Lucene search
K

4207 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/20 12:0 a.m.5 views

The vulnerability in the implementation of the Setparam_prefix() function of the Grub2 operating system’s loader allows a perpetrator to gain access to confidential data, affect the integrity of the data, and cause service failures.

The vulnerability of the Setparamprefix function in the Grub2 operating system loader is related to the operation going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to access confidential data, compromise data integrity, and cause service failures...

8.2CVSS7AI score0.0061EPSS
Exploits0References19Affected Software15
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.4 views

The vulnerability of the ap_escape_quotes() function in the Apache HTTP Server, related to writing beyond buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the apescapequotes function in the Apache HTTP Server is related to the lack of input validation in this function. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7.1AI score0.36339EPSS
Exploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.4 views

The vulnerability of the hd_strlcpy() function in software for converting web pages using htmldoc, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hdstrlcpy function in software for converting web pages to htmldoc format is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.01135EPSS
Exploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.2 views

The vulnerability of the `ntfs inode_sync_standard_information` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer’s memory limit, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inodesyncstandardinformation function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, a...

7.8CVSS6.8AI score0.00392EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.3 views

The vulnerability of the `ntfs inode_real_open` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inoderealopen function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.8AI score0.00432EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.3 views

The vulnerability of the `ntfsattr_pread_i` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfsattrpreadi function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.8AI score0.00385EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.6 views

The vulnerability of the convolution_y_8bit function in the multimedia library Ffmpeg, related to writing beyond buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the convolutiony8bit function in the multimedia library Ffmpeg is related to writing outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.5AI score0.01486EPSS
Exploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.3 views

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures through a specially created Unicod...

7.8CVSS6.8AI score0.00432EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.5 views

The vulnerability of the ntfs inode_lookup_by_name function in the NTFS file system driver for the FUSE NTFS-3G module relates to writing beyond the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inodelookupbyname function in the NTFS file system driver for the FUSE NTFS-3G module is related to the lack of length checking for attributes. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service...

7.8CVSS6.6AI score0.00392EPSS
Exploits0References11Affected Software5
OSV
OSV
added 2022/01/13 10:15 p.m.3 views

CVE-2021-34940

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.4 views

CVE-2021-34928

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.01937EPSS
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.2 views

CVE-2021-34918

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.2AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.1 views

CVE-2021-34921

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.2 views

CVE-2021-34926

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.2 views

CVE-2021-34929

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.1 views

CVE-2021-34903

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS7.5AI score0.02113EPSS
Exploits0References2
OSV
OSV
added 2022/01/13 10:15 p.m.1 views

CVE-2021-34875

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

7.8CVSS6.2AI score0.01987EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2022/01/13 12:0 a.m.230 views

Oracle Linux 7 : openssl (ELSA-2022-9017)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9017 advisory. - fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings Tenable has extracted the preceding description block directly from the Oracle Linu...

7.4CVSS6.9AI score0.50445EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.3 views

The vulnerability of the Apache mod_cgi module for HTTP servers in the SonicWall network device software for the SMA series (SMA 100, SMA 200, SMA 210, SMA 400, SMA 410, and SMA 500vl) allows attackers to execute arbitrary code.

The vulnerability of the Apache modcgi module for HTTP servers in the SonicWall network devices from the SMA series SMA 100, SMA 200, SMA 210, SMA 400, SMA 410, and SMA 500v is related to the execution of code outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to...

9.8CVSS8.9AI score0.99912EPSS
Exploits7References5Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.4 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially created file...

9.3CVSS8.1AI score0.02629EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder