Lucene search
+L

7849 matches found

BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.13 views

The vulnerability of the mod_jk module of the Apache Tomcat JK Connector allows attackers to disclose sensitive information or cause service failures.

The vulnerability of the JkShmFile directive in the modjk module of the Apache Tomcat JK Connector is related to the incorrect use of standard permissions. Exploiting this vulnerability can allow an attacker to disclose information about the modjk module or cause service failures...

5.9CVSS6.2AI score0.00329EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.17 views

The vulnerability in theutils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of theutils.cpp component in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise i...

9.3CVSS6.9AI score0.03235EPSS
SaveExploits1References6Affected Software2
CNVD
CNVD
added 2024/09/29 12:0 a.m.55 views

Mattermost Resource-Consuming Vulnerability

Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...

6.5CVSS6.5AI score0.00577EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2024/09/27 8:40 a.m.29 views

CVE-2024-40094

A vulnerability was found in GraphQL Java, affecting versions prior to 21.5. This flaw allows an attacker to perform a denial of service DoS attack via introspection queries. The issue arises due to the improper handling of ExecutableNormalizedFields ENFs, which are not adequately considered duri...

7.5CVSS7AI score0.00943EPSS
SaveExploits2References9
Veracode
Veracode
added 2024/09/26 5:43 a.m.12 views

Denial Of Service (DoS)

org.springframework,spring-web is vulnerable to Denial Of Service DoS. The vulnerability is due to improper handling of ETags from If-Match or If-None-Match request headers, allowing attackers to overwhelm the system and cause service disruption...

5.3CVSS5.2AI score0.00852EPSS
SaveExploits0References7Affected Software1
CNNVD
CNNVD
added 2024/09/26 12:0 a.m.6 views

Mattermost 安全漏洞

Mattermost is an open source, self-hosted, enterprise-class chat platform that provides secure team communication and collaboration capabilities. A resource-consuming vulnerability exists in Mattermost. An attacker could exploit this vulnerability to cause a service down or denial of service...

6.5CVSS6.7AI score0.00577EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.8 views

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming software for the Tenda wireless access point allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming system for the wireless access point Tenda is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause...

10CVSS8.4AI score0.01255EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.9 views

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer file of the Tenda wireless access point’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromDhcpSetSer function in the /goform/DhcpSetSer microprogramming system for the Tenda wireless access point is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or...

10CVSS8.5AI score0.01213EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.9 views

The vulnerability of the fromVirtualSet function in the /goform/setPortForward file of the Tenda wireless access point’s microprogramming software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromVirtualSet function in the /goform/setPortForward function of the Tenda wireless access point’s microprogramming system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to...

9CVSS8.5AI score0.01194EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.9 views

The vulnerability of the HCI_AMP component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the HCIAMP component in the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00209EPSS
SaveExploits0References20Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.9 views

The vulnerability of the NFC component in the Linux operating system’s kernel, related to memory usage after deallocation, allows for a malfunction that can lead to service failure.

The vulnerability of the NFC component in the Linux operating system’s kernel relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00233EPSS
SaveExploits0References19Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.14 views

The vulnerability of the Microsoft SQL Server database management system, related to numerical truncation errors, allows an attacker to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Microsoft SQL Server database management system is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service failures...

7.5CVSS5.6AI score0.0166EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability in the implementation of the WebGL 3D graphics application programming interface for Firefox, Firefox ESR, and Thunderbird email client allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebGL 3D graphics application programming interface in Firefox, Firefox ESR, and Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

10CVSS7.7AI score0.00921EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.12 views

The vulnerability of the buffer.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the buffer.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

7.8CVSS7.2AI score0.00373EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.5 views

The vulnerability of the did_set_spelllang function in the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the didsetspelllang function in the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...

7.8CVSS7.2AI score0.00655EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.12 views

The vulnerability of Microsoft Edge and Google Chrome browsers’ authentication components allows attackers to access sensitive data, compromise its integrity, and cause service interruptions.

The vulnerability of Microsoft Edge and Google Chrome browsers’ authentication components is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

10CVSS7.8AI score0.00576EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.00902EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.8 views

The vulnerability of the software for interacting with servers via CURL lies in the use of memory after it is freed, allowing an attacker to cause a service failure.

The vulnerability of the software for interacting with servers via CURL is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.9CVSS6.7AI score0.02511EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.9 views

The vulnerability of the subtitle rendering components in Microsoft Edge and Google Chrome allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the subtitle rendering components in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

10CVSS7.2AI score0.0083EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability of the Skia component in Microsoft Edge and Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Skia component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created...

10CVSS7.6AI score0.00717EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder