Lucene search
K

944 matches found

BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.5 views

The vulnerability of the krb_parse_authz_data function in the SnAuthRPC module of the Secret Net Studio security system allows a hacker to trigger a service failure.

The vulnerability of the krbparseauthzdata function in the SnAuthRPC module of the Secret Net Studio security system is related to errors in buffer offset calculations, which lead to the displacement of uninitialized memory areas. Exploiting this vulnerability could allow a remote attacker to cau...

2.2CVSS5.8AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/16 12:0 a.m.4 views

The vulnerability of the Cisco AsyncOS operating system proxy server allows attackers to cause service interruptions for Cisco Web Security Appliance web servers.

The vulnerability of the Cisco AsyncOS operating system’s proxy server for Cisco Web Security Appliance products exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending malicious HTTP/HTTPS requests...

7.7CVSS5.5AI score0.01513EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.3 views

The vulnerability of the g_markup_parse_context_end_parse function in the Glib library allows a hacker to trigger a service failure.

The vulnerability of the gmarkupparsecontextendparse function in the Glib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9.8CVSS6.8AI score0.04693EPSS
Exploits1References10Affected Software7
CNVD
CNVD
added 2019/07/09 12:0 a.m.2 views

F5 BIG-IP Input Validation Error Vulnerability (CNVD-2019-32029)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An input validation error vulnerability exists in F5 BIG-IP. An attacker could exploit this vulnerability to cause a service...

7.5CVSS6.8AI score0.02531EPSS
Exploits0References1
OSV
OSV
added 2019/07/03 6:15 p.m.5 views

CVE-2019-6631

On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs...

7.5CVSS5.8AI score
Exploits0References3
NVD
NVD
added 2019/07/03 6:15 p.m.28 views

CVE-2019-6631

On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs...

7.5CVSS7.5AI score0.02531EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.4 views

The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems, related to data processing errors, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.5CVSS5.9AI score0.03041EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.4 views

The vulnerability of the thread_list_mutex function in the advanced TFTP server Atftpd, related to the assignment of the NULL pointer, allows a hacker to trigger a service failure.

The vulnerability of the threadlistmutex function in the advanced TFTP server Atftpd is related to the lack of mutex locking before assigning a data structure. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

5.9CVSS7AI score0.02098EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.5 views

The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failure.

The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to improper input validation. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted LDAP...

6.8CVSS6.8AI score0.02028EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.5 views

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Identity Services Engine’s web interface is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...

7.8CVSS6.2AI score0.02516EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.3 views

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco AsyncOS operating system’s proxy server for Cisco Web Security Appliance products exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending corrupted HTTP or HTTPS requests t...

8.6CVSS7.4AI score0.01772EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.3 views

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.01799EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.4 views

The vulnerability of Siemens’ web server software lies in insufficient validation of input data, which allows attackers to trigger service failures.

The vulnerability of Siemens’ web server software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01401EPSS
Exploits0References4Affected Software11
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.4 views

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.02236EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.3 views

Vulnerability of the Server component: The MySQL database management system’s partition, which allows a hacker to cause a service failure.

The vulnerability of the Server component lies in the lack of access control in the MySQL database management system’s partitioning mechanism. Exploiting this vulnerability allows a malicious actor to cause service interruptions using the MySQL protocol...

4.9CVSS6.5AI score0.02217EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.5 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

4.9CVSS6.5AI score0.0235EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.3 views

Vulnerability of the Server component: The Replication feature of the Oracle MySQL Server database management system, which allows users to trigger a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

4.6CVSS6.3AI score0.018EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.5 views

The vulnerability of the Just-In-Time (JIT) compiler of IonMonkey in web browsers Firefox, Firefox ESR, and the email processing program Thunderbird, related to data writing beyond buffer boundaries, allows an attacker to trigger a service failure.

The vulnerability of the Just-In-Time JIT compiler in IonMonkey web browsers—Firefox, Firefox ESR, and the email processing program Thunderbird—is related to data writing beyond buffer boundaries and memory corruption. Exploiting this vulnerability can allow an attacker to cause service...

8.8CVSS7.1AI score0.13197EPSS
Exploits5References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.4 views

The vulnerability of the sparse_dump_region function in the GNU Tar archive utility, which involves reading beyond the buffer boundaries, allows a hacker to cause a service failure.

The vulnerability of the sparsedumpregion function in the GNU Tar archive manager is related to reading beyond the buffer boundaries when the --sparse flag is used. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

4.7CVSS6.7AI score0.00526EPSS
Exploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/04/23 12:0 a.m.4 views

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to cause service interruptions.

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has vulnerabilities related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS6.4AI score0.02415EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder