Lucene search
+L

2177 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.11 views

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR arises from insufficient input data validation. This allows attackers to trigger service interruptions.

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.4CVSS7.1AI score0.00389EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/21 12:0 a.m.6 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.4AI score0.01599EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.14 views

The vulnerability of Adobe Flash Player, Adobe Integrated Runtime (AIR), Adobe AIR SDK, and Adobe AIR SDK & Compiler lies in the possibility of an out-of-buffer operation, allowing attackers to execute arbitrary code or cause service failures.

The vulnerabilities of Adobe Flash Player, Adobe Integrated Runtime AIR, Adobe AIR SDK, and Adobe AIR SDK & Compiler are related to the execution of operations beyond the buffer boundaries. Exploiting these vulnerabilities allows a malicious actor to execute arbitrary code or cause service failur...

10CVSS6.8AI score0.20008EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.14 views

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to incorrect syntactic analysis of XML objects, which allows a attacker to trigger a service failure.

The vulnerability of the VMware vCenter Server virtual infrastructure management tool is related to incorrect syntactic analysis of XML objects. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS7.2AI score0.00976EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/08 12:0 a.m.11 views

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient verification of input data, allowing attackers to trigger service failures.

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

6.5CVSS6.5AI score0.00854EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/08 12:0 a.m.11 views

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X devices arises due to insufficient verification of input data. This allows attackers to trigger malfunctions in the service process.

The vulnerability of the Bluetooth Classic microprogramming system implementation in Zhuhai Jieli AC690X devices exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to cause service failures through the created LMP packet...

6.5CVSS6.6AI score0.00531EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.6 views

The vulnerability of the Linux kernel driver in Nitro Enclaves, related to pointer arithmetic errors, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux kernel driver in Nitro Enclaves is related to errors in pointer assignment when closing file descriptors for enclaves. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.9AI score0.00301EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.10 views

The vulnerability of the Eterm, Mrxyt, Rxyt-unicode software lies in their SSL-Proxy function, which allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Eterm, Mrxyt, Rxyt, and Rxyt-unicode software lies in the improper handling of certain control sequences. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.6AI score0.04089EPSS
SaveExploits1References7Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.8 views

The vulnerability of software for performing virtualization at the operating system level, also known as containerization, Singularity, arises from insufficient checking of unusual or exceptional states. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of software for performing virtualization at the operating system level, also known as containerization, is related to improper checking of the return value of functions. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise it...

9.8CVSS7.7AI score0.01258EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.8 views

The vulnerability of the pickle.load() function in Manuscript software, related to the restoration of unreliable data in memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the pickle.load function in software for manuscript writers involves restoring unreliable data in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

8.8CVSS7.2AI score0.01888EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.50 views

The vulnerability of the Flask software’s extension relates to insecure privilege management. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Flask extension relates to an error in the use of Pickle for serialization. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

9.8CVSS7.8AI score0.07288EPSS
SaveExploits4References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.10 views

The vulnerability of the copy_from_user() function in the file system of the shiftfs filesystem in Linux’s operating system, which is related to the repeated release of memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the copyfromuser function in the file system of the shiftfs filesystem in Linux’s operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

7.8CVSS6.7AI score0.01535EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.10 views

The vulnerability of the declarative reading and writing methods for BinData binary file formats, related to uncontrolled resource consumption, allows a perpetrator to cause service failures.

The vulnerability of the declarative method for reading and writing BinData binary file formats is related to the relatively slow creation of certain classes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

4.3CVSS5.4AI score0.01866EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.6 views

The vulnerability of the Linux operating system’s kernel, related to insufficient checking of privilege assignment for critical resources, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to insufficient checking of permission assignments for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.6AI score0.00469EPSS
SaveExploits1References21Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.9 views

The vulnerability of the libdnf package manager library involves incorrect verification of the cryptographic signature of data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the package manager library libdnf is related to a bug in the signature verification function. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS6.8AI score0.01117EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.9 views

The vulnerability of the Singularity container platform, related to the failure to cleanse input data, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Singularity container platform relates to the failure to cleanse input data. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.9AI score0.01415EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.8 views

The vulnerability of the overlayfs component in the Linux operating system’s kernel allows for insecure privilege management. This enables attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the overlayfs component in the Linux operating system’s kernel involves ignoring user name spaces when configuring file permissions in the underlying file system. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, a...

7.8CVSS6.9AI score0.49166EPSS
SaveExploits28References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:0 a.m.10 views

The vulnerability of the Network Time Protocol NTP, related to insufficient protection of service data, allows attackers to trigger a service failure.

The vulnerability of the Network Time Protocol NTP is related to insufficient protection of service data during port randomization. Exploiting this vulnerability can allow a malicious actor to cause service failures by connecting through port 123...

8.1CVSS7.4AI score0.02637EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:0 a.m.10 views

The vulnerability of the Framework component in Android operating systems allows a hacker to trigger a service failure.

The vulnerability of the Framework component in Android operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created file...

10CVSS5.7AI score0.00122EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:0 a.m.10 views

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient input validation. This allows attackers to trigger service failures.

The vulnerability of the .NET Core runtime, the PowerShell Core automation tool, and the Visual Studio software development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.5CVSS7.1AI score0.03858EPSS
SaveExploits0References3Affected Software4
Rows per page
Query Builder