Lucene search
+L

5439 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.13 views

The vulnerability of the hd_strlcpy() function in software for converting web pages using htmldoc, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hdstrlcpy function in software for converting web pages to htmldoc format is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.01135EPSS
SaveExploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.9 views

The vulnerability of WebKitGTK and WPE WebKit rendering modules, related to data type conversion errors, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit is related to data type conversion errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

8.8CVSS7AI score0.01664EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.10 views

The vulnerability of the multi-media library Ffmpeg, related to recording beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Ffmpeg multimedia library is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

8.8CVSS6.9AI score0.01624EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.11 views

The vulnerability of the application management tools and Flatpak environments, related to insufficient validation of input data, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the application and Flatpak environment management tools is related to the absence of blocking in the seccomp filter for system calls related to mounting. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

7.8CVSS6.6AI score0.00436EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.12 views

The vulnerability of WebKitGTK and WPE WebKit rendering modules, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

8.8CVSS7.2AI score0.01677EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.11 views

The vulnerability of the wireshark traffic analysis program, related to reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the wireshark traffic analysis program lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.5CVSS7.1AI score0.03109EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.10 views

The vulnerability of the Java Velocity template mechanism, related to improper code generation control, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Java Velocity template mechanism is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9CVSS6.8AI score0.22709EPSS
SaveExploits0References24Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.12 views

The vulnerability of the Ceph software object storage network, related to authentication procedures that allow attackers to access confidential data, compromise the integrity of those data, and cause service failures.

The vulnerability of the Ceph software object networking system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data, compromise its integrity, and even cause service failures...

7.2CVSS6.6AI score0.02128EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.9 views

The vulnerability of the ntfs inode_lookup_by_name function in the NTFS file system driver for the FUSE NTFS-3G module, related to buffer overflow attacks, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inodelookupbyname function in the NTFS file system driver for the FUSE NTFS-3G module is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures through th...

7.8CVSS7AI score0.00455EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.12 views

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures using a specially created NTFS ind...

7.8CVSS6.8AI score0.00488EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.10 views

The vulnerability in the implementation of the ntfs_get_attribute_value function of the NTFS file system driver for the FUSE NTFS-3G module allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the ntfsgetattributevalue function in the NTFS file system driver for the FUSE NTFS-3G module is related to an incorrect check of the bytesinuse value. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...

7.8CVSS6.6AI score0.00415EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.11 views

The vulnerability of the convolution_y_8bit function in the multimedia library Ffmpeg, related to writing beyond buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the convolutiony8bit function in the multimedia library Ffmpeg is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.5AI score0.01499EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:00 a.m.17 views

The vulnerability of the `slice_get_derivative` function in the Ffmpeg multimedia library, related to writing beyond buffer boundaries, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the slicegetderivative function in the Ffmpeg multimedia library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

8.8CVSS7.2AI score0.01499EPSS
SaveExploits1References9Affected Software4
OSV
OSV
added 2022/01/14 5:15 a.m.7 views

CVE-2022-22055

The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system or disrupt service...

9.8CVSS6AI score0.02467EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/14 4:36 a.m.12 views

CVE-2022-22056

The Le-yan dental management system contains a hard-coded credentials vulnerability in the web page source code, which allows an unauthenticated remote attacker to acquire administrator’s privilege and control the system or disrupt service...

10CVSS7.3AI score0.02259EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.11 views

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogramming-based chips from the Demon model in 1905 allows a hacker to trigger a service failure.

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogrammed software chips in 1905 is related to the lack of authentication. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.8CVSS7.3AI score0.01038EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.12 views

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogramming-based chips from the Demon model in 1905 allows a hacker to trigger a service failure.

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogrammed software chips in 1905 is related to the lack of authentication. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.8CVSS7.3AI score0.01118EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.28 views

The vulnerability of Adobe Premiere Rush software arises from an operation that goes beyond buffer boundaries in memory, allowing attackers to trigger a service failure.

The vulnerability of Adobe Premiere Rush arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

9.3CVSS7.4AI score0.02273EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.4 views

PT-2022-1495 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the incorrect clearing or release of resources in the Windows IKE extension, which can lead to a denial-of-service condition. This can be exploited by a remote...

7.5CVSS9.2AI score0.0303EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:00 a.m.9 views

The vulnerability of the CAPWAP control protocol implementation in the Cisco IOS XE operating system allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CAPWAP control protocol implementation in the Cisco IOS XE operating system is related to buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS8AI score0.02964EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder