Lucene search
+L

7849 matches found

BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.8 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.9AI score0.01508EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.10 views

The vulnerability of the read_samples() function in the voc.c component of the SoX sound processing software allows a hacker to cause a service failure.

The vulnerability of the readsamples function in the SoX sound processing component voc.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

5.5CVSS6.8AI score0.00433EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.9AI score0.012EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability of the vhost_user_set_inflight_fd() function in the set of libraries and drivers for DPDK’s fast packet processing allows a attacker to cause a service failure.

The vulnerability of the vhostusersetinflightfd function in the set of libraries and drivers for the DPDK fast packet processing framework is related to reading data from buffers beyond their acceptable limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01266EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability of the startread() function in the wav.c component of the SoX sound processing program allows a hacker to cause a service failure.

The vulnerability of the startread function in the SoX sound processing component wav.c is related to the lack of checks for division by zero. Exploiting this vulnerability allows a attacker to cause a service failure using a specially created file...

5.5CVSS6.8AI score0.00466EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.8 views

The vulnerability of the PDO::quote function in the ext/pdo_sqlite/sqlite_driver.c component of the PHP programming language is related to integer overflow. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PDO::quote function in the ext/pdosqlite/sqlitedriver.c component of the PHP programming language is related to integer overflow. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

6.9CVSS7.1AI score0.02134EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability in the alloc.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the alloc.c component of the Vim text editor relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.6AI score0.00423EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.10 views

The vulnerability of the WebSQL component in Microsoft Edge and Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the WebSQL component in Microsoft Edge and Google Chrome relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially create...

10CVSS7.8AI score0.00797EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.8 views

The vulnerability of Intel Microcode processors lies in the default access settings, which allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Intel Microcode processors relates to the default access rights settings. Exploiting this vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service failures...

6.7CVSS6.8AI score0.00213EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.7 views

The vulnerability of the mark.c component of the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mark.c component of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service interruptions...

7.8CVSS7.2AI score0.00464EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.11 views

The vulnerability of the put_qpel_fallback() function in the h.265 Libde265 implementation allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the putqpelfallback function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.3AI score0.00385EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.9 views

The vulnerability of Microsoft Edge and Google Chrome browsers, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

10CVSS7.8AI score0.0048EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability of the split_cmdline() function in the Git distributed version control system allows a hacker to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the splitcmdline function in the distributed version of Git’s version control system is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause...

10CVSS7.6AI score0.03116EPSS
SaveExploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.8 views

The vulnerability of the lsx_read_w_buf() function in the formats_i.c component of the SoX sound processing program allows a hacker to cause a service failure.

The vulnerability of the lsxreadwbuf function in the formsi.c component of the SoX sound processing program is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure using a specially created file...

5.5CVSS6.8AI score0.00466EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.6 views

The vulnerability of the web page rendering module in WebKitGTK and WPE WebKit, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering module in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.00902EPSS
SaveExploits0References14Affected Software5
OSV
OSV
added 2024/09/21 7:10 a.m.23 views

BIT-ENVOY-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

6.5CVSS6.9AI score0.00378EPSS
SaveExploits0References2
NVD
NVD
added 2024/09/20 12:15 a.m.25 views

CVE-2024-45806

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

6.5CVSS0.00378EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/09/19 11:34 p.m.21 views

CVE-2024-45806 Potential manipulate `x-envoy` headers from external sources in envoy

Envoy is a cloud-native high-performance edge/middle/service proxy. A security vulnerability in Envoy allows external clients to manipulate Envoy headers, potentially leading to unauthorized access or other malicious actions within the mesh. This issue arises due to Envoy's default configuration ...

6.5CVSS6.5AI score0.00378EPSS
SaveExploits0References1
Veracode
Veracode
added 2024/09/19 7:12 a.m.8 views

Denial Of Service (DoS)

vLLM library is vulnerable to Denial of Service DoS. The vulnerability is caused due to improper handling of completions API requests with an empty prompt, which allows an attacker to crash the server, resulting in service disruption...

7.5CVSS6.6AI score0.00676EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.6 views

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service failures.

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a malicious actor to cause...

7.8CVSS7.1AI score0.00954EPSS
SaveExploits0References4Affected Software22
Rows per page
Query Builder