Lucene search
+L

5439 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.10 views

The vulnerability of the newusers tool in the shadow account management utility allows for data leakage when operations are performed outside of the buffer in memory. This enables attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the newusers tool in the shadow account management utility is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.8CVSS6.7AI score0.02659EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.10 views

The vulnerability of the shadow account management tool is related to insecure management of privileges, allowing a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shadow account management tool is related to the incorrect specification of pts/o and pts/1 as physical terminals in the /etc/securetty file. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...

7.8CVSS7.1AI score0.00404EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.11 views

The vulnerability of the mail client in operating systems such as iOS, iPadOS, and watchOS allows a hacker to trigger a service failure.

The vulnerability of the email client in operating systems such as iOS, iPadOS, and watchOS is related to the operation of writing data beyond the buffer in memory when processing malicious email messages. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.3CVSS5.7AI score0.02178EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.12 views

The vulnerability of Cisco’s software algorithm, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Cisco software algorithms is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.5CVSS7.4AI score0.01289EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.22 views

The vulnerability of the ngx_memcpy function in the OpenResty web server, related to buffer overflows, allows attackers to cause a service failure.

The vulnerability of the memcpy-param-overlap function in the OpenResty web server is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...

3.9CVSS5.9AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.16 views

The vulnerability in the implementation of the source code file arch/powerpc/kvm/book3s_hv_rmhandlers.S of Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability in the implementation of the source code file arch/powerpc/kvm/book3shvrmhandlers.S of Linux operating systems is related to the lack of checks for returned data during the processing of SRR1 values. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.7AI score0.00368EPSS
SaveExploits0References16Affected Software5
ATTACKERKB
ATTACKERKB
added 2021/11/30 1:40 a.m.4 views

CVE-2021-43360

Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services...

9CVSS7.7AI score0.02328EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/30 12:00 a.m.6 views

PT-2021-8112 · Unknown +5 · Virglrenderer +5

Name of the Vulnerable Software and Affected Versions: virglrenderer affected versions not specified Description: The issue is related to an out-of-bounds write in the VirGL virtual OpenGL renderer. A malicious guest can create a specially crafted virgil resource and issue a VIRTGPU EXECBUFFER...

7.8CVSS6AI score0.00439EPSS
SaveExploits0References65
BDU FSTEC
BDU FSTEC
added 2021/11/29 12:00 a.m.11 views

The vulnerability in the implementation of the tipc_crypto_key_rcv() function for the TIPC protocol, which is used for intra-cluster communication in Linux operating systems, allows a attacker to cause a service failure or gain increased privileges.

The vulnerability of the implementation of the tipccryptokeyrcv function in the Linux operating system’s Transparent Inter-Process Communication TIPC kernel relates to insufficient input validation when processing MSGCRYPTO messages. Exploiting this vulnerability can allow an attacker to cause...

9.8CVSS6.9AI score0.5758EPSS
SaveExploits3References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:00 a.m.16 views

The vulnerability of Windows operating system script handlers allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of Windows operating system script handlers is related to the operation of writing data beyond the buffer boundaries into memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a...

9.3CVSS8AI score0.40062EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/11/23 12:00 a.m.12 views

Huawei HarmonyOS 安全漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to incorrect privileges. An attacker can exploit this vulnerability to affect service availability...

7.5CVSS5.9AI score0.00621EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.9 views

The vulnerability of the check_password function in the web server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the checkpassword function in the web server of the programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code using a specially crafted reque...

10CVSS6.3AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.10 views

The vulnerability of the web-server of the programmable logic controller ioLogik, related to buffer overflow in the stack, allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web-server-based programmable logic controller ioLogik is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code using a specially crafted request...

10CVSS6.3AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:00 a.m.10 views

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...

10CVSS7.8AI score0.00889EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/11/18 12:00 a.m.12 views

The vulnerability of JScript and VBScript script handlers in Internet Explorer, related to the execution of operations beyond the buffer boundaries, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JScript and VBScript script handlers in Internet Explorer is related to the execution of operations beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially crafted web page...

7.6CVSS8.3AI score0.94062EPSS
SaveExploits10References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:00 a.m.11 views

The vulnerability of the Web Transport component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Web Transport component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...

10CVSS8.4AI score0.00942EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:00 a.m.8 views

The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...

10CVSS8.1AI score0.00942EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:00 a.m.8 views

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...

10CVSS8.1AI score0.00942EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:00 a.m.14 views

The vulnerability in the implementation of the mm_malloc() function in the Mongoose OS operating system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the mmmalloc function implementation in the Mongoose OS operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

10CVSS8.1AI score0.01613EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2021/11/16 7:15 p.m.11 views

CVE-2021-26336

Insufficient bounds checking in System Management Unit SMU may cause invalid memory accesses/updates that could result in SMU hang and subsequent failure to service any further requests from other components...

5.5CVSS5.8AI score0.00212EPSS
SaveExploits0References1
Rows per page
Query Builder