Lucene search
+L

5415 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.10 views

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to incorrect session duration settings. This allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

8.1CVSS7.3AI score0.01255EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.10 views

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the Cisco AsyncOS operating system’s web server interfaces, such as Cisco Web Security Appliance, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to cause service interruptions or gain unauthorized access to protected...

9CVSS7.6AI score0.00981EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.11 views

The vulnerability of the ReadSIXELImage function in the console-based image editing tool ImageMagick allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the ReadSIXELImage function in the ImageMagick console-based graphics editor coders/sixel.c arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS8.1AI score0.03188EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the Apache HTTP Server web server, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server is related to the issue of operations going beyond the buffer in memory after reaching the read size limit for HTTP headers. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.3CVSS7.1AI score0.14451EPSS
SaveExploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.7 views

The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server allows a attacker to cause service failures or lead to incorrect server configuration.

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures or lead to incorrect server configuration...

4.9CVSS6.5AI score0.08745EPSS
SaveExploits0References9Affected Software8
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the mod_cache_socache module in the Apache HTTP Server, related to reading data beyond the buffer’s acceptable limit, allows attackers to cause service failures.

The vulnerability of the modcachesocache module in the Apache HTTP Server relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.3CVSS7.5AI score0.65068EPSS
SaveExploits0References16Affected Software5
CNVD
CNVD
added 2019/11/28 12:00 a.m.17 views

Cesanta Mongoose Input Validation Error Vulnerability

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. An input validation error vulnerability exists in Cesanta Mongoose. The vulnerability stems from a network system or...

9.8CVSS7AI score0.41622EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/11/26 12:00 a.m.10 views

The vulnerability of the JunOS operating system, related to the SSL-Proxy function, allows a hacker to cause a service failure.

The vulnerability of the JunOS operating system is related to the SSL-Proxy function, which fails to handle hardware resource limitations. Exploiting this vulnerability allows a remote attacker to trigger repeated failures of the flowd daemon, which can lead to service interruption if the user...

7.8CVSS7.2AI score0.01064EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.10 views

The vulnerability of Modicon microprogrammed control devices, related to a data processing error in the REST API, allows a perpetrator to trigger a service failure.

The vulnerability of Modicon microprogrammed control devices is related to a data processing error in the REST API. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

8.6CVSS7.7AI score0.32974EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.9 views

The vulnerability of the difflib.IS_LINE_JUNK method in the Python interpreter allows a attacker to cause a service failure.

The vulnerability of the difflib.ISLINEJUNK method in the Python interpreter exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

7.8CVSS6.6AI score0.04844EPSS
SaveExploits0References17Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.9 views

The vulnerability of the json_populate_recordset and jsonb_populate_recordset functions in the PostgreSQL database management system allows a hacker to cause a service failure or gain unauthorized access to protected information.

The vulnerability of the jsonpopulaterecordset and jsonbpopulaterecordset functions in the PostgreSQL database management system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to...

8.5CVSS7.1AI score0.03264EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.10 views

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition systems allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the Web interface for Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose...

6.4CVSS6.4AI score0.01075EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:00 a.m.13 views

The vulnerability of the MagickRealloc function in the memory.c file of the cross-platform graphics library GraphicsMagick, which allows a hacker to trigger a service failure.

The vulnerability of the MagickRealloc function in the cross-platform graphics library GraphicsMagick is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created .dpx file...

7.8CVSS6.7AI score0.01981EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:00 a.m.11 views

The vulnerability of the coders/tiff.c component in the cross-platform library for working with graphics in GraphicsMagick, which allows a hacker to trigger a service failure.

The vulnerability of the coders/tiff.c component in the cross-platform library for working with graphics in GraphicsMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by using a specially crafted RGB TIFF...

7.8CVSS6.8AI score0.02502EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/18 12:00 a.m.8 views

The vulnerability of the WPG reading module in the cross-platform library for working with GraphicsMagick allows a hacker to induce a service failure.

The vulnerability of the WPG reading module in cross-platform libraries for working with GraphicsMagick is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7.4AI score0.03131EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2019/11/13 5:15 p.m.7 views

CVE-2019-5294

There is an out of bound read vulnerability in some Huawei products. A remote, unauthenticated attacker may send a corrupt or crafted message to the affected products. Due to a buffer read overflow error when parsing the message, successful exploit may cause some service to be abnormal...

7.5CVSS7.3AI score0.00928EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/13 12:00 a.m.10 views

Envoy Denial of Service Vulnerability

Envoy is an open source distributed proxy server . Envoy has a denial of service vulnerability that can be exploited by remote attackers to cause a denial of service...

7.5CVSS6.9AI score0.01938EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.9 views

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Open function in the VideoLAN VLC media player’s modules/demux/tta.c file is related to numerical processing errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

9.3CVSS6AI score0.13434EPSS
SaveExploits2References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.7 views

The vulnerability of the MP4A packetizer (modules/packetizer/mpeg4audio.c) in the VideoLAN VLC media player software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the mp4a packetizer modules/packetizer/mpeg4audio.c in the VideoLAN VLC media player software is related to buffer overflows in the dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

6.8CVSS6.3AI score0.03782EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.12 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain access to read, modify, or delete data, or to cause a service failure.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data, or cause service interruptions through...

3.9CVSS6.7AI score0.00396EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder