Lucene search
+L

2686 matches found

BDU FSTEC
BDU FSTEC
•added 2023/08/07 12:00 a.m.•13 views

The vulnerability of Google Chrome’s Sandbox component allows a violator to gain unauthorized access to protected information, compromise its integrity, or cause service failures.

The vulnerability of Google Chrome’s Sandbox component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, compromise its integrity, or cause service failures...

10CVSS7.6AI score0.00656EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/08/07 12:00 a.m.•20 views

The vulnerability of the phpMyFAQ web application lies in the absence of a mechanism to neutralize certain elements. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the phpMyFAQ web application is related to the absence of element neutralization mechanisms. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures using a specially crafted CSV file...

9CVSS7.6AI score0.00809EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/08/03 12:00 a.m.•25 views

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the use of a regular expression with inefficient computational complexity, allowing attackers to trigger service failures.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service...

6.8CVSS6.5AI score0.01568EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/08/03 12:00 a.m.•31 views

The vulnerability of CODESYS software products, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.6AI score0.01856EPSS
SaveExploits0References2Affected Software19
BDU FSTEC
BDU FSTEC
•added 2023/08/03 12:00 a.m.•18 views

The vulnerability of the SAP SQL Anywhere relational database management system lies in the improper assignment of permissions to critical resources. This allows a perpetrator to trigger a service failure or cause other adverse effects.

The vulnerability of SAP SQL Anywhere relational database management systems is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...

7.8CVSS7.2AI score0.00159EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/08/02 12:00 a.m.•21 views

The vulnerability of component E1 in the IOT Orchestrator Security application of JD Edwards EnterpriseOne allows a attacker to trigger a service failure.

The vulnerability of component E1 in the JD Edwards EnterpriseOne Orchestrator Security application relates to errors in processing input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.5CVSS6.6AI score0.0038EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/08/02 12:00 a.m.•20 views

The vulnerability of the kernel of iOS, iPadOS, and macOS allows a perpetrator to trigger a service failure.

The vulnerability in the kernels of iOS, iPadOS, and macOS exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS7.2AI score0.01194EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/07/28 12:00 a.m.•13 views

The vulnerability of the CreateSerializerSettings() function in the JSON Serializer component allows a hacker to trigger a service failure. This vulnerability is related to the C# language protocol implemented by the language server.

The vulnerability of the CreateSerializerSettings function in the JSON Serializer component is related to the implementation of the C language server protocol. This vulnerability leads to an uncontrolled resource consumption. Exploiting this vulnerability allows a malicious actor to cause service...

3.5CVSS5.8AI score0.00886EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/07/28 12:00 a.m.•10 views

The vulnerability of the InnoDB component of the MySQL database management system, which allows a hacker to cause a service failure

The vulnerability of the InnoDB component in the MySQL database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

4.6CVSS6.3AI score0.01219EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/07/26 12:00 a.m.•19 views

The vulnerability of the CGI microprogramming interface of Zyxel NR7101 allows a hacker to induce a service failure.

The vulnerability of the CGI microprogramming interface of Zyxel NR7101 routers lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS7.3AI score0.01016EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/07/26 12:00 a.m.•18 views

The vulnerability of the SharedPreference File Handler component in the Yandex Navigator application, which allows a hacker to trigger a service failure

The vulnerability of the SharedPreference File Handler component in the Yandex Navigator application is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

5.5CVSS5.9AI score0.002EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/07/25 12:00 a.m.•15 views

The vulnerability of Google Chrome’s Themes component, which allows a hacker to trigger a service failure

The vulnerability of the Google Chrome browser’s Themes component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS5.4AI score0.00552EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/07/24 12:00 a.m.•13 views

The vulnerability of the session_user() function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the sessionuser function in the fs/ksmbd/smb2pdu.c file of the KSMBD file system in the Linux operating system is related to reading data beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause servic...

9.4CVSS6.8AI score0.03157EPSS
SaveExploits0References25Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•12 views

The vulnerability of the Protobuf data serialization protocol, related to pointer dereferencing errors, allows attackers to cause service failures.

The vulnerability of the Protobuf data serialization protocol is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to cause service failures...

5.5CVSS6.5AI score0.0266EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•11 views

The vulnerability of the Runc command-line tool for running isolated containers, related to improper storage of permissions, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Runc container launch tool is related to improper storage of permissions. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

6.3CVSS6.8AI score0.00319EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•12 views

The vulnerability in the `libcontainer/rootfs_linux.go` component of the Runc tool for running isolated containers allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libcontainer/rootfslinux.go component, a tool for running isolated containers in Runc, is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...

7CVSS6.4AI score0.00448EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•10 views

The vulnerability of the Ruby programming language’s URI component lies in the use of a regular expression c, which has an inefficient computational cost. This allows attackers to trigger a service failure.

The vulnerability of the Ruby programming language’s URI component is related to the incorrect handling of invalid URL addresses. Exploiting this vulnerability allows a remote attacker to cause service failures...

5.3CVSS6.7AI score0.02637EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•14 views

The vulnerability of the Unbound DNS server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS7.2AI score0.01622EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•15 views

The vulnerability of the OTP component in the Erlang programming language allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OTP component in the Erlang programming language is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.7AI score0.01477EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•19 views

The vulnerability of the Runc command-line tool for isolated containers arises from incorrect handling of symbolic links before accessing the file. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Runc container launch tool is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.8AI score0.00343EPSS
SaveExploits0References11Affected Software7
Rows per page
Query Builder