Lucene search
+L

5449 matches found

BDU FSTEC
BDU FSTEC
added 2025/02/12 12:00 a.m.16 views

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to improper blocking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.1CVSS6.5AI score0.00235EPSS
SaveExploits0References29Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/12 12:00 a.m.14 views

The vulnerability in the module net/vmw_vsock/vsock_bpf.c of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the module net/vmwvsock/vsockbpf.c of Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00225EPSS
SaveExploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/02/12 12:00 a.m.16 views

The vulnerability of the ActiveRecord PostgreSQL interpreter for Ruby allows a hacker to cause a service failure.

The vulnerability of the ActiveRecord PostgreSQL interpreter for Ruby is related to insufficient validation of data entered by users. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.2AI score0.01265EPSS
SaveExploits1References5Affected Software4
Veracode
Veracode
added 2025/02/11 11:34 a.m.12 views

Denial Of Service (DoS)

Apache James Server is vulnerable to Denial of Service DoS. The vulnerability is due to unbounded memory consumption due to the JMAP HTML-to-plain-text conversion implementation failing to properly limit resource usage, potentially leading to service disruption...

7.5CVSS6.7AI score0.00798EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/11 12:00 a.m.11 views

The vulnerability of the InnoDB component in the Oracle Database Server system allows a hacker to gain privileged access, modify data, or cause service failures.

The vulnerability of the InnoDB component in the Oracle Database Server system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain privileged access, modify data, or cause service failures through network packets...

7.5CVSS6.9AI score0.00735EPSS
SaveExploits0References6Affected Software2
VulnCheck KEV
VulnCheck KEV
added 2025/02/11 12:00 a.m.6 views

VulnCheck KEV: CVE-2025-21391

Microsoft Windows Storage contains a link following vulnerability that could allow for privilege escalation. This vulnerability could allow an attacker to delete data including data that results in the service being unavailable...

7.1CVSS5.8AI score0.02303EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.12 views

Vulnerability of the Server component: The Information Schema of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

Vulnerability of the Server component: The information schema of the Oracle MySQL Server database management system is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...

6.8CVSS6.6AI score0.01068EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.9 views

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...

6.8CVSS6.3AI score0.00971EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.19 views

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure through a specially created HTML page...

7.5CVSS7.4AI score0.00391EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.14 views

The vulnerability of the Connector/Python environment component in Oracle Application Express software allows a attacker to read and modify data, or cause a service failure.

The vulnerability of the Connector/Python component in Oracle Application Express application development software relates to unlimited resource allocation or throttling. Exploiting this vulnerability can allow a malicious actor to gain read and write access to data, or cause service failures...

8.7CVSS7.7AI score0.00461EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.10 views

The vulnerability of the vduse_vdpa_get_config() function in the vDPA driver of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vdusevdpagetconfig function in the vDPA driver, located in the drivers/vdpa/vdpauser/vdusedev.c file of the Linux kernel, involves reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.1CVSS6.1AI score0.00211EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.11 views

Vulnerability of the Server component: The Performance Schema of the Oracle MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the Server component of the Oracle MySQL Server’s database management system is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through network packets...

6.8CVSS6.6AI score0.00971EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/10 12:00 a.m.9 views

The vulnerability of the Security component of the Oracle Communications Order and Service Management system allows a perpetrator to gain read, modify, add, or delete access to data, or cause a partial service disruption.

The vulnerability of the Security component of the Oracle Communications Order and Service Management system is related to a data source validation error. Exploiting this vulnerability may allow an attacker, operating remotely, to gain read, modify, add, or delete access to data, or cause a parti...

6.5CVSS7.7AI score0.00192EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/07 12:00 a.m.10 views

The vulnerability of the AirPlay implementation in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a attacker to cause a service failure.

The vulnerability of the AirPlay technology’s implementation in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to data type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafte...

7.8CVSS7.7AI score0.01331EPSS
SaveExploits0References7Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/02/07 12:00 a.m.10 views

The vulnerability of the InnoDB component of the MySQL Database Server allows a attacker to gain read, modify, or delete access to data, or to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data, or cause service interruptions...

7.5CVSS6.9AI score0.00735EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.10 views

The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub, related to operations occurring outside the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the software for accessing analytics and planning tools in the IBM Analytics Content Hub is related to the escape from buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service interruptions...

9CVSS6.2AI score0.00713EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/02/06 12:00 a.m.13 views

Sylius 安全漏洞

Sylius is an open source e-commerce platform based on the Symfony framework from the Polish company Sylius. A security vulnerability exists in Sylius version v2.0.2, which stems from the inclusion of a rate limiting issue. An attacker exploiting this vulnerability could conduct a brute force...

7.5CVSS6.3AI score0.0122EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/02/05 1:19 p.m.15 views

CVE-2020-8489

Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management all published versions enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management...

7.8CVSS6.2AI score0.0034EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:25 a.m.17 views

CVE-2024-47614

async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability is fixed in 7.0.10...

7.5CVSS6.7AI score0.00576EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 8:00 a.m.16 views

CVE-2024-29205

An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure 9.x, 22.x and Ivanti Policy Secure 9.x, 22.x allows a remote unauthenticated attacker to send specially crafted requests in-order-to cause service disruptions...

7.5CVSS7.1AI score0.01581EPSS
SaveExploits0References1
Rows per page
Query Builder