Lucene search
+L

2269 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.7 views

The vulnerability of the Linux kernel driver in Nitro Enclaves, related to pointer arithmetic errors, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.9AI score0.00301EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.9 views

The vulnerability of the pickle.load() function in Manuscript software, related to the restoration of unreliable data in memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pickle.load function in software for manuscript writers involves restoring unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

8.8CVSS7.2AI score0.01888EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.50 views

The vulnerability of the Flask software’s extension relates to insecure privilege management. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

9.8CVSS7.8AI score0.07288EPSS
SaveExploits4References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.7 views

The vulnerability of the Linux operating system’s kernel, related to insufficient checking of privilege assignment for critical resources, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of permission assignments for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.6AI score0.00469EPSS
SaveExploits1References21Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.11 views

The vulnerability of the copy_from_user() function in the file system of the shiftfs filesystem in Linux’s operating system, which is related to the repeated release of memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the copyfromuser function in the file system of the shiftfs filesystem in Linux’s operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

7.8CVSS6.7AI score0.01535EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.10 views

The vulnerability of the Singularity container platform, related to the failure to cleanse input data, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Singularity container platform relates to the failure to cleanse input data. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.9AI score0.01415EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.10 views

The vulnerability of the declarative reading and writing methods for BinData binary file formats, related to uncontrolled resource consumption, allows a perpetrator to cause service failures.

The vulnerability of the declarative method for reading and writing BinData binary file formats is related to the relatively slow creation of certain classes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

4.3CVSS5.4AI score0.01866EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.12 views

The vulnerability of the overlayfs component in the Linux operating system’s kernel allows for insecure privilege management. This enables attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the overlayfs component in the Linux operating system’s kernel involves ignoring user name spaces when configuring file permissions in the underlying file system. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, a...

7.8CVSS6.9AI score0.49166EPSS
SaveExploits28References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.12 views

The vulnerability of the libdnf package manager library involves incorrect verification of the cryptographic signature of data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the package manager library libdnf is related to a bug in the signature verification function. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS6.8AI score0.01117EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:0 a.m.14 views

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created file...

10CVSS5.7AI score0.00122EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:0 a.m.10 views

The vulnerability of the Network Time Protocol NTP, related to insufficient protection of service data, allows attackers to trigger a service failure.

The vulnerability of the Network Time Protocol NTP is related to insufficient protection of service data during port randomization. Exploiting this vulnerability can allow a malicious actor to cause service failures by connecting through port 123...

8.1CVSS7.4AI score0.02637EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:0 a.m.12 views

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient input validation. This allows attackers to trigger service failures.

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.5CVSS7.1AI score0.03902EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/09/23 12:0 a.m.6 views

The vulnerability of the Linux operating system’s kernel, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause service failures...

5.5CVSS6.6AI score0.00734EPSS
SaveExploits0References29Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.13 views

The vulnerability of the avahi_s_host_name_resolver_start function in the Avahi service discovery system in local networks allows a attacker to trigger a service failure. This vulnerability is related to pointer arithmetic errors.

The vulnerability of the avahishostnameresolverstart function in the Avahi service discovery system in local networks is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.8AI score0.00374EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.11 views

The vulnerability of Pydantic’s date fields in data analysis and verification processes, related to executing a loop with an unavailable exit condition, allows attackers to cause service failures.

The vulnerability of the date field in Pydantic’s data analysis and verification mechanisms is related to the incorrect handling of data types like infinity, inf, and float'inf' within the date field. Exploiting this vulnerability can allow an attacker to cause service failures...

7.5CVSS7.2AI score0.00967EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.9 views

The vulnerability of the Got and Normalize-url libraries for Node.js, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Got and Normalize-url libraries for Node.js is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.4AI score0.01705EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.8 views

The vulnerability of the `jmem_pools_collect_empty` function in the `jmem-poolman.c` component of the JavaScript Internet of Things engine JerryScript and the IoT.js platform, related to out-of-buffer writing, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the jmempoolscollectempty function in the jmem-poolman.c component of the JavaScript Internet of Things engine, JerryScript, and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to sensitive data,...

9.8CVSS8.1AI score0.01314EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.12 views

The vulnerability of the PAM-U2F authentication module stems from deficiencies in the authentication process. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the PAM-U2F authentication module is related to incorrect handling of NULL values. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.8AI score0.00333EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.10 views

The vulnerability of the `re_parse_char_escape` function in the `re-parser.c` component of the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform, related to buffer overflow attacks, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the reparsecharescape function in the re-parser.c component of the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

9.8CVSS8AI score0.01314EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.18 views

The vulnerability of the lys_node_free() function in the syntax analyzer and modeling tool of the YANG Libyang language, related to the insufficient use of the assert() function, allows attackers to trigger a service failure.

The vulnerability of the lysnodefree function in the syntax analyzer and modeling tool of the YANG Libyang language is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.01423EPSS
SaveExploits1References4Affected Software2
Rows per page
Query Builder