Lucene search
+L

11238 matches found

BDU FSTEC
BDU FSTEC
•added 2017/09/13 12:00 a.m.•21 views

A vulnerability exists in the ext/standard/var_unserializer.re PHP hypertext processor, which allows an attacker to potentially compromise the integrity of data.

The vulnerability in ext/standard/varunserializer.re of the PHP hypertext processor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to potentially compromise the integrity of PHP data...

7.5CVSS7.7AI score0.0742EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2017/09/13 12:00 a.m.•4 views

PT-2017-3950

Name of the Vulnerable Software and Affected Versions Red Hat JBoss EAP versions 3.0.7 through 3.0.25.Final Red Hat JBoss EAP version 3.5.0.CR1 Red Hat JBoss EAP version 4.0.0.Beta1 Description The issue is related to inconsistent interpretation of HTTP requests, which can be exploited by a remot...

7.8CVSS0.01514EPSS
SaveExploits0References22
CNVD
CNVD
•added 2017/09/08 12:00 a.m.•14 views

Cisco Emergency Responder SQL Injection Vulnerability

Cisco Emergency Responder ER is the United States Cisco Cisco a set of IP communications systems in the emergency call software. The software provides real-time location tracking database and caller location and other features. A SQL injection vulnerability exists in the SQL database interface in...

5.5CVSS6.1AI score0.00968EPSS
SaveExploits0References1
Prion
Prion
•added 2017/09/07 9:29 p.m.•28 views

Sql injection

A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attacker to conduct a blind SQL injection attack. The vulnerability is due to a failure to validate user-supplied input used in SQL queries that bypass protection filters. An attacker...

5.5CVSS6AI score0.00968EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/09/07 12:00 a.m.•4 views

PT-2017-12417

Name of the Vulnerable Software and Affected Versions Cisco Emergency Responder affected versions not specified Description A vulnerability in the SQL database interface could allow an authenticated, remote attacker to conduct a blind SQL injection attack. This is due to a failure to validate...

5.5CVSS0.00968EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•15 views

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone system call in the Android CAF-release operating system arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS8.2AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•20 views

The vulnerability of the UE component in the Android CAF-release operating system allows a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the UE component in the Android CAF-release operating system is related to positioning errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information when the UE driver sends unprotected...

10CVSS7.8AI score0.00976EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•12 views

The vulnerability of the Android operating system in the CAF repository exists due to errors in processing QMI messages, allowing a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability of the Android operating system from the CAF repository is related to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of QMI messages during processing...

10CVSS8.3AI score0.00904EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•19 views

The vulnerability of the Keymaster component of the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Keymaster component of the Android operating system from the CAF repository is related to the lack of checks on buffer size. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.1AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•22 views

The vulnerability of the Inter-RAT process in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Inter-RAT process in the Android CAF-release operating system is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.3AI score0.01056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•18 views

The vulnerability of the procedure related to the remote UIM client, the Android CAF-release operating system, allows a perpetrator to compromise the privacy, integrity, and accessibility of protected information.

The vulnerability of the process related to the remote UIM client in Android CAF-release builds is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.3AI score0.01056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•14 views

The vulnerability of the Android CAF-release operating system, related to access control deficiencies, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by sending UE identifier IMEI or IMEISV to the...

10CVSS7.7AI score0.0094EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•20 views

The vulnerability of the Linux operating system’s kernel, which arises due to the lack of checks for buffer length, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to trigger buffer overflows and compromise the confidentiality, integrity, and accessibility of protect...

10CVSS6.8AI score0.05233EPSS
SaveExploits0References24Affected Software1
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•16 views

The vulnerability in the IMS multimedia message transmission subsystem of the RCS standard in the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the IMS multimedia message transmission subsystem of the RCS standard in the Android operating system’s CAF builds is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and...

10CVSS7.8AI score0.00937EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•19 views

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•16 views

The vulnerability of the Android CAF-release operating system’s supervisor allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android CAF-release operating system’s supervisor is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00877EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•16 views

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•13 views

The vulnerability of the Android operating system from the CAF repository exists due to the lack of checks on buffer size, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system from the CAF repository arises from the lack of checks for buffer sizes in mechanisms designed to protect against malicious software. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...

10CVSS8.1AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2017/09/01 12:00 a.m.•13 views

The vulnerability of the Android operating system from the CAF repository exists due to deficiencies in access control to the file system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system Android from the CAF repository is related to deficiencies in access control to the file system. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS7.7AI score0.00976EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/08/28 12:00 a.m.•16 views

PT-2017-4158

Name of the Vulnerable Software and Affected Versions NGINX versions prior to 1.13.6 Description The issue is related to the autoindex module's incorrect handling of years exceeding four digits, which can cause an integer overflow. This can be triggered by a file with a modification date in the...

9.8CVSS6.8AI score0.62597EPSS
SaveExploits7References39
Rows per page
Query Builder