Lucene search
+L

2176 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.9 views

The vulnerability of the Nef_S2/SNC_io parser.h component in the CGAL algorithm library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NefS2/SNCio parser.h component in the CGAL algorithm library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

10CVSS7.9AI score0.02361EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.8 views

The vulnerabilities of the components Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm of the OTRS ticket request system allow a violator to access confidential data, compromise its integrity, and cause service failures.

The vulnerabilities in the components Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm of the OTRS ticket request system are...

9CVSS7.2AI score0.01322EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.11 views

The vulnerability of configuration management systems and remote execution of operations like Salt, which involves exposing information in error-prone data areas, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of configuration management systems and remote execution of operations like Salt is related to the exposure of information in error-prone data areas. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause...

7.5CVSS7.7AI score0.03514EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.15 views

The vulnerability of the Fraction function in the libheif/box.cc component of the HEIF and AVIF encoding/decoding library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Fraction function in the libheif/box.cc component of the HEIF and AVIF encoding/decoding library allows attackers to exploit it remotely. This enables them to access confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.5AI score0.01368EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.8 views

The vulnerability of the LoadObj function of the .obj Tinyobjloader loader allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the LoadObj function of the .obj Tinyobjloader loader is related to unvalidated array indexing. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through the use of a malicious file...

9.3CVSS7.8AI score0.0188EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.10 views

The vulnerability of the nmakehlp.c component in the Tcl programming language allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Tcl programming language component nmakehlp.c is related to insufficient handling of format lines. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file...

10CVSS7.1AI score0.01639EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.10 views

The vulnerability of the ff_hevc_put_unweighted_pred_8_sse function in the h.265 Libde265 implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ffhevcputunweightedpred8sse function in the H.265 Libde265 video codec implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause servi...

10CVSS7.5AI score0.01814EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.9 views

The vulnerability of the hevc_parse_vps_extension function in the MP4Box component of the GPAC multimedia platform allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hevcparsevpsextension function in the MP4Box component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

10CVSS7.4AI score0.01274EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.12 views

The vulnerability of the HDLR decoder in the MPEG-4 multimedia platform GPAC function decoding process allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the HDLR decoder in the MPEG-4 multimedia platform GPAC decoding function is related to the lack of a mechanism for data type conversion. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data, compromise its integrity, and cau...

9.3CVSS7.6AI score0.01632EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.13 views

The vulnerability of the ilst_item_Read function in the box_code_apple.c component of the GPAC multimedia platform allows a hacker to trigger a service failure.

The vulnerability of the ilstitemRead function in the boxcodeapple.c component of the GPAC multimedia platform is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

7.1CVSS5.9AI score0.008EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.8 views

The vulnerability of the net.Lookup{Addr,CNAME,Host} functions in the Golang programming language allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the net.LookupAddr,CNAME,Host functions in the Golang programming language is related to the lack of hostname filtering in the DNS server responses. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, a...

7.5CVSS6.5AI score0.03231EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.11 views

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.9AI score0.01737EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.8 views

The vulnerability of the `sixel_encode_highcolor` function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the sixelencodehighcolor function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

9.3CVSS7.8AI score0.01069EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.8 views

The vulnerability of the MdeModulePkg component in open-source development environments for UEFI EDK2 allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MdeModulePkg component in open-source development environments for UEFI EDK2 is related to insufficient input validation. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

7.2CVSS6.5AI score0.00345EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.8 views

The vulnerability of the DumpRawUIConfig function in the odf_dump.c component of the GPAC multimedia platform allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the DumpRawUIConfig function in the odfdump.c component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.5AI score0.01052EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.16 views

The vulnerability of the PCRB decoder in the MPEG-4 multimedia platform GPAC’s decoding function allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PCRB decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failure...

9.3CVSS7.6AI score0.0201EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.13 views

The vulnerability of the Core component of the VirtualBox virtualization software allows a hacker to trigger a system failure.

The vulnerability of the Core component of the VirtualBox virtualization software is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

6CVSS7AI score0.00398EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.8 views

The vulnerability of the RIFF::List::GetSubList function in the RIFF.cpp component of the libgig processing library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the RIFF::List::GetSubList function in the RIFF.cpp component of the file processing library libgig is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servic...

8.8CVSS7.7AI score0.01502EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.9 views

The vulnerability of the Gradle plugin and script for the automatic build system Gradle allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gradle plugin and script in the automatic build system Gradle is related to the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

8.5CVSS7.3AI score0.02709EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:0 a.m.26 views

The vulnerability of the Mat_VarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MatVarReadNextInfo5 function in the mat5.c library for reading and writing MATLAB MATIO files is related to integer overflow. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.7AI score0.01368EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder