Lucene search
+L

9554 matches found

CNVD
CNVD
added 2019/10/16 12:00 a.m.11 views

Oracle E-Business Suite Field Service Wireless Component Authorization Issue Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. field Service formerly known as...

4.7CVSS6.7AI score0.01072EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.12 views

The vulnerability of WebGL buffer data in Firefox browsers (Firefox ESR), Thunderbird email client, arises from the possibility of operations occurring outside the buffer in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of WebGL buffer data in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to buffer overflows in certain graphics drivers. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause servic...

10CVSS5.8AI score0.02408EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.12 views

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page display mechanism in the Google Chrome browser is related to the use of pointers after memory release. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

10CVSS5.5AI score0.01787EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.12 views

The vulnerability of the calculate_gain() function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to the escape from memory buffers. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.5AI score0.0145EPSS
SaveExploits1References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.14 views

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure during the execution of the SETRANGE command. This flaw allows up to 12 bytes of information to be added beyond the stack limit. Exploiting...

9CVSS5.6AI score0.23703EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.11 views

The vulnerability of the faad_resetbits() function in the software suite for working with audio files, Freeware Advanced Audio Decoder 2 (FAAD2), allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the faadresetbits function in the software suite for working with audio files, Freeware Advanced Audio Decoder 2 FAAD2, is related to buffer overflows. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected...

7.8CVSS5.8AI score0.01316EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.9 views

The vulnerability of CMS websites for collaborative work with MediaWiki, related to cross-site request forgery, allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of CMS websites for collaborative work with MediaWiki is related to cross-site request forgery attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service interruptions...

8.8CVSS5.3AI score0.00848EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.27 views

The vulnerability of the HyperLogLog algorithm in a resident database management system for NoSQL Redis lies in the fact that the output of the operation may exceed the buffer limits in memory. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure when the SETRANGE command is executed. This command allows the addition of up to 12 bytes of information beyond the stack limit. Exploiting...

9CVSS5.5AI score0.23703EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.14 views

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure when the SETRANGE command is executed. This flaw allows up to 3 bytes of information to be inserted beyond the buffer memory limit...

9CVSS5.6AI score0.26048EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.21 views

The vulnerability of Google Chrome’s ServiceWorker script allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of Google Chrome’s ServiceWorker script is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

10CVSS5.5AI score0.01246EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.9 views

The vulnerability of the `net/url` function in the Go programming language allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of the net/url function in the Go programming language is related to an error in processing constructed path names in URL addresses, which leads to authentication bypass. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to...

10CVSS7.8AI score0.08359EPSS
SaveExploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.14 views

The vulnerability of Google Chrome, related to the redirection of URLs to unreliable websites, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of Google Chrome relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity through a specially created HTML page...

5.8CVSS5.5AI score0.01089EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.9 views

The vulnerability of the software for implementing the hypertext environment MediaWiki lies in its ability to load user JavaScript code from a non-existent account, allowing a violator to compromise the integrity of the data.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the possibility of loading user JavaScript code from a non-existent account. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

6.1CVSS5.6AI score0.01285EPSS
SaveExploits0References5Affected Software3
CNVD
CNVD
added 2019/10/16 12:00 a.m.10 views

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2019-36665)

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insights into business operations, and improves efficiencies by delivering information to all roles within an organization. An unspecified vulnerabili...

8.1CVSS6.5AI score0.01366EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/16 12:00 a.m.11 views

Unspecified Vulnerability in Oracle E-Business Suite Content Manager

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Content Manager is one of the...

5.8CVSS6.6AI score0.01138EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/10/16 12:00 a.m.9 views

Unspecified Vulnerability in Oracle Fusion Middleware Outside In Technology (CNVD-2019-37234)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

7.5CVSS6.6AI score0.01252EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.16 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a read-off error beyond the allocated memory buffer. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

10CVSS5.5AI score0.01346EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.11 views

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers is related to a corruption that occurs during integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

10CVSS5.6AI score0.01453EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.12 views

The vulnerability of the automation tools for deploying and managing applications in Docker-enabled environments relates to errors in code generation. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the automation tool for deploying and managing applications in Docker-enabled environments is related to errors in code generation during dynamic library loading. Exploiting this vulnerability can allow a malicious actor to compromise data integrity, gain unauthorized access ...

10CVSS7.3AI score0.18828EPSS
SaveExploits3References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.11 views

The vulnerability of Google Chrome, related to errors in data validation within developer tools, allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of Google Chrome is related to errors in data validation when using developer tools. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

7.3CVSS5.5AI score0.0039EPSS
SaveExploits0References11Affected Software5
Rows per page
Query Builder