Lucene search
+L

2269 matches found

BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.17 views

The vulnerability of the system administration utility is related to insecure management of privileges, which allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the system administration utility is related to an error during the normalization of umask. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.2AI score0.00408EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.10 views

The vulnerability of the `re_parse_char_escape` function in the `re-parser.c` component of the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform, related to buffer overflow attacks, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the reparsecharescape function in the re-parser.c component of the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

9.8CVSS8AI score0.01314EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.18 views

The vulnerability of the lys_node_free() function in the syntax analyzer and modeling tool of the YANG Libyang language, related to the insufficient use of the assert() function, allows attackers to trigger a service failure.

The vulnerability of the lysnodefree function in the syntax analyzer and modeling tool of the YANG Libyang language is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.01423EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.14 views

The vulnerability of the lyxml_parse_mem() function in the syntax analyzer and data modeling tool YANG Libyang, related to an uncontrolled recursion, allows attackers to cause service failures.

The vulnerability of the lyxmlparsemem function, a syntax analyzer and tool for data modeling in the YANG Libyang language, is related to an uncontrolled recursion in the lyxmlparseelem function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.02425EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.8 views

The vulnerability of the GPL eXosip library, related to pointer dereferencing errors, allows a violator to trigger a service failure.

The vulnerability of the GPL eXosip library is related to errors in processing certain 3xx redirect responses. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.01074EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.16 views

The vulnerability of the autoindex module of the NGINX server, related to integer overflows, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NGINX server’s autoindex module is related to incorrect processing of years with four or more digits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.7AI score0.03285EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.17 views

The vulnerability of TheFuck programming language package, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity and cause service failures.

The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...

9.1CVSS7.7AI score0.01847EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.11 views

The vulnerability of the Drupal CMS system’s kernel, related to improper authentication, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Drupal CMS system’s kernel is related to incorrect authorization when read-only mode is set to FALSE via jsonapisettings. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.7AI score0.01275EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.7 views

The vulnerability of the Handlebars template creation tool is related to errors in code generation. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Handlebars template creation tool is related to errors in code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.1AI score0.04506EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.16 views

The vulnerability of the gray_split_cubic function in the Rlottie animation-generation library, related to buffer-out writing, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the graysplitcubic function in the Rlottie animation playback library is related to the writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause service failures due to the malicious animated sticker...

8.1CVSS7.3AI score0.01101EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.12 views

The vulnerability in the `lit_read_code_unit_from_utf8` function of the `lit-strings.c` component in the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform, related to buffer-overflow writing, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the litreadcodeunitfromutf8 function in the lit-strings.c component of the JavaScript IoT scripting engine for IoTScript and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to sensitive data,...

9.8CVSS8AI score0.01314EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.9 views

The vulnerability of the SSL-Proxy function of the anonymous web browser Tor allows a perpetrator to trigger a service failure.

The vulnerability of the SSL-Proxy function of the anonymous web browser Tor is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.4AI score0.01608EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.12 views

The vulnerability of the Prism syntax extraction tool, related to errors in resource release, allows a perpetrator to cause a service failure.

The vulnerability of the Prism syntax extraction tool is related to errors in resource release. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.1CVSS7AI score0.01433EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:0 a.m.11 views

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP implementations allows a attacker to cause service failures.

The vulnerability of the TCP protocol implementation in NicheLite and InterNiche TCP/IP protocols is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted IP packets...

7.8CVSS7.4AI score0.02252EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.10 views

The vulnerability of the Addressable library, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Addressable library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.1AI score0.02199EPSS
SaveExploits0References8Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/09/07 12:0 a.m.10 views

The vulnerability of the getMultipartRequestHandler method in the Apache Struts software framework allows a hacker to induce a service failure.

The vulnerability of the getMultipartRequestHandler method in the Apache Struts software framework is related to resource release errors. Exploiting this vulnerability could allow an attacker to cause service failures...

7.8CVSS7.3AI score0.54635EPSS
SaveExploits1References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/01 12:0 a.m.8 views

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.5CVSS6.5AI score0.0347EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/09/01 12:0 a.m.9 views

The vulnerability of the Azure Sphere operating system, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Azure Sphere operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

4.9CVSS6.2AI score0.00726EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/31 12:0 a.m.9 views

The vulnerability of the Vijeo Designer software lies in the insufficient checking of unusual or exceptional states, which allows a perpetrator to trigger a service failure.

The vulnerability of the Vijeo Designer software is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS6.9AI score0.01049EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/08/26 12:0 a.m.12 views

The vulnerability of the graphic editor application for Adobe Creative Cloud Desktop Application, which arises due to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the graphic editor application for the Adobe Creative Cloud Desktop Application exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS7.7AI score0.06529EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder