Lucene search
+L

2362 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/19 12:00 a.m.8 views

The vulnerability of the OpenOffice office suite relates to the issue of operations occurring outside the buffer boundaries in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to the issue of operations occurring outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

9.9CVSS5.7AI score0.0607EPSS
SaveExploits1References5Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/06/19 12:00 a.m.13 views

The vulnerability of the OpenOffice office suite arises from integer overflows that occur during the creation of records in the document table. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures due to the records created by the attack...

9.9CVSS5.5AI score0.06722EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:00 a.m.13 views

Vulnerability of Connected User Experience and Telemetry Service functions in Microsoft Windows operating systems, allowing attackers to induce service failures.

The vulnerability of the Connected User Experience and Telemetry Service services in Microsoft Windows operating systems is related to insufficient verification of permission assignment for critical resources. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.2AI score0.01086EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:00 a.m.13 views

The vulnerability of the Simple Network Management Protocol packet processor in Cisco IOS and IOS XE operating systems allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol packet processor in Cisco IOS and IOS XE operating systems relates to unauthorized access to the indexed resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.7CVSS7.2AI score0.01565EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:00 a.m.10 views

The vulnerability of the GraalVM Compiler component of the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the GraalVM Compiler component in Oracle GraalVM Enterprise Edition is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to trigger service failures through various network protocols...

7.7CVSS7.2AI score0.01318EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:00 a.m.12 views

The vulnerability of the Scripting component in Java SE and Java SE Embedded software platforms allows attackers to trigger a service failure.

The vulnerability of the Scripting component in Java SE and Java SE Embedded programming platforms is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to cause service failures through various network protocols...

4.3CVSS6.4AI score0.04128EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:00 a.m.12 views

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms allows a attacker to trigger a service failure.

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to cause service failures through various network protocols...

4.3CVSS6.4AI score0.04211EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:00 a.m.11 views

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms allows a attacker to trigger a service failure.

The vulnerability of the Serialization component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to cause service failures through various network protocols...

4.3CVSS6.4AI score0.04211EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.11 views

The vulnerability of the .NET Core software platform, related to errors in handling web requests, allows attackers to trigger a service failure.

The vulnerability of the .NET Core software platform is related to errors in handling web requests. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.7AI score0.0533EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.11 views

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software, related to uncontrolled resource consumption (exhaustion), allows a intruder to trigger a service failure.

The vulnerability of Siemens SCALANCE S network gateways’ microprogramming software is related to uncontrolled resource consumption exhaustion. Exploiting this vulnerability can allow a malicious actor to trigger service failures using specially created packets sent to port 443/tcp...

7.8CVSS7.2AI score0.015EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:00 a.m.14 views

The vulnerability of the `exif_read_data()` function implementation in the PHP programming language allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the exifreaddata function in the PHP programming language lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failure...

5.8CVSS7AI score0.04295EPSS
SaveExploits1References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:00 a.m.13 views

The vulnerability in the implementation of the TLS (Transport Layer Security) protocol in Windows operating systems allows a attacker to induce a service failure.

The vulnerability of the TLS Transport Layer Security protocol implementation in Windows operating systems is related to insufficient input validation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

8.6CVSS7.2AI score0.1622EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:00 a.m.12 views

The vulnerability of the Jackson-databind library, related to the restoration of unreliable data in memory, allows an intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the Jackson-databind library relates to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...

10CVSS7.4AI score0.0864EPSS
SaveExploits0References32Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:00 a.m.13 views

The vulnerability of the Istio network software lies in its ability to enter an infinite loop when certain input data is provided. This allows a malicious actor to cause a service failure.

The vulnerability of the Istio network software is related to entering an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a attacker to cause service failures...

7.8CVSS7.2AI score0.01214EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:00 a.m.10 views

The vulnerability of the network programming environments Envoy and Istio lies in their susceptibility to entering an infinite loop when processing certain input data. This allows attackers to cause service failures.

The vulnerability of the network programming environments Envoy and Istio is related to the entry into an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a attacker to cause service failures...

7.8CVSS7.2AI score0.01938EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:00 a.m.11 views

The vulnerability of the Apache Commons Compress library, related to resource management errors, allows attackers to cause service failures.

The vulnerability of the Apache Commons Compress file name encoding algorithm is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.5AI score0.16157EPSS
SaveExploits0References8Affected Software11
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.12 views

The vulnerability of the Linux systemd initialization process, related to the access to memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Linux systemd initialization process is related to an error in the handling of the queue after it is freed from memory. Asynchronous Polkit requests are executed when processing dbus messages. Exploiting this vulnerability allows an attacker to gain access to confidential...

5.3CVSS6.4AI score0.00456EPSS
SaveExploits0References18Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.11 views

The vulnerability of the Application::runExternalProgram() function, located in app/application.cpp, exposes the cross-platform BitTorrent client qBittorrent to data cleansing vulnerabilities at the operating level. This allows an intruder to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the Application::runExternalProgram function, located in app/application.cpp, in cross-platform BitTorrent clients like qBittorrent, is related to deficiencies in data cleaning measures at the management level. Exploiting this vulnerability could allow an attacker to gain...

10CVSS7.7AI score0.07913EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.13 views

The vulnerability of the server software HAProxy arises from improper handling of HTTP headers during the conversion from HTTP/2 to HTTP/1. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of server software such as HAProxy stems from improper handling of HTTP headers during the conversion from HTTP/2 to HTTP/1. Exploiting this vulnerability can allow a remote attacker to access sensitive data, compromise its integrity, and cause service failures...

10CVSS7.1AI score0.03955EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/05/08 12:00 a.m.8 views

The vulnerability of the Astra Linux Directory service’s EPW management system, related to the escape of operations beyond the buffer in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an error that causes operations to go beyond the memory limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

7.5CVSS5.6AI score
SaveExploits0References1
Rows per page
Query Builder