Lucene search
K

54 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/12 12:0 a.m.3 views

The vulnerability of the ftruncate() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ftruncate function in the Linux operating system’s kernel is related to errors in the processing of input data during syntax analysis of code. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.7CVSS6.5AI score0.00229EPSS
Exploits0References22Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:0 a.m.2 views

The vulnerability of Opigno’s Drupal CMS system lies in errors during the processing of input data during syntax analysis, allowing attackers to execute arbitrary code.

The vulnerability of Opigno’s Drupal CMS system is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS5.9AI score0.00444EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/29 12:0 a.m.2 views

The vulnerability of the Opigno Learning path CMS system’s Drupal module lies in errors during the processing of input data during syntax analysis of code. This allows attackers to execute arbitrary code.

The vulnerability of the Opigno Learning path CMS system’s Drupal component is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS5.9AI score0.00537EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/19 12:0 a.m.2 views

The vulnerability of the org.xwiki.platform:xwiki-platform-web-war component of the XWiki platform, which is used for creating collaborative web applications. This vulnerability allows a attacker to execute arbitrary code.

The vulnerability of the “org.xwiki.platform:xwiki-platform-web-war” component of the XWiki platform involves errors in data processing during syntax analysis of code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

6.4CVSS5.9AI score0.14803EPSS
Exploits1References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/17 12:0 a.m.6 views

The vulnerability of the Radius syntax analysis function in the Nozomi Guardian tool for detecting and tracking network activities allows a perpetrator to trigger a service failure.

The vulnerability of the Radius syntax analysis function in the Nozomi Guardian tool for detecting and tracking network activities is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.5AI score0.00554EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/02 12:0 a.m.7 views

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wLogTitlesPrevValueLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrar...

10CVSS7.9AI score0.00986EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/31 12:0 a.m.3 views

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces lies in buffer overflows in the stack. This allows an attacker to execute arbitrary code.

The vulnerability of the Delta Industrial Automation DOPSoft software for designing human-machine interfaces is related to buffer overflows in the stack during syntax analysis of the wTitleTextLen field. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary code...

10CVSS7.9AI score0.00986EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/27 12:0 a.m.3 views

The vulnerability of the “//line” directive in the Go programming language allows a violator to execute arbitrary code.

The vulnerability of the “//line” directive in the Go programming language is related to errors in data processing during syntax analysis of code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.1AI score0.01747EPSS
Exploits0References7Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/09/21 12:0 a.m.3 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit lies in errors in the processing of input data during syntax analysis of code. This allows an attacker to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS7.8AI score0.01356EPSS
Exploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.3 views

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in errors during the processing of input data when performing syntactic analysis of code. This allows an attacker to execute arbitrary code.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in errors in the processing of input data during syntax analysis of code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

6.5CVSS7.3AI score0.00555EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.3 views

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in errors during the processing of input data when performing syntactic analysis of code. This allows an attacker to execute arbitrary code.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in errors in the processing of input data during syntax analysis of code. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS8AI score0.26633EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/07 12:0 a.m.1 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundary in memory during syntax analysis of embedded fonts. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious fi...

5.5CVSS5.7AI score0.00325EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/27 12:0 a.m.4 views

The vulnerability of the dynamically linked library docmgmt.dll, which is part of the Siemens Solid Edge design and simulation tools, allows a hacker to execute arbitrary code.

The vulnerability of the dynamically linked library docmgmt.dll, which is part of Siemens Solid Edge’s design and simulation tools, relates to the possibility of writing beyond the buffer boundaries in memory during syntax analysis of PAR, ASM, and DFT files. Exploiting this vulnerability can all...

7.8CVSS7.7AI score0.00279EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/07 12:0 a.m.3 views

The vulnerability of the vector graphics editor CorelDRAW Graphics Suite (formerly CorelDRAW) relates to the execution of operations beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to the execution of operations beyond the buffer boundaries in memory during the syntax analysis of PCX files. Exploiting this vulnerability can allow attackers to execute arbitrary code using a specially...

7.8CVSS8AI score0.00873EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/10/21 12:0 a.m.5 views

The vulnerability of the virtual learning environment Moodle, related to incorrect validation of input data, allows a violator to execute arbitrary code.

The vulnerability in the virtual training environment Moodle is related to incorrect validation of input data during syntax analysis of PostScript files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.6AI score0.06318EPSS
Exploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.2 views

The vulnerability of the EXI syntax analysis function in communication devices that connect vehicles to the OpenV2G network allows a perpetrator to cause service interruptions.

The vulnerability of the EXI file syntax analysis implementation in vehicle communication devices connected to the OpenV2G network is related to the issue where the operation goes beyond the buffer boundaries in memory during the verification of the length of X509 certificates’ serial numbers...

6.2CVSS6.1AI score0.00206EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.3 views

The vulnerability of the Mono_Loader.dll library, used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, allows a hacker to trigger a service failure.

The vulnerability of the MonoLoader.dll library, which is used by 3D JT and JT2Go visualization tools, as well as the Teamcenter Visualization lifecycle management system, is related to a numerical overflow issue during syntax analysis of TG4 files. Exploiting this vulnerability can allow attacke...

3.3CVSS5.9AI score0.00497EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/19 12:0 a.m.3 views

The vulnerability in the implementation of regular expression checks (regex for Rust) in web browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the regular expression validation implementation in Firefox web browsers, Firefox ESR, and Thunderbird email client is related to errors in syntax analysis of input data. Exploiting this vulnerability allows an attacker to cause service interruptions using specially crafted...

5CVSS7.2AI score0.1446EPSS
Exploits1References13Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.2 views

The vulnerability of the open implementation of the OpenLDAP protocol, related to the possibility of successful assertion during syntax analysis, allows a perpetrator to perform a denial-of-service attack.

The vulnerability of the open implementation of the OpenLDAP protocol lies in the difficulty of verifying syntax analysis. Exploiting this vulnerability allows a malicious actor to perform a denial-of-service attack by sending a specially crafted request to slapd...

7.8CVSS6.8AI score0.1229EPSS
Exploits0References12Affected Software7
Redos
Redos
added 2021/12/24 12:0 a.m.66 views

ROS-20211223-03

Vulnerability in an open source implementation of the OpenLDAP protocol is related to a reachability assertion. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to send a specially crafted packet with a short timestamp to slapd and perform a denial of service...

7.5CVSS7.7AI score0.84224EPSS
Exploits1
Rows per page
Query Builder