Lucene search
+L

2269 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS7.6AI score0.01952EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of Google Chrome’s IndexedDB component allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.29292EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.5 views

The vulnerability of the Kerberos protocol implementation in Samba’s network interaction software packages arises from a lack of privilege control mechanisms and access management tools. This allows attackers to induce service failures.

The vulnerability of the Kerberos protocol in Samba network communication software lies in the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows a malicious actor to cause service failures...

6.5CVSS6.3AI score0.06585EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability of the WebRTC technology implemented in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause...

6.8CVSS7.9AI score0.01913EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.13 views

The vulnerability of the touch_pmd() function in Linux operating systems allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the touchpmd function in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failur...

7CVSS6.8AI score0.02841EPSS
SaveExploits10References36Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper security checks for standard elements. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and cause service failures...

7.3CVSS7.6AI score0.01603EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.26 views

The vulnerability in the directory math/i386/ of the C language library in Linux-based operating systems allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the math/i386/ library directory in the C language for Linux operating systems is related to a imbalance in the configuration of the floating-point stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

9.8CVSS7.4AI score0.02704EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the Zsh shell script interpreter on UNIX systems arises from the lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Shebang handler in the UNIX command shell Zsh is related to the shortening of the Shebang line that exceeds 64 characters. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.8CVSS6.9AI score0.02723EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the Samba networking communication package arises from the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Samba networking communication package is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

7.5CVSS7AI score0.11181EPSS
SaveExploits4References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.12 views

The vulnerability of the WebXR component in Google Chrome allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s WebXR component is related to the use of a memory area after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.29292EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the WebRTC technology implementation in Google Chrome, Firefox, Firefox-ESR, and Thunderbird programs allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implementation in Google Chrome, Firefox, Firefox-ESR, and Thunderbird lies in the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failure...

7.3CVSS7.2AI score0.01725EPSS
SaveExploits0References20Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of Google Chrome browser developer tools allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browser developer tools is related to the operation of operations that go beyond the allowed data buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS7.9AI score0.01493EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability of the Gem Name Handler component in the Bundler’s dependency management tool for Ruby applications relates to a lack of mechanisms for managing code generation. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gem Name Handler component in the Bundler dependency management tool for Ruby applications relates to improper handling of gems with identical names. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause...

9.8CVSS7.7AI score0.08482EPSS
SaveExploits1References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/17 12:0 a.m.10 views

The vulnerability of the DNS server service in Windows Server operating systems allows a perpetrator to cause a service failure.

The vulnerability of the DNS server service in Windows Server operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

8.8CVSS7.7AI score0.06769EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.8 views

The vulnerability of the color_apply_icc_profile function (bin/common/color.c) in the OpenJPEG encoding and decoding library allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the colorapplyiccprofile function in the OpenJPEG encoding and decoding library is related to the output of the operation within acceptable buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...

8.8CVSS7.2AI score0.02091EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.9 views

The vulnerability of Linux operating system kernels, related to pointer arithmetic errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Linux operating system kernels is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

7CVSS6.4AI score0.0122EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.7 views

The vulnerability of the Samba networking software server’s LDAP server lies in a resource management mechanism error, which allows attackers to cause service failures.

The vulnerability of the Samba networking software’s LDAP server is related to a resource management mechanism error. Exploiting this vulnerability can allow an attacker to cause service failures...

7.5CVSS6.6AI score0.07116EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.11 views

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack allows a attacker to cause a service failure.

The vulnerability of the DHCPv6 protocol implementation in the Trace TCP/IP stack is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.1CVSS7.6AI score0.008EPSS
SaveExploits0References10Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.9 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to deficiencies in access control, allowing an attacker to execute arbitrary code or cause a service failure.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failures...

9.3CVSS8.2AI score0.01254EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.10 views

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the module component in the module/delegation.rb of the Ruby on Rails software platform is related to the lack of a mechanism for managing code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

6.5CVSS7.4AI score0.82047EPSS
SaveExploits10References8Affected Software3
Rows per page
Query Builder