8AI score0.01447EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.8 views

The vulnerability of the xmlmemory.c component of the libxml2 XML document analysis software occurs due to writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xmlmemory.c component of the libxml2 XML document analysis software involves buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.6AI score0.02713EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.7 views

The vulnerability of the `pixFewColorsOctcubeQuantMixed` component in the Leptonica image processing library, which allows a hacker to cause a service failure.

The vulnerability of the pixFewColorsOctcubeQuantMixed component in the Leptonica image processing library relates to reading data from buffers within acceptable limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.2AI score0.02866EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.7 views

The vulnerability of the xmllint component in the Libxml2 library arises from the use of memory after it is freed. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xmllint component in the Libxml2 library is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created file...

8.8CVSS6.8AI score0.0199EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/29 12:0 a.m.10 views

The vulnerability of the malloc() function in the Klibc environment library, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the malloc function in the Klibc environment library is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.8AI score0.02147EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/29 12:0 a.m.10 views

The vulnerability of the calloc() function in the Klibc environment library, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the calloc function in the Klibc environment library is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

9.8CVSS7.8AI score0.02059EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/29 12:0 a.m.8 views

The vulnerability of the Exiv2 metadata management library, related to the execution of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Exiv2 metadata management library is related to the execution of operations outside the buffer in memory due to errors in metadata writing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

8.8CVSS6.9AI score0.02152EPSS
SaveExploits1References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.9 views

The vulnerability of the library for reading, creating, and editing DjVu files, DjVuLibre, is related to reading data beyond the allowed buffer limits, allowing an intruder to cause a service failure.

The vulnerability of the library for viewing, creating, and editing DjVu files in DjVuLibre is related to the lack of checks for zero bytes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS6AI score0.01573EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.8 views

The vulnerability of the Tab Strip component in the Google Chrome web browser involves reading data beyond the allowed buffer size. This allows attackers to access confidential data and also trigger a service failure.

The vulnerability of the Tab Strip component in the Google Chrome web browser is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service interruptions through the use of a...

8.1CVSS6.7AI score0.01948EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.9 views

The vulnerability of the `squashfs_opendir` function in the `unsquash-1.c` component of the Squashfs-Tools tooling suite relates to name space limitations on directories. This vulnerability allows an attacker to compromise data integrity and cause service failures.

The vulnerability of the squashfs-opendir function in the unsquash-1.c component of the Squashfs-Tools tooling suite relates to deficiencies in pathname limitation. Exploiting this vulnerability could allow an attacker to compromise data integrity and cause service failures...

8.1CVSS6.5AI score0.025EPSS
SaveExploits1References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.9 views

The vulnerability of the filter_intra component in the Ffmpeg library, related to writing beyond the buffer boundary, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the filterintra component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.3AI score0.01735EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.38 views

The vulnerability of the HgDriver component of the PHP Composer dependency manager relates to the implementation or modification of arguments, allowing attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HgDriver component in the PHP Composer dependency manager is related to improper cleaning of Mercurial repository URLs. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through the...

8.8CVSS7.9AI score0.0466EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.12 views

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR arises from insufficient input data validation. This allows attackers to trigger service interruptions.

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.4CVSS7.1AI score0.00389EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/21 12:0 a.m.6 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.4AI score0.01599EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.19 views

The vulnerability of Adobe Flash Player, Adobe Integrated Runtime (AIR), Adobe AIR SDK, and Adobe AIR SDK & Compiler lies in the possibility of an out-of-buffer operation, allowing attackers to execute arbitrary code or cause service failures.

The vulnerabilities of Adobe Flash Player, Adobe Integrated Runtime AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler are related to the execution of operations beyond the buffer boundaries. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failur...

10CVSS6.8AI score0.20008EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.18 views

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to incorrect syntactic analysis of XML objects, which allows a attacker to trigger a service failure.

The vulnerability of the VMware vCenter Server virtual infrastructure management tool is related to incorrect syntactic analysis of XML objects. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS7.2AI score0.00976EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/08 12:0 a.m.11 views

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient verification of input data, allowing attackers to trigger service failures.

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

6.5CVSS6.5AI score0.00854EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/08 12:0 a.m.12 views

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X devices arises due to insufficient verification of input data. This allows attackers to trigger malfunctions in the service process.

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X devices exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures through the created LMP packet...

6.5CVSS6.6AI score0.00531EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.10 views

The vulnerability of software for performing virtualization at the operating system level, also known as containerization, Singularity, arises from insufficient checking of unusual or exceptional states. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of software for performing virtualization at the operating system level, also known as containerization, is related to improper checking of the return value of functions. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise it...

9.8CVSS7.7AI score0.01258EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.12 views

The vulnerability of the Eterm, Mrxyt, Rxyt-unicode software lies in their SSL-Proxy function, which allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Eterm, Mrxyt, Rxyt, and Rxyt-unicode software lies in the improper handling of certain control sequences. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.6AI score0.04089EPSS
SaveExploits1References7Affected Software6
Rows per page
Query Builder