Lucene search
+L

2269 matches found

BDU FSTEC
BDU FSTEC
added 2021/08/20 12:0 a.m.10 views

The vulnerability of the process.c file in the user authentication system xauth, related to insufficient input validation, allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability in the process.c file of the xauth user authentication software is related to insufficient validation of input data when using strncpy in the doadd function. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

8.5CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/20 12:0 a.m.11 views

The vulnerabilities of the alloca() and strdup() functions in the Systemd initialization and service management subsystem allow a attacker to cause a service failure.

The vulnerability of the alloca and strdup functions in the Systemd initialization and service management subsystem is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...

5.5CVSS6.6AI score0.08792EPSS
SaveExploits2References24Affected Software9
BDU FSTEC
BDU FSTEC
added 2021/08/20 12:0 a.m.10 views

The vulnerability of the Bash command shell, related to pointer arithmetic errors, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Bash command shell is related to errors due to incorrect command sequencing. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

8.5CVSS5.6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/16 12:0 a.m.8 views

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird involves a situation where interpretation conflicts occur, allowing an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in web browsers such as Firefox, Firefox ESR, and the email client Thunderbird relates to the handling of embedded list items as block-level elements. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servic...

10CVSS7.6AI score0.01386EPSS
SaveExploits1References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:0 a.m.8 views

The vulnerability of the web component of the Essbase Analytic Provider Services allows a perpetrator to trigger a service failure.

The vulnerability of the Essbase Analytic Provider Services web component is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.01832EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/10 12:0 a.m.10 views

The vulnerability of the web interface of D-Link router microprogramming software, including models D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the web interface of D-Link router microprogramming software, such as D-Link DIR-825/R1, DIR-825/GF, D-Link DIR-825/A/D1, and D-Link DIR-825/AC/E1A, is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability allows an attacker to...

10CVSS8.4AI score0.5432EPSS
SaveExploits1References5Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/08/04 12:0 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s browser is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service failures...

3.1CVSS7.6AI score0.01992EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.11 views

The vulnerability of the HTTP/2 module in the Apache Traffic Server, which exists due to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.1AI score0.02447EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.13 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from the use of a null pointer, which allows an attacker to trigger a service failure.

The vulnerability of Adobe After Effects software for video and dynamic image editing is caused by a pointer issue. Exploiting this vulnerability can allow an attacker to cause service failures...

5CVSS6.6AI score0.01374EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.10 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the handling of data beyond the buffer in memory. This allows attackers to exploit the protected information or cause system failures.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

8.1CVSS7.2AI score0.03021EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.9 views

The vulnerability of the `gb18030_mbc_enc_len` function in the Oniguruma regular expression library, which relates to reading data beyond the allowed buffer limits, allows attackers to cause service failures.

The vulnerability of the gb18030mbcenclen function in the Oniguruma regular expression library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.8AI score0.04052EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.46 views

The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading beyond the permissible buffer size, allows an attacker to access confidential information or cause service failures.

The vulnerability of the d2alawarray function in the SI libsndfile library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential information or cause service failures...

8.1CVSS6.9AI score0.02043EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.11 views

The vulnerability of the cPython programming language, related to deficiencies in HTTP request processing, allows attackers to compromise data integrity or cause service failures.

The vulnerability of the cPython programming language in Python is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...

5.9CVSS7.1AI score0.35963EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.9 views

The vulnerability of the Apache Ant build automation tool, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Apache Ant build automation tool is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.3AI score0.02642EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.13 views

The vulnerability of zip file compression software lies in the use of memory after it is freed, allowing an attacker to access confidential information or cause service failures.

The vulnerability of zip file compression software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...

9.8CVSS7.7AI score0.03977EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.15 views

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, stems from the lack of zero-division checking. This allows an attacker to trigger a service failure.

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

6.5CVSS6.7AI score0.01117EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.10 views

The vulnerability of the OverlayFS component arises from the Firejail jailer’s SUID status. This vulnerability stems from insufficient checks on the state of shared resources. As a result, attackers can gain access to confidential data, compromise its integrity, and even cause service failures.

The vulnerability of the OverlayFS component in Firejail’s SUID mode is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7CVSS7.1AI score0.00444EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.17 views

The vulnerability of the DBI interpreter component in the Perl programming language, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the DBI interpreter for the Perl programming language is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

7.1CVSS7.3AI score0.00602EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.8 views

The vulnerability of the demon for controlling Libvirt virtualization, related to the repeated release of memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the demon for controlling Libvirt virtualization relates to the repeated release of memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

6.7CVSS6.8AI score0.00529EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.11 views

The vulnerability of the RPL routing protocol implementation in Contiki-NG operating systems for IoT devices allows a attacker to cause service failures.

The vulnerability of the RPL routing protocol implementation in Contiki-NG IoT devices is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

8.6CVSS7.7AI score0.00993EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder