Lucene search
+L

196 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/22 12:00 a.m.8 views

The vulnerability of the spice-client remote access software, related to integer overflow, allows a hacker to gain access to confidential information or cause service failures.

The vulnerability of the spice-client remote access software is related to a numerical overflow vulnerability. Exploiting this vulnerability could allow an attacker to gain access to confidential information or cause service failures...

8.8CVSS7.4AI score0.02363EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:00 a.m.11 views

The vulnerability of the library for EXIF file grammar analysis in libexif, related to uncontrolled resource consumption, allows a violator to cause a service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.1AI score0.02301EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:00 a.m.11 views

The vulnerability of the video component in the Simple DirectMedia Layer multimedia library, specifically the SDL_blit_copy.c file, is related to a potential overflow of integers. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the video component in the Simple DirectMediaLayer multimedia library’s SDLblitcopy.c file is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service...

8.8CVSS7.3AI score0.01305EPSS
SaveExploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:00 a.m.23 views

The vulnerability of the Pacemaker resource management software, related to lack of access control, allows a intruder to gain access to confidential information or cause service failures.

The vulnerability of the Pacemaker resource management software is related to improper access control. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

9CVSS7.3AI score0.02027EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:00 a.m.24 views

The vulnerability of the files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc, which are used for installing, updating, and removing software packages in the Apt suite, relates to integer overflow vulnerabilities. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and apt-pkg/contrib/arfile.cc files, which are used for installing, updating, and removing software packages, is related to the lack of data cleaning. Exploiting this vulnerability can allow an attacker to access...

5.7CVSS6.1AI score0.00381EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.11 views

The vulnerability of the pdo_firebase module in the PHP programming language allows attackers to cause service failures.

The vulnerability of the pdofirebase module in the PHP programming language is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.9CVSS6.7AI score0.01869EPSS
SaveExploits1References24Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/08 12:00 a.m.13 views

The vulnerability of the mysql-wsrep component of the MariaDB database lies in errors during the processing of input data during syntax analysis. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mysql-wsrep component of the MariaDB database is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9CVSS6.8AI score0.05539EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/06 12:00 a.m.13 views

The vulnerability of the graphical input settings in the fly-admin-dm system, due to lack of access control mechanisms, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the graphical input settings in the fly-admin-dm system is related to deficiencies in access control when changing the theme to “Fly Modern”. Exploiting this vulnerability allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service...

8.4CVSS5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.10 views

The vulnerability of the res_pjsip_t38.c component in Asterisk IP-telephony management systems and Certified Asterisk allows a attacker to cause a service failure.

The vulnerability of the respjsipt38.c component in IP-telephony management systems like Asterisk and Certified Asterisk is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.06677EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:00 a.m.16 views

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software suite allows a perpetrator to disclose protected information and cause service interruptions.

The vulnerability of the CODESYS V2.3 web server component of the CODESYS industrial automation software system exists due to the reading of data beyond the specified buffer limits. Exploiting this vulnerability can allow a malicious actor to disclose protected information and cause service...

9.4CVSS8.1AI score0.01151EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/04 12:00 a.m.13 views

The vulnerability of the Braces package in the npm package manager allows a hacker to trigger a service failure.

The vulnerability of the Braces package in the npm package manager is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.3CVSS6.1AI score0.01389EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.10 views

The vulnerabilities of Huawei’s micro-programming software for routers allow attackers to trigger service interruptions.

The vulnerability of Huawei’s microprogrammed router software relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.8CVSS6.6AI score0.00825EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.11 views

The vulnerability of the PDFium PDF-content processor in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the PDFium PDF-content processing component in Google Chrome and Microsoft Edge browsers is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created web page...

4.3CVSS6.7AI score0.01336EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:00 a.m.13 views

The vulnerability of the JunOS operating system, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the JunOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS7.3AI score0.01075EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:00 a.m.11 views

The vulnerability of the Apache SpamAssassin spam filtering software lies in the lack of measures to neutralize special elements. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Apache SpamAssassin spam filtering software lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

10CVSS7.1AI score0.06132EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.10 views

The vulnerability of the Runc command-line tool for starting isolated containers lies in its ability to simultaneously execute tasks using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Runc container launch tool is related to an error in tracking additional processes of the container using the pid 1 of the container. Exploiting this vulnerability can allow a perpetrator to access confidential data, compromise its integrity, and cause service failures...

6.4CVSS6.7AI score0.00396EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to writing beyond the buffer limit, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

7.3CVSS7.8AI score0.19082EPSS
SaveExploits6References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.10 views

The vulnerability of the action/cache.py component in the MoinMoin wiki platform, which involves an incorrect restriction on the path name to the catalog, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the action/cache.py component of the MoinMoin wiki platform is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service...

9.8CVSS7.7AI score0.06551EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.15 views

The vulnerability of the wp-includes/Requests/Utility/FilteredIterator.php component of the WordPress content management system, related to the restoration of unreliable data structures in memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the wp-includes/Requests/Utility/FilteredIterator.php component of the WordPress content management system is related to incorrect handling of serialization requests. Exploiting this vulnerability can allow a malicious actor to access sensitive data, compromise its integrity,...

9.8CVSS7.7AI score0.16119EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.11 views

The vulnerability of Sympa mailing list managers, related to the lack of a mechanism for managing privileges, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Sympa mailing list manager is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...

7.8CVSS7.1AI score0.005EPSS
SaveExploits1References8Affected Software3
Rows per page
Query Builder