Lucene search
+L

64 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.10 views

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) relates to incorrect session duration settings. This allows a perpetrator to disclose protected information or cause service failures.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to incorrect session duration. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

8.1CVSS7.3AI score0.01255EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2019/09/19 7:37 a.m.10 views

HTTP/2: 0-length headers lead to denial of service

A flaw was found in HTTP/2. An attacker, sending a stream of header with a 0-length header name and a 0-length header value, could cause some implementations to allocate memory for these headers and keep the allocations alive until the session dies. The can consume excess memory, potentially...

7.5CVSS7.1AI score0.56262EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2019/08/22 12:00 a.m.16 views

The vulnerability in the TokenBasedRememberMeServices2.java component of the Jenkins automation server allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the TokenBasedRememberMeServices2.java component located at core/src/main/java/hudson/security/TokenBasedRememberMeServices2.java in the Jenkins automation server is related to an incorrect session duration. Exploiting this vulnerability could allow a malicious actor, operati...

9CVSS5.5AI score0.01545EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/13 12:00 a.m.14 views

The vulnerability of the Jenkins automation server allows a hacker to reuse registration data or session identifiers for authentication purposes.

The vulnerability of the Jenkins automation server is related to incorrect session duration. Exploiting this vulnerability allows a malicious actor to repeatedly use registration data or session identifiers for authentication purposes...

7.2CVSS6.5AI score0.01619EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder