Lucene search
+L

2268 matches found

BDU FSTEC
BDU FSTEC
added 2019/07/16 12:0 a.m.17 views

The vulnerability of the Jenkins Token Macro plugin relates to incorrect restrictions on XML links to external objects. This allows attackers to forge requests on the server side or trigger service failures.

The vulnerability of the Jenkins Token Macro plugin is related to an incorrect limitation on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to forge requests on the server side or cause service failures...

7.8CVSS5.5AI score0.01999EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.9 views

The vulnerability of the syntax analysis procedure for Python interpreter certificates allows attackers to trigger a service failure.

The vulnerability of the syntax analysis procedure for Python interpreter certificates is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

7.5CVSS7AI score0.20743EPSS
SaveExploits1References12Affected Software13
BDU FSTEC
BDU FSTEC
added 2019/07/08 12:0 a.m.7 views

The vulnerability of the IBM Spectrum Protect server and data protection agent, related to buffer overflows in the stack, allows attackers to execute arbitrary code or cause failures in the server or data protection agent’s functionality.

The vulnerability of the IBM Spectrum Protect server and data protection agent is related to buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause failures in the server or data protection agent...

10CVSS6.3AI score0.06959EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.9 views

The vulnerability of the reporting software for Cisco Security Manager extended security environments is related to errors in restricting XML links to external objects. This allows attackers to access confidential information and trigger service failures.

The vulnerability of the reporting software for Cisco Security Manager extended security environments is related to errors in restricting XML links to external objects. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information and cause service failure...

6.5CVSS5.5AI score0.02167EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.58 views

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...

4CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/27 12:0 a.m.8 views

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library allows a perpetrator to trigger a service failure.

The vulnerability of the pitchmark tool in the Edinburgh Speech Tool Library is related to initialization errors. Exploiting this vulnerability can allow attackers to cause service failures in applications by entering specially crafted data...

4CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/26 12:0 a.m.10 views

The vulnerability of the Intel PROSet/Wireless WiFi networking utility, related to resource release errors, allows a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.4CVSS7.3AI score0.0407EPSS
SaveExploits0References16Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/26 12:0 a.m.7 views

The vulnerabilities of the Intel SGX driver for Linux and the Intel SGX DCAP Linux driver are related to insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Intel SGX driver for Linux and the Intel SGX DCAP Linux driver is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

6.5CVSS5.5AI score0.00388EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.13 views

The vulnerability of the SMC-processor GLOBAL_CMD_ID_NEED_LOAD_APP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system allows a perpetrator to trigger a service failure, modify program algorithms (by changing the flags from TRUE/FALSE), or compromise critical data stored in physical memory.

The vulnerability of the SMC-processor GLOBALCMDIDNEEDLOADAPP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system is related to the lack of validation for input data. Exploiting this vulnerability can allow an attacker to cause service failures, modify program...

6.7CVSS5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.7 views

The vulnerability of the built-in software in Intel NUC Kits stems from insufficient input data validation. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to access protected information, cause service failures, or increase their privileges...

8.2CVSS5.5AI score0.00424EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.5 views

The vulnerability of the built-in software in Intel NUC Kits relates to improper session management. This allows attackers to gain access to protected information, cause system failures, or enhance their privileges.

The vulnerability of the built-in software in the Intel NUC Kit is related to improper session management. Exploiting this vulnerability can allow an attacker to access protected information, cause service failures, or increase their privileges...

7.5CVSS5.5AI score0.00392EPSS
SaveExploits0References3Affected Software40
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.9 views

The vulnerabilities of the software for Cisco TelePresence Video Communication Server and Cisco Expressway Series, as well as the Unified Communications Manager IM and Presence Service software, are due to insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerabilities of the Cisco TelePresence Video Communication Server and Cisco Expressway Series software, as well as the Unified Communications Manager IM and Presence Service software, exist due to insufficient validation of input data. Exploiting these vulnerabilities can allow attackers t...

8.6CVSS5.5AI score0.04639EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.12 views

The vulnerability of the KMD module in Intel Graphics Driver allows a hacker to trigger a service failure.

The vulnerability of the KMD module in the Intel Graphics Driver lies due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause system failures...

5.9CVSS5.5AI score0.00341EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.8 views

The software’s vulnerability regarding driver updates for Intel Driver & Support Assistant, due to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The software for updating Intel Driver & Support Assistant has a vulnerability due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

4.6CVSS5.5AI score0.00334EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.6 views

The vulnerability of the ASP.NET Core software platform, related to errors in request processing, allows a hacker to cause a service failure.

The vulnerability of the ASP.NET Core software platform is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests to the ASP.NET Core application...

7.8CVSS5.5AI score0.06681EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.8 views

The vulnerability of the microprogrammed logic controller Modicon’s software, related to insufficient checking of exceptional states, allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed programmable logic controller Modicon is related to insufficient testing of exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause malfunctions by sending specially crafted Modbus packets to the...

7.5CVSS5.5AI score0.01129EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.10 views

Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks, related to errors in request processing, allowing attackers to trigger service failures.

Vulnerabilities of .NET Core, Microsoft.NET Framework, and PowerShell Core automation frameworks are related to request processing errors. Exploiting these vulnerabilities allows attackers to remotely cause service failures by sending specially crafted requests...

7.8CVSS7.2AI score0.04943EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.5 views

The vulnerability of the EAP Server component of the EAP-PWD certification protocol for wireless communication devices with WPA encryption lies in the improper use of privileges, allowing attackers to compromise data integrity and confidentiality or cause service failures.

The vulnerability of the EAP Server component of the EAP-PWD protocol for wireless communication devices certified by WPA is related to the lack of explicit checks on imported elements. These imported elements do not undergo verification of scalar values and values of elements in the...

8.1CVSS6.9AI score0.02215EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.24 views

The vulnerability of the strncpy function in Atftpd arises from the possibility of the operation exceeding the buffer’s memory limit. This allows attackers to compromise data integrity and confidentiality, or cause service failures.

The vulnerability of the strncpy function in the Atftpd package is related to the sending of a 3-byte error message by the package. Exploiting this vulnerability allows an attacker to compromise data integrity and confidentiality, or cause service failures...

9.8CVSS7.7AI score0.04288EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.8 views

The vulnerability of the Heimdal protocol’s Kerberos implementation in the Samba network communication software allows attackers to expose sensitive information or cause service failures.

The vulnerability of the Heimdal protocol’s Kerberos 5 implementation in the Samba network communication software package is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected informatio...

7.5CVSS7.2AI score0.02486EPSS
SaveExploits0References6Affected Software3
Rows per page
Query Builder