Lucene search
+L

10658 matches found

BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•17 views

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure during the execution of the SETRANGE command. This flaw allows up to 12 bytes of information to be added beyond the stack limit. Exploiting...

9CVSS5.6AI score0.23703EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•19 views

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the HyperLogLog algorithm in the resident database management system for NoSQL Redis stems from a flaw in the HyperLogLog data structure when the SETRANGE command is executed. This flaw allows up to 3 bytes of information to be inserted beyond the buffer memory limit...

9CVSS5.6AI score0.26048EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•18 views

The vulnerability of Google Chrome, related to the redirection of URLs to unreliable websites, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of Google Chrome relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity through a specially created HTML page...

5.8CVSS5.5AI score0.01073EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•14 views

The vulnerability of the faad_resetbits() function in the software suite for working with audio files, Freeware Advanced Audio Decoder 2 (FAAD2), allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the faadresetbits function in the software suite for working with audio files, Freeware Advanced Audio Decoder 2 FAAD2, is related to buffer overflows. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected...

7.8CVSS7.5AI score0.01316EPSS
SaveExploits0References6Affected Software2
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•14 views

Oracle E-Business Suite Field Service Wireless Component Authorization Issue Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. field Service formerly known as...

4.7CVSS6.7AI score0.01072EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•21 views

Unspecified Vulnerability in Oracle E-Business Suite Installed Base Component

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. installed Base is one of the installation base...

4.7CVSS6.6AI score0.01072EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•15 views

The vulnerability of the software for implementing the hypertext environment MediaWiki lies in its ability to load user JavaScript code from a non-existent account, allowing a violator to compromise the integrity of the data.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the possibility of loading user JavaScript code from a non-existent account. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

6.1CVSS5.6AI score0.01285EPSS
SaveExploits0References5Affected Software3
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•18 views

Unspecified Vulnerability in Oracle E-Business Suite Content Manager

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions.Content Manager is one of the...

5.8CVSS6.6AI score0.01138EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•10 views

Unspecified Vulnerability in Oracle Fusion Middleware Outside In Technology (CNVD-2019-37234)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

7.5CVSS6.6AI score0.01252EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•14 views

Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2019-36665)

Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insights into business operations, and improves efficiencies by delivering information to all roles within an organization. An unspecified vulnerabili...

8.1CVSS6.5AI score0.01366EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•20 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a read-off error beyond the allocated memory buffer. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

10CVSS5.5AI score0.01327EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•13 views

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers is related to a corruption that occurs during integer overflow. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service...

10CVSS5.6AI score0.01453EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•16 views

The vulnerability of Blink’s web page display mechanism in the Google Chrome web browser allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service interruptions.

The vulnerability of Blink’s web page rendering mechanism in the Google Chrome browser is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability could allow an attacker to compromise data integrity, gain unauthorized access to protected...

10CVSS5.5AI score0.01845EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•15 views

The vulnerability of Google Chrome, related to errors in data validation within developer tools, allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of Google Chrome is related to errors in data validation when using developer tools. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

7.3CVSS5.5AI score0.0039EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•12 views

The vulnerability of the calculate_gain function in the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to compromise data integrity, gain unauthorized access to protected information, and cause service failure.

The vulnerability of the calculategain function in the Freeware Advanced Audio Decoder 2 FAAD2 is related to an error that causes stack overflow. Exploiting this vulnerability can allow attackers to compromise data integrity, gain unauthorized access to protected information, and cause service...

7.8CVSS5.6AI score0.01324EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•13 views

The vulnerabilities of browsers Firefox, Firefox ESR, and the email client Thunderbird involve memory usage after it is freed. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerabilities of Firefox browsers, Firefox ESR, and the Thunderbird email client are related to the use of a certain data structure after it is freed upon deletion of the list manager currently in use. Exploiting these vulnerabilities allows an attacker who operates remotely to gain access ...

10CVSS5.5AI score0.01603EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•12 views

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to deficiencies in access control, allows a violator to compromise the integrity of the data.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to improper access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity of the data...

7.5CVSS5.5AI score0.01325EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•14 views

The vulnerability of the DemuxInit() function in the VideoLAN VLC media player software allows a hacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the DemuxInit function in the VideoLAN VLC media player software is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to compromise data integrity, gain unauthorized access to protected information, and even cause service failures by usin...

7.8CVSS5.9AI score0.01484EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•15 views

The vulnerability of the automation tools for deploying and managing applications in Docker-enabled environments relates to errors in code generation. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the automation tool for deploying and managing applications in Docker-enabled environments is related to errors in code generation during dynamic library loading. Exploiting this vulnerability can allow a malicious actor to compromise data integrity, gain unauthorized access ...

10CVSS7.3AI score0.18828EPSS
SaveExploits3References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•12 views

The vulnerability of Thunderbird email clients, as well as browsers Firefox and Firefox ESR, is related to a buffer overflow exploit that allows an attacker to compromise data integrity.

The vulnerability of the Thunderbird email client, as well as browsers Firefox and Firefox ESR, is related to a escape character handling error "^". Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...

5.3CVSS5.5AI score0.02131EPSS
SaveExploits1References15Affected Software9
Rows per page
Query Builder