Lucene search
+L

150 matches found

ATTACKERKB
ATTACKERKB
added 2021/04/06 2:48 a.m.4 views

CVE-2021-28179

The specific function in ASUS BMC’s firmware Web management page Media support configuration setting does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate t...

4.9CVSS5.5AI score0.0181EPSS
SaveExploits0References4Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/04/06 2:48 a.m.4 views

CVE-2021-28175

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service...

4.9CVSS5.5AI score0.0186EPSS
SaveExploits0References4Affected Software3
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.10 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a security signature issue vulnerability that stems from a buffer overflow vulnerability due to the Radius configuration function failing to validate the length of a user-entered string. A remote attacker could...

4.9CVSS6AI score0.0181EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.10 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC firmware Web management page, which originates from a specific function that does not validate the length of a user-entered string, and can be exploited by a remote attacker to terminate a Web...

4.9CVSS6AI score0.0181EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.10 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A security signature issue vulnerability exists in the ASUS BMC Firmware Web management page, which originates from a buffer overflow vulnerability due to a specific function not validating the length of a user-entered string. A remote attacker cou...

4.9CVSS6AI score0.0181EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/04/06 12:00 a.m.9 views

ASUS BMC Firmware 安全特征问题漏洞

ASUS BMC Firmware is a firmware from Asus China. A buffer overflow vulnerability exists in the ASUS BMC's firmware Web management page, which originates from the Web Service configuration function not validating the length of a string entered by the user, and can be exploited by a remote attacker...

4.9CVSS6AI score0.0181EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/06/17 12:00 a.m.13 views

Unspecified vulnerability in KUKA controller KR C4

The KUKA controller KR C4 is a robot control system from the German company KUKA. A security vulnerability exists in KUKA controller KR C4. An attacker can exploit the vulnerability to stop the manipulator from running by terminating critical services from the Windows Task Manager...

6.1CVSS6.8AI score0.00312EPSS
SaveExploits0References1
Fortinet
Fortinet
added 2019/11/26 12:00 a.m.73 views

Protect

A heap buffer overflow vulnerability in the FortiOS SSL VPN web portal may cause the SSL VPN web service termination for logged in users or potential remote code execution on FortiOS; this happens when an authenticated user visits a specifically crafted proxy-ed webpage, and this is due to a...

4.3CVSS7.6AI score0.33647EPSS
SaveExploits0Affected Software1
VulnCheck KEV
VulnCheck KEV
added 2019/10/02 12:00 a.m.9 views

VulnCheck KEV: CVE-2018-13383

A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users...

6.5CVSS7AI score0.33647EPSS
SaveExploits0References1
NVD
NVD
added 2019/05/29 6:29 p.m.30 views

CVE-2018-13383

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle...

6.5CVSS5.7AI score0.33647EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2019/05/29 5:20 p.m.25 views

CVE-2018-13383

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle...

4.3CVSS7.2AI score0.33647EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/05/29 5:20 p.m.46 views

CVE-2018-13383

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle...

4.3CVSS6.6AI score0.33647EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2019/05/29 12:00 a.m.44 views

CVE-2018-13383

A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle...

6.5CVSS5.8AI score0.33647EPSS
SaveIn wildExploits0References6
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:00 a.m.10 views

The vulnerability of the IxVeriWave component, a traffic analysis tool for Wireshark networks, allows a hacker to cause a service failure.

The vulnerability of the IxVeriWave component, a traffic analysis tool for Wireshark, relates to reading data beyond its intended boundaries. Exploiting this vulnerability can allow a remote attacker to prematurely terminate the application’s operation...

5.5CVSS7.2AI score0.17697EPSS
SaveExploits2References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/12/10 12:00 a.m.22 views

The vulnerability of the FreeRDP remote desktop protocol lies in errors in processing specially crafted request packets, which allows attackers to trigger service failures or perform “man-in-the-middle” attacks.

The vulnerability of the FreeRDP remote desktop protocol is related to errors in processing specially crafted request packets. Exploiting this vulnerability allows a malicious actor to cause an application to terminate abnormally or carry out “man-in-the-middle” attacks...

7.5CVSS7AI score0.01584EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/01/18 12:00 a.m.11 views

The vulnerability of the PCRE library in the Mac OS X operating system allows a hacker to cause a service failure or exert other effects.

Vulnerability of the PCRE library in the Mac OS X operating system. Exploiting this vulnerability can allow a malicious actor to cause service failure application termination or have other adverse effects...

10CVSS7.8AI score0.02925EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2017/07/31 12:00 a.m.86 views

Juniper Junos SRX, vSRX, and J-Series ISC BIND DoS (JSA10799)

According to its self-reported version and model number, the remote Juniper Junos device is affected by a denial of service vulnerability in ISC BIND, specifically in the queryfind function within file bin/named/query.c, when simultaneously using DNS64 and RPZ for query responses. An...

7.5CVSS6.8AI score0.17243EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/06/23 12:00 a.m.16 views

The vulnerability of the hw/virtio/virtio-crypto.c component of the QEMU hardware emulation driver allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the hw/virtio/virtio-crypto.c component of the QEMU hardware emulation software is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker acting locally to cause a service failure abrupt process termination or execute arbitrary code using a...

7.2CVSS7.2AI score0.00534EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:00 a.m.13 views

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the sixeldecode function in the Coder/sixel.c file of the console-based graphic editor ImageMagick is caused by buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure application termination using a specially craft...

6.8CVSS7AI score0.01766EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:00 a.m.18 views

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the WriteGROUP4Image function in the console-based image editing tool ImageMagick is caused by buffer overflow. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure termination of the application using a specially crafted file...

6.8CVSS7.1AI score0.01715EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder