Lucene search
+L

2165 matches found

BDU FSTEC
BDU FSTEC
added 2024/01/17 12:0 a.m.15 views

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma, related to deficiencies in HTTP request processing, allows attackers to induce service failures.

The vulnerability of HTTP servers for Ruby/Rack applications developed with Puma is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to induce service failures through specially crafted HTTP requests HTTP Request Smuggling attacks...

7.8CVSS6.4AI score0.00958EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/01/15 12:0 a.m.11 views

The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.03578EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/01/15 12:0 a.m.9 views

The vulnerability of the Windows Local Session Manager component of the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Windows Local Session Manager component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.5AI score0.01538EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/01/06 12:0 a.m.7 views

The vulnerability of the HTTP2 protocol implementation (network/access/http2/hpacktable.cpp) in the cross-platform development framework for Qt software allows a perpetrator to cause service failures.

The vulnerability of the HTTP2 protocol implementation network/access/http2/hpacktable.cpp of the cross-platform development framework for Qt is related to a numerical overflow caused by changes to the typical expression order in conditional operators “Yoda conditions”. Exploiting this...

6.2CVSS7.5AI score0.00986EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/01/05 12:0 a.m.9 views

The vulnerability of the APDU Frame Layout Handler component in Hitachi Energy RTU500 CMU series programmable logic controllers allows a attacker to trigger a service failure.

The vulnerability of the APDU Frame Layout Handler component in Hitachi Energy RTU500 CMU series programmable logic controllers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to trigger service failures by sending...

5.9CVSS6.3AI score0.00412EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/02 12:0 a.m.10 views

The vulnerability of the Microsoft Defender software arises from insufficient validation of input data, allowing a perpetrator to trigger a service failure.

The vulnerability of the Microsoft Defender software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using specially crafted input data...

7.8CVSS7.5AI score0.02632EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.7 views

The vulnerability of the Expat XML parsing library lies in the improper limitation on XML references to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Expat XML parsing library is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS7AI score0.20093EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.8 views

The vulnerability of the `chunk_free_object` function in the `gsmchunk.c` component of the Ghostscript software suite allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the chunkfreeobject function in the gsmchunk.c component of the Ghostscript document processing software lies in the handling of buffer overflows. Exploitation of this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even...

9.3CVSS6.4AI score0.00808EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.8 views

The vulnerability of the Django web application software lies in the fact that code is loaded without any checks for its integrity. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Django web application framework lies in the fact that code is loaded without any checks for its integrity. Exploiting this vulnerability allows an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

10CVSS7.3AI score0.00657EPSS
SaveExploits0References15Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.13 views

The vulnerability of the Django web application platform, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of the Django web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.4AI score0.62575EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/12/26 12:0 a.m.8 views

The vulnerability of the Zabbix universal monitoring system, related to logging beyond buffer boundaries, allows a intruder to trigger a service failure.

The vulnerability of the Zabbix universal monitoring system is related to logging beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS6.5AI score0.00783EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/12/22 12:0 a.m.14 views

The vulnerability of the engineer mode of Unisoc microprogrammed software processors allows a hacker to trigger a service failure.

The vulnerability of the engineer mode of Unisoc microprogrammed chipset software is related to unverified array indexing. Exploiting this vulnerability can allow attackers to cause service failures...

4CVSS5.9AI score0.00092EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/12/22 12:0 a.m.12 views

The vulnerability of the Apache Dubbo RPC framework, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the Apache Dubbo RPC framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

10CVSS8.3AI score0.07401EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/19 12:0 a.m.9 views

The vulnerability of the CSS parser for Node.js’s css-tools arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the CSS parser for Node.js’s css-tools is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

7.8CVSS6.7AI score0.01121EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/14 12:0 a.m.9 views

The vulnerability of embedded software developed by Qualcomm, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of embedded Qualcomm software is related to insufficient validation of input data when receiving messages related to connection configuration from the RRC. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.8CVSS7.5AI score0.00607EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/13 12:0 a.m.10 views

The vulnerability of the `max_request_duration` component in the platform for archiving corporate information, HashiCorp Vault and Vault Enterprise, allows a perpetrator to trigger a service failure.

The vulnerability of the maxrequestduration component in the HashiCorp Vault and Vault Enterprise platforms for archiving corporate information involves unlimited resource allocation during HTTP request processing. Exploiting this vulnerability could allow a malicious actor to cause service...

7.8CVSS7.2AI score0.00798EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/12/08 12:0 a.m.9 views

The vulnerability of the APIX application programming interface for the AXIS OS operating system allows a perpetrator to trigger a service failure.

The vulnerability of the APIX application programming interface for the AXIS OS operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.5CVSS6.5AI score0.00668EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/08 12:0 a.m.12 views

The vulnerability of the Tor browser for the Debian GNU/Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the Tor browser for the Debian GNU/Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

7.8CVSS5.5AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.12 views

The vulnerability of the DomainUserSSPLogonAuth method in the Zoho ManageEngine ADManager Plus software for managing Active Directory services allows a perpetrator to trigger a service failure.

The vulnerability of the DomainUserSSPLogonAuth method in the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.2AI score0.78338EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:0 a.m.14 views

The vulnerability of implementations of data transfer specifications in industrial networks OPC UA.NET Standard, related to uncontrolled resource consumption, allows a perpetrator to cause service failures.

The vulnerability of implementations of the OPC UA.NET Standard data transfer specification in industrial networks is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.0106EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder