Lucene search
+L

9883 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.15 views

The vulnerability of the Double Ratchet Libolm cryptographic ratchet implementation lies in the possibility of data being written beyond the buffer boundaries. This allows attackers to gain access to confidential data, compromise its integrity, and even cause service failures.

The vulnerability of the Double Ratchet Libolm cryptographic ratchet implementation lies in the writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and even cause service...

9.8CVSS7.9AI score0.04262EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.12 views

The vulnerability of the SECURITY DEFINER function in software for performing operations on hard disk partition management allows a hacker to access confidential data, compromise its integrity, and cause service failures. This vulnerability arises from the failure to properly cleanse input data.

The vulnerability of the SECURITY DEFINER function in software for performing operations on hard disk partition management systems is related to the lack of measures taken to protect input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise it...

9.8CVSS7.7AI score0.022EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.7 views

The vulnerability in the implementation of the netfilter kernel of the Linux operating system arises from buffer overflows, which allow attackers to trigger a service failure.

The vulnerability in the implementation of the netfilter module in the Linux operating system is caused by buffer overflows. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.6CVSS6.8AI score0.00248EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.16 views

The vulnerability of the Linux operating system’s netback driver, related to the allocation of unlimited memory, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s netback driver relates to the allocation of unlimited memory. Exploiting this vulnerability can allow a hacker to cause a service failure...

6.5CVSS6.4AI score0.00708EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.15 views

The vulnerability of the XscreenSaver software for storing blocking animations is related to memory buffer overflow attacks, allowing attackers to trigger a service failure.

The vulnerability of the XscreenSaver software for storing blocking widgets is related to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.6CVSS5.8AI score0.0048EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.10 views

The vulnerability of the main() function of the dmgdmg2img conversion tool, which involves reading data beyond the allowable buffer size, allows an attacker to access confidential data and cause a service failure.

The vulnerability of the main function of the dmgdmg2img conversion tool lies in the lack of checks for the size of the read buffer during the memcpy operation within the function. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service...

8.1CVSS7.3AI score0.00908EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.11 views

The vulnerability of the Linux operating system’s kernel, related to reading beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.4CVSS6.8AI score0.00277EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:00 a.m.11 views

The vulnerability of the ccp_run_aes_gcm_cmd() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ccprunaesgcmcmd function in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

5.5CVSS6.5AI score0.00271EPSS
SaveExploits0References25Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:00 a.m.11 views

The vulnerability in the implementation of the malloc() function (source/ti/posix/freertos/memory.c) of the software development kit for microcontroller families SimpleLink (CC13XX, CC26XX, CC32XX, and MSP432E4) allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the malloc function implementation source/ti/posix/freertos/memory.c in the software development kit for microcontroller families SimpleLink CC13XX, CC26XX, CC32XX, and MSP432E4 is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to execute...

7.4CVSS7.8AI score0.00279EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:00 a.m.9 views

The vulnerability of the intel_pmu_drain_pebs_nhm function (arch/x86/events/intel/ds.c) in the Linux operating system’s kernel, which involves uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the intelpmudrainpebsnhm function arch/x86/events/intel/ds.c in the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00385EPSS
SaveExploits0References32Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:00 a.m.8 views

The vulnerability of the ccp-ops crypto driver in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ccp-ops crypto driver in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

5.5CVSS6.6AI score0.00533EPSS
SaveExploits1References36Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:00 a.m.13 views

The vulnerability in the implementation of the HeapTrack_alloc() function (kernel/tirtos/packages/ti/sysbios/heaps/HeapTrack.c) of the software development kit for microcontroller series CC13XX, CC26XX, CC32XX, and MSP432E4 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the HeapTrackalloc function implementation kernel/tirtos/packages/ti/sysbios/heaps/HeapTrack.c in the software development kit for microcontroller series CC13XX, CC26XX, CC32XX, and MSP432E4 arises due to a numerical overflow condition. Exploiting this vulnerability can allow...

7.4CVSS7.7AI score0.00276EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/09/30 12:00 a.m.9 views

The vulnerability of the XSA-365 component in the Linux operating system, related to incorrect data initialization, allows a hacker to trigger a service failure.

The vulnerability of the XSA-365 component in the Linux operating system is related to incorrect data initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.5CVSS6.5AI score0.00332EPSS
SaveExploits0References28Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.10 views

The vulnerability of the Selection API component in Google Chrome and Microsoft Edge browsers allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Selection API component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially created web page...

10CVSS8.2AI score0.10127EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.12 views

The vulnerability relates to the execution of the starview executable file and the .exe program for viewing scenarios and graphics in Simcenter STAR-CCM+ Viewer. This allows a malicious individual to execute arbitrary code or cause a service failure.

The vulnerability of the starview executable file and the .exe program for displaying scenes and graphics in Simcenter STAR-CCM+ Viewer lies in the issue of buffer overflows during syntax analysis of Vorimat SCE files. Exploiting this vulnerability can allow attackers to execute arbitrary code or...

7.8CVSS7.8AI score0.01336EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.14 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

10CVSS7.9AI score0.6319EPSS
SaveExploits3References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.10 views

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge browsers allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially created web page...

10CVSS8.2AI score0.0088EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.15 views

The vulnerability of the Blink rendering module in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the Blink rendering module in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created web page...

7.6CVSS6.7AI score0.00732EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:00 a.m.15 views

The vulnerability of the IP Service Level Agreement (IP SLA) and the implementation of the Two-Way Active Measurement Protocol (TWAMP) in the Cisco IOS XR operating system allows a perpetrator to trigger a service failure.

The vulnerability of the IP Service Level Agreement IP SLA and the implementation of the Two-Way Active Measurement Protocol TWAMP in the Cisco IOS XR operating system is related to the absence of a reference to an active, dedicated resource. Exploiting this vulnerability can allow a malicious...

8.6CVSS7.5AI score0.0129EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:00 a.m.13 views

The vulnerability of the Prosody server for Jabber/XMPP, related to a resource management mechanism error, allows attackers to trigger a service failure.

The vulnerability of the Prosody Jabber/XMPP server is related to a bug in the resource management mechanism. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.5CVSS7.1AI score0.02115EPSS
SaveExploits0References5Affected Software2
Rows per page
Query Builder