Lucene search
+L

7850 matches found

BDU FSTEC
BDU FSTEC
added 2024/08/27 12:0 a.m.8 views

The vulnerability of the ieee_write_file function in the /output/outieee.c component of the Netwide Assembler (NASM) compiler allows a hacker to cause a service failure.

The vulnerability of the ieeewritefile function in the /output/outieee.c component of the Netwide Assembler NASM compiler is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00337EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2024/08/24 11:15 p.m.8 views

UBUNTU-CVE-2024-45236

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP a signed object containing an empty signedAttributes field. Fort accesses the set's elements without sanitizing it first. Because Fort is an RPKI Relying...

7.5CVSS5.8AI score0.00481EPSS
SaveExploits0References4
OSV
OSV
added 2024/08/24 11:15 p.m.5 views

UBUNTU-CVE-2024-45239

An issue was discovered in Fort before 1.6.3. A malicious RPKI repository that descends from a trusted Trust Anchor can serve via rsync or RRDP an ROA or a Manifest containing a null eContent field. Fort dereferences the pointer without sanitizing it first. Because Fort is an RPKI Relying Party, ...

7.5CVSS5.8AI score0.00481EPSS
SaveExploits0References4
F5 Networks
F5 Networks
added 2024/08/23 5:11 p.m.67 views

K000140784: Apache HTTPD vulnerability CVE-2024-38477

Security Advisory Description null pointer dereference in modproxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue. CVE-2024-38477 Impact Attackers can exploit this...

7.5CVSS7.9AI score0.03153EPSS
SaveExploits0Affected Software15
Positive Technologies
Positive Technologies
added 2024/08/23 12:0 a.m.5 views

PT-2024-9676 · Veeam · Veeam Agent For Microsoft Windows

Name of the Vulnerable Software and Affected Versions: Veeam Agent for Microsoft Windows affected versions not specified Description: The issue is related to the use of an insecure path search in Veeam Agent for Microsoft Windows, which can lead to DLL injection. If the system's PATH variable...

7CVSS6.8AI score0.00177EPSS
SaveExploits0References8
HackRead
HackRead
added 2024/08/22 12:15 p.m.11 views

US Microchip Giant Hit by Cyberattack, Disrupting Operations

Microchip Technology hit by cyberattack, disrupting manufacturing operations. A major disruption to semiconductor production has been reported, impacting…...

7.3AI score
SaveExploits0
OSV
OSV
added 2024/08/21 10:15 a.m.8 views

CVE-2023-22576

Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged attacker may potentially exploit this vulnerability leading to the execution of arbitrary executable on the operating system with high privileges...

7.8CVSS6AI score0.00132EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.8 views

Vulnerability of the Layer-2 Bridge Network Driver for Windows operating systems, allowing a hacker to cause service failure.

The vulnerability of the Layer-2 Bridge Network Driver for Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS5.5AI score0.02457EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/08/20 12:0 a.m.4 views

Tenda FH1201 Buffer Overflow Vulnerability (CNVD-2025-10821)

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 suffers from a buffer overflow vulnerability that originates from a stack overflow found in the page parameter of the frmL7ImForm function. An attacker can exploit this vulnerability to consume server resources for the purpo...

7.5CVSS7.7AI score0.00682EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2024/08/19 12:0 a.m.10 views

The vulnerability of the mlx5e_tx_reporter_dump_sq() function in the net/mlx5e component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mlx5etxreporterdumpsq function in the net/mlx5e component of the Linux operating system is related to writing beyond the memory boundary. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00243EPSS
SaveExploits0References11Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/08/19 12:0 a.m.13 views

The vulnerability of the Packet Forwarding Engine (PFE) module of Juniper Networks’ Junos OS allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS is related to insufficient checking of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS5.4AI score0.00491EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/19 12:0 a.m.10 views

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

7.8CVSS5.5AI score0.02657EPSS
SaveExploits0References2
NVD
NVD
added 2024/08/16 8:15 p.m.26 views

CVE-2024-43011

An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to insufficient validation and sanitization of user input for file paths, an attacker can exploit this vulnerability by using directory traversal techniques to delete arbitrary file...

4.9CVSS0.00672EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/08/16 2:17 p.m.23 views

CVE-2024-4782

A denial-of-service vulnerability was reported in some Lenovo printers that could allow an unauthenticated attacker on a shared network to disrupt the printer's functionality until a manual system reboot occurs...

6.5CVSS0.003EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/08/16 12:0 a.m.41 views

CVE-2024-43011

An arbitrary file deletion vulnerability exists in the admin/del.php file at line 62 in ZZCMS 2023 and earlier. Due to insufficient validation and sanitization of user input for file paths, an attacker can exploit this vulnerability by using directory traversal techniques to delete arbitrary file...

0.00672EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/08/16 12:0 a.m.13 views

The vulnerability of the command-line interface of Juniper Networks’ Junos OS and Junos OS Evolved allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the command-line interface of Juniper Networks’ Junos OS and Junos OS Evolved is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created certificate file...

6.4CVSS6.3AI score0.00094EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/08/16 12:0 a.m.16 views

The vulnerability of the integrated service module of Dell iDRAC in remote access controllers iDRAC, related to the execution of operations outside the buffer in memory, allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the Dell iDRAC Service Module integrated service module controllers in remote access controllers involves an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious individual to execute arbitrary code or cause service failures...

5.2CVSS6.3AI score0.00158EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2024/08/15 12:0 a.m.37 views

Nginx 1.5.13 - 1.27.0 Buffer Overread Vulnerability

Nginx is prone to a buffer overread in the ngxhttpmp4module. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nginx:nginx";...

5.7CVSS6.6AI score0.0032EPSS
SaveExploits0References3
F5 Networks
F5 Networks
added 2024/08/14 1:16 p.m.39 views

K000138477: BIG-IP MPTCP vulnerability CVE-2024-41164

Security Advisory Description When a TCP profile with Multipath TCP enabled MPTCP is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. CVE-2024-41164 Impact Traffic is disrupted...

8.2CVSS7AI score0.0044EPSS
SaveExploits0Affected Software14
BDU FSTEC
BDU FSTEC
added 2024/08/14 12:0 a.m.10 views

The vulnerability of the SuiteLink server for AVEVA Historian, InTouch, Application Server, Communication Drivers Pack, and Batch Management products allows a hacker to cause service interruptions.

The vulnerability of the SuiteLink server for AVEVA Historian, InTouch, Application Server, Communication Drivers Pack, and Batch Management products is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotel...

7.8CVSS5.5AI score0.00498EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder