Lucene search
K

54 matches found

BDU FSTEC
BDU FSTEC
added 2021/04/23 12:0 a.m.1 views

The vulnerability relates to the implementation of syntactic analysis for CR3-files in the plugin for viewing RAW images. This allows an attacker to execute arbitrary code.

The vulnerability of the CR3-file syntax analysis implementation for viewing RAW images is related to errors in data type conversion. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created malicious web page or a specially created malicious file...

7.8CVSS0.10803EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.3 views

The vulnerability of the syntax analysis function for domain name records in the Simotics Connect 400 software and hardware suite allows a perpetrator to cause service interruptions.

The vulnerability of the syntax analysis function for DNS domain names in the Simotics Connect 400 software/hardware suite is related to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS0.00626EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.1 views

Vulnerability of syntactic analysis and event loading in SVG code of Firefox web browser and Thunderbird email client, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of syntax analysis and event loading in SVG code of Firefox web browsers and Thunderbird email clients is related to the lack of integrity checks. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

7.6CVSS0.00433EPSS
Exploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/13 12:0 a.m.1 views

The vulnerability of the sqlite3WindowRewrite() function in the SQLite database management system, related to insufficient handling of exception states, allows a attacker to compromise data integrity.

The vulnerability of the sqlite3WindowRewrite function in the SQLite database management system is related to improper handling of certain syntax analyzers. Exploiting this vulnerability could allow an attacker to compromise data integrity...

5.3CVSS0.06298EPSS
Exploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.0 views

The vulnerability of Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to improper syntactic analysis of page content or interpretation of data entered by users. This vulnerability allows attackers to execute arbitrary code.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to incorrect syntax analysis of page content or improper interpretation of data entered by users. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

6.1CVSS5.9AI score0.00619EPSS
Exploits2References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.0 views

The vulnerability of syntactic analysis in HTTP/1 and the HTTP accelerator Varnish allows attackers to induce a service failure.

The vulnerability of syntactic analysis in HTTP/1 and HTTP accelerator Varnish exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS5.5AI score0.07699EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.0 views

The vulnerability of the syntax analysis function of the PowerDNS server allows a attacker to cause a service failure.

The vulnerability of the DNS server’s syntax analysis function in PowerDNS is related to the lack of an authentication mechanism. Exploiting this vulnerability could allow a malicious actor to cause a service failure when searching for NS/A/AAAA records on the server...

7.8CVSS5.5AI score0.00006EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/08/30 12:0 a.m.1 views

The vulnerability of Microsoft XML (MSXML) syntax analysis in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of Microsoft XML MSXML operating system-based systems lies in errors related to restricting XML references to external objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created web page from a remote location...

7.6CVSS6AI score0.04431EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.2 views

The vulnerability of the syntax analysis procedure for Python interpreter certificates allows attackers to trigger a service failure.

The vulnerability of the syntax analysis procedure for Python interpreter certificates is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

7.5CVSS7AI score0.05355EPSS
Exploits1References12Affected Software13
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.0 views

The vulnerabilities of the components GroovySandbox.java and SecureGroovyScript.java of the Jenkins Script Security plugin allow a perpetrator to execute arbitrary code.

The vulnerabilities of the GroovySandbox.java component src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java and SecureGroovyScript.java component src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java of the Jenkins Script Securi...

9.9CVSS8.4AI score0.92647EPSS
Exploits3References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.1 views

The vulnerability of the pom.xml components and CpsGroovyShell.java plugin of the Jenkins Pipeline allows a hacker to execute arbitrary code.

The vulnerability of the pom.xml components and CpsGroovyShell.java src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java of the Jenkins Pipeline plugin is related to errors in processing input data during syntax analysis of the code. Exploiting this vulnerability can allow a...

9.9CVSS8.3AI score0.91816EPSS
Exploits3References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.0 views

Vulnerability of the components AbstractDslScriptLoader.groovy, JobDslWhitelist.groovy, and SandboxDslScriptLoader.groovy, a Jenkins Job DSL plugin, allowing a malicious actor to execute arbitrary code

The vulnerabilities of components AbstractDslScriptLoader.groovy core/src/main/groovy/javaposse/jobdsl/dsl/AbstractDslScriptLoader.groovy, JobDslWhitelist.groovy job-dsl-plugin/build.gradle, job-dsl-plugin/src/main/groovy/javaposse/jobdsl/plugin/JobDslWhitelist.groovy, and...

9.9CVSS5.9AI score0.01515EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/12 12:0 a.m.1 views

The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system allows a perpetrator to cause a service failure.

The vulnerability of the fly-admin-ntp package for managing NTP time services on the Astra Linux operating system is related to incorrect syntax analysis and processing of the configuration file. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.5CVSS5.5AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2017/08/25 12:0 a.m.1 views

The vulnerability of the syntax analysis module of PCX files and the PDF editing programs like Adobe Acrobat, Adobe Acrobat Document Cloud, as well as PDF viewing programs like Foxit Reader, Adobe Reader Document Cloud, and Adobe Reader allows attackers to execute arbitrary code.

The vulnerability of the syntax analysis module of PCX files and the PDF editing programs such as Adobe Acrobat, Adobe Acrobat Document Cloud, as well as PDF viewing programs like Foxit Reader and Adobe Reader Document Cloud/Adobe Reader arises from an operation that goes beyond the buffer...

9.3CVSS8.2AI score0.41644EPSS
Exploits0References4
Rows per page
Query Builder