Lucene search
+L

2780 matches found

BDU FSTEC
BDU FSTEC
•added 2021/09/29 12:00 a.m.•24 views

Framework Component DoS

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created file...

10CVSS5.7AI score0.00122EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/09/29 12:00 a.m.•16 views

.NET Core PowerShell Core Visual Studio Input Validation DoS

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.5CVSS7.1AI score0.03902EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
•added 2021/09/29 12:00 a.m.•16 views

Network Time Protocol DoS

The vulnerability of the Network Time Protocol NTP is related to insufficient protection of service data during port randomization. Exploiting this vulnerability can allow a malicious actor to cause service failures by connecting through port 123...

8.1CVSS7.4AI score0.02637EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2021/09/23 12:00 a.m.•11 views

Linux kernel Uncontrolled Resource Consumption DoS

The vulnerability of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a perpetrator to cause service failures...

5.5CVSS6.6AI score0.00751EPSS
SaveExploits0References29Affected Software5
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•16 views

NetworkManager match.path DoS

The vulnerability of the match.path property in the NetworkManager network connection management software is related to improper handling of the installation of the match.path property and the activation of the profile. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.8AI score0.00256EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•27 views

NGINX autoindex Module Integer Overflow

The vulnerability of the NGINX server’s autoindex module is related to incorrect processing of years with four or more digits. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.7AI score0.03258EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•15 views

Got Normalize-url Library Uncontrolled Resource Consumption DoS

The vulnerability of the Got and Normalize-url libraries for Node.js is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.4AI score0.01705EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•25 views

YANG Libyang Heap Buffer Overflow DoS

The vulnerability of the lyxmlparsemem function, a syntax analyzer and tool for data modeling in the YANG Libyang language, is related to an uncontrolled recursion in the lyxmlparseelem function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.02425EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•22 views

PAM-U2F Authentication Module Data Compromise

The vulnerability of the PAM-U2F authentication module is related to incorrect handling of NULL values. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.8AI score0.00333EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•26 views

Rlottie Animation Generation Buffer Overflow DoS

The vulnerability of the graysplitcubic function in the Rlottie animation playback library is related to the writing beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise data integrity and cause service failures due to the malicious animated sticker...

8.1CVSS7.3AI score0.01101EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•25 views

system administration utility Privilege Escalation

The vulnerability of the system administration utility is related to an error during the normalization of umask. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.2AI score0.00408EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•30 views

YANG Libyang Heap Buffer Overflow DoS

The vulnerability of the lysnodefree function in the syntax analyzer and modeling tool of the YANG Libyang language is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.01423EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•20 views

Tor SSL-Proxy DoS

The vulnerability of the SSL-Proxy function of the anonymous web browser Tor is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.9AI score0.01608EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•24 views

Avahi Pointer Arithmetic DoS

The vulnerability of the avahishostnameresolverstart function in the Avahi service discovery system in local networks is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.8AI score0.00374EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•21 views

Drupal CMS Kernel Auth Bypass Info Disclosure DoS

The vulnerability of the Drupal CMS system’s kernel is related to incorrect authorization when read-only mode is set to FALSE via jsonapisettings. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.7AI score0.01275EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•13 views

JerryScript jmem_pools_collect_empty Out-of-Buffer Writing

The vulnerability of the jmempoolscollectempty function in the jmem-poolman.c component of the JavaScript Internet of Things engine, JerryScript, and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to sensitive data,...

9.8CVSS8.1AI score0.01314EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•24 views

JerryScript Buffer Overflow DoS

The vulnerability of the litreadcodeunitfromutf8 function in the lit-strings.c component of the JavaScript IoT scripting engine for IoTScript and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to sensitive data,...

9.8CVSS8AI score0.01314EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•18 views

JerryScript re_parse_char_escape Buffer Overflow DoS

The vulnerability of the reparsecharescape function in the re-parser.c component of the JavaScript Internet of Things scripting engine JerryScript and the IoT.js platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

9.8CVSS8AI score0.01314EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•12 views

Handlebars Template Creation Error Confidential Data Compromise

The vulnerability of the Handlebars template creation tool is related to errors in code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.1AI score0.04506EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/09/20 12:00 a.m.•20 views

Bitcoin Core PreChecks Authentication

The vulnerability of the PreChecks functionality in the standard Bitcoin Bitcoin Core implementation is related to the incorrect replacement of the child transaction. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service failures...

6.5CVSS6.5AI score0.01608EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder