Lucene search
+L

5439 matches found

BDU FSTEC
BDU FSTEC
added 2022/02/01 12:00 a.m.11 views

The vulnerability of the nf_tables_newset function (net/netfilter/nf_tables_api.c) in Linux operating system kernels, which allows a hacker to cause a service failure

The vulnerability of the nftablesnewset function net/netfilter/nftablesapi.c in Linux operating systems is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00316EPSS
SaveExploits0References8Affected Software3
Veracode
Veracode
added 2022/01/29 5:20 p.m.39 views

Denial Of Service (DoS)

openjdk1 is vulnerable to denial of service. The vulnerability exists due to improper input validation in the ImageIO component allows attacker to perform service disruption...

5.3CVSS3.9AI score0.03091EPSS
SaveExploits0References8Affected Software6
Veracode
Veracode
added 2022/01/29 4:10 p.m.25 views

Denial Of Service (DoS)

openjdk1 is vulnerable to denial of service. The vulnerability exists due to improper input validation in the ImageIO component allows attacker to perform service disruption...

5.3CVSS3.9AI score0.03216EPSS
SaveExploits0References8Affected Software6
OSV
OSV
added 2022/01/28 10:15 p.m.6 views

CVE-2021-44414

A denial of service vulnerability exists in the cgiserver.cgi JSON command parser functionality of reolink RLC-410W v3.0.0.13620121102. A specially-crafted HTTP request can lead to a reboot. DelUser param is not object. An attacker can send an HTTP request to trigger this vulnerability...

7.7CVSS5.8AI score0.01207EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2022/01/27 4:18 p.m.15 views

OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows...

5.3CVSS7.4AI score0.03458EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.12 views

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as DC112A, R6400, RAX200, WNDR3400v3, XR300, R8500, RAX75, R8300, and RAX80 lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as DC112A, R6400, RAX200, WNDR3400v3, XR300, R8500, RAX75, R8300, and RAX80 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute...

9.6CVSS8.3AI score0.01199EPSS
SaveExploits0References3Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.9 views

The vulnerability of the SProcRenderCompositeGlyphs function in the X Window System X.Org Server implementation allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SProcRenderCompositeGlyphs function in the X Window System X.Org Server implementation is related to the execution of operations that exceed the permissible buffer data limits. Exploiting this vulnerability can allow attackers to access confidential data, compromise its...

7.8CVSS7.6AI score0.00565EPSS
SaveExploits0References18Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.16 views

The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary codes remotely...

7.6CVSS8AI score0.01176EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.18 views

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900 lies in the copying of buffers without checking the size of the input data. This allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of NETGEAR Wi-Fi router software models such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900P lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

9.6CVSS8.2AI score0.01199EPSS
SaveExploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.11 views

The vulnerability of microprogrammed Wi-Fi router software from NETGEAR models D6220, D6400, D7000v2, D8500, DC112A, EX7000, EX7500, R6250, R6300v2, R6400, R6400v2, R6700v3, R7000, R7100LG, R7850, R7900, R7960P, R8000, RAX200, RBS40V, RS400, XR300, R7000P, R8000P, R8500, RAX80, R6900P, R7900P, R8300, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, RBK852 lies in the copying of buffers without checking the size of the input data. This allows a malicious actor to cause malfunctions or execute arbitrary code.

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, including models D6220, D6400, D7000v2, D8500, DC112A, EX7000, EX7500, R6250, R6300v2, R6400, R6400v2, R6700v3, R7000, R7100LG, R7850, R7900, R7960P, R8000, RAX200, RBS40V, RS400, XR300, R7000P, R8000P, R8500, RAX80, R6900P,...

9.6CVSS8.1AI score0.01129EPSS
SaveExploits0References3Affected Software34
Prion
Prion
added 2022/01/21 9:15 a.m.16 views

Input validation

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt SMI to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service...

7.2CVSS7.8AI score0.00269EPSS
SaveExploits0References1Affected Software13
CVE
CVE
added 2022/01/21 9:05 a.m.71 views

CVE-2022-21933

CVE-2022-21933 affects ASUS VivoMini/Mini PC and describes an improper input validation vulnerability. A local attacker with system privileges can trigger a System Management Interrupt (SMI) to modify memory, resulting in arbitrary code execution and potential control or disruption of the system....

7.8CVSS7.3AI score0.00269EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.15 views

The vulnerability of the url.cpp component in the Libproxy configuration management library, due to a lack of mechanism for checking the size of copied data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the url.cpp component in the Libproxy configuration management library is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data, compromise its...

9.8CVSS7.7AI score0.03556EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.11 views

The vulnerability in the implementation of the rmmod command for the Grub2 operating system allows a hacker to gain access to confidential data, affect the integrity of the data, and cause service failures.

The vulnerability of the rmmod command, which is used by the Grub2 operating system loader, lies in the lack of checks to ensure that loaded modules are indeed present. Exploiting this vulnerability can allow an attacker to access confidential data, compromise data integrity, and cause service...

8.2CVSS6.8AI score0.01152EPSS
SaveExploits0References18Affected Software14
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.12 views

The vulnerability of the Node.js software platform, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node.js software platform is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS6.5AI score0.36453EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.9 views

The vulnerability of the WebKit rendering module, related to memory usage after deallocation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebKit page rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS6.8AI score0.029EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.12 views

The vulnerability of the Autofill component in the Google Chrome web browser, related to the use of memory after it is freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Autofill component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially creat...

9.3CVSS7.6AI score0.01101EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.13 views

The vulnerability of the md_analyze_line function (md4c.c) in the MD4C parser, which relates to the use of an uninitialized resource, allows a hacker to cause a service failure.

The vulnerability of the mdanalyzeline function in the MD4C parser is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.1CVSS5.9AI score0.00697EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.14 views

The vulnerability of the OpenJPEG library for image encoding and decoding, related to reading data beyond the buffer’s acceptable limits, allows attackers to cause service failures.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.1CVSS6.7AI score0.01682EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/20 12:00 a.m.10 views

The vulnerability of the Payments component in the Google Chrome web browser, related to memory usage after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Payments component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

9.3CVSS7.6AI score0.00916EPSS
SaveExploits1References10Affected Software5
Rows per page
Query Builder