Lucene search
+L

769 matches found

Positive Technologies
Positive Technologies
added 2023/10/02 12:00 a.m.12 views

PT-2023-5953 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the modem when triggering a camping on a 5G cell. It is also associated with a software vulnerability in...

7.8CVSS6.9AI score0.00324EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:00 a.m.15 views

The vulnerability of the DoT protocol’s implementation in BIND DNS servers allows a attacker to induce a service failure.

The vulnerability of the DoT protocol DNS over TLS implementation in BIND DNS servers lies in the insufficient use of the assert function or similar operators when processing requests. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS7.5AI score0.02168EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/20 12:00 a.m.10 views

The vulnerability of the PDFDoc::replacePageDict function (PDFDoc.cc) in the Poppler PDF rendering library allows a attacker to trigger a service failure.

The vulnerability of the PDFDoc::replacePageDict function in the Poppler PDF rendering library is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

7.8CVSS6.7AI score0.0091EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/09/20 12:00 a.m.12 views

The vulnerability in the Object::getString component of the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the Object::getString component in the Poppler PDF rendering library is related to the insufficient use of the assert function. Exploiting this vulnerability may allow an attacker to cause a service failure...

7.8CVSS7.1AI score0.0091EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/09/15 12:00 a.m.14 views

The vulnerability of the item_cmpfunc.h component of the MariaDB database management system allows a hacker to trigger a segmentation fault.

The vulnerability of the itemcmpfunc.h component in the MariaDB database management system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

7.8CVSS7.4AI score0.01579EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:00 a.m.13 views

The vulnerability of the Fast DDS library lies in the use of the assert() function or similar operators, which allow attackers to cause a service failure.

The vulnerability of the Fast DDS library lies in the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.5CVSS7.1AI score0.01038EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:00 a.m.17 views

The vulnerability of the Fast DDS library lies in the use of the assert() function or similar operators, which allow attackers to cause a service failure.

The vulnerability of the Fast DDS library lies in the use of the assert function or similar operators. Exploiting this vulnerability could allow an attacker to cause a service failure...

10CVSS7.1AI score0.01038EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/08 12:00 a.m.17 views

The vulnerability of Google’s gRPC remote procedure call system allows a attacker to trigger a service failure.

The vulnerability of the Google gRPC process callouts is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

7.8CVSS6.7AI score0.00412EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:00 a.m.15 views

The vulnerability of the Demon Routing Protocol Daemon (rpd) in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon rpd in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause service interruptions...

5.5CVSS6.5AI score0.00194EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2023/07/01 12:00 a.m.42 views

ASB-A-275041864

In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS8.7AI score0.00194EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/06/07 12:00 a.m.30 views

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.9AI score0.51733EPSS
SaveExploits3References2
BDU FSTEC
BDU FSTEC
added 2023/05/29 12:00 a.m.9 views

The vulnerability of the `peek_for_as4_capability` function in the software for implementing network routing on Unix-like systems allows a hacker to cause a service failure.

The vulnerability of the peekforas4capability function in the software for implementing network routing on Unix-like systems is related to deficiencies in the use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.01638EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/05/17 12:00 a.m.10 views

The vulnerability in the stb_image.h component of the SIXEL Libsixel encoder/decoder library for C/C++ Libstb allows a attacker to cause a service failure.

The vulnerability of the stbimage.h component in the SIXEL Libsixel encoder/decoder library for C/C++ Libstb is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures...

7.8CVSS6.5AI score0.00935EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/04/20 12:00 a.m.13 views

The vulnerability of the DNS BIND server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.

The vulnerability of the BIND DNS server relates to the processing of the Write Directive DS. BIND waits for this processing to complete, or until the timeout interval expires. As a result, the resumedslookup function is called, but it does not check whether the previous selection has been...

7.8CVSS6.4AI score0.01348EPSS
SaveExploits0References6Affected Software3
Redos
Redos
added 2023/04/20 12:00 a.m.36 views

ROS-20230420-02

A vulnerability in the iconv function of the glibc library is related to a flaw in the use of the assert function. The vulnerability allows an attacker acting remotely to cause a denial of service...

7.5CVSS8.3AI score0.03093EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.16 views

The vulnerability of the rate_init function in the rate.c component of the Sound eXchange audio editor allows a hacker to cause a service failure.

The vulnerability of the rateinit function in the rate.c component of the Sound eXchange audio editor is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failure...

7.1CVSS6.8AI score0.0116EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:00 a.m.12 views

The vulnerability of the sps.cc component in the h.265 Libde265 video codec implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the sps.cc component in the h.265 video codec implementation by Libde265 is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and even cause service failures...

9.3CVSS7.2AI score0.00897EPSS
SaveExploits1References10Affected Software5
Prion
Prion
added 2023/02/21 4:15 p.m.24 views

Code injection

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

4CVSS6.3AI score0.01606EPSS
SaveExploits1References4Affected Software2
CVE
CVE
added 2023/02/21 12:00 a.m.145 views

CVE-2023-23009

CVE-2023-23009 affects Libreswan 4.9, enabling remote DoS via a crafted TS payload with an incorrect selector length, causing an assert failure and daemon restart. Connected advisories confirm multiple distributions (e.g., MiracleLinux, TencentOS Server, RHEL/CentOS/Oracle Linux families) referen...

6.5CVSS6.2AI score0.01606EPSS
SaveExploits1References4Affected Software1
AlpineLinux
AlpineLinux
added 2023/02/21 12:00 a.m.62 views

CVE-2023-23009

Libreswan 4.9 allows remote attackers to cause a denial of service assert failure and daemon restart via crafted TS payload with an incorrect selector length...

6.5CVSS6.6AI score0.01606EPSS
SaveExploits1
Rows per page
Query Builder