Lucene search
+L

9365 matches found

BDU FSTEC
BDU FSTEC
•added 2025/01/24 12:00 a.m.•23 views

Linksys E8450 DoS

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogrammed software involves copying buffers without checking the size of the input data during the strcopy parameter processing. Exploiting this vulnerability can allow an attacker to cause service interruptions...

5.5CVSS5.4AI score0.00425EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/24 12:00 a.m.•12 views

Cluster Component DoS

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component of the Oracle MySQL Server management system are related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service...

6.8CVSS7AI score0.01082EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/01/23 12:00 a.m.•21 views

Oracle MySQL Server DoS

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.4AI score0.00958EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/23 12:00 a.m.•12 views

MySQL InnoDB DoS

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.01283EPSS
SaveExploits0References10Affected Software4
osv_ghsa
osv_ghsa
•added 2025/01/22 6:08 p.m.•23 views

GHSA-9M5P-C77C-F9J7 DoS in Cilium agent DNS proxy from crafted DNS responses

Impact In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an attacker can crash Cilium agents by sending a crafted DNS response to workloads from outside the cluster. For traffic that is allowed but without using DNS-based policy, the dataplane will continue to pass traffic ...

5.3CVSS5.2AI score0.00434EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/01/22 4:48 p.m.•20 views

CVE-2025-23028 DoS in Cilium agent DNS proxy from crafted DNS responses

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an...

5.3CVSS6.8AI score0.00434EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/01/22 12:00 a.m.•14 views

Secure Email Gateway Buffer Overflow DoS

The vulnerability of the Secure Email Gateway SEG email security gateway is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions, gain additional privileges, or cause service interruptions by...

10CVSS5.7AI score0.0136EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2025/01/21 8:52 p.m.•13 views

CVE-2025-21503

Removed by vendor...

4.9CVSS7AI score0.01073EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/01/20 12:00 a.m.•11 views

Gstreamer Stack Buffer Overflow DoS

The vulnerability of the Gstreamer multimedia framework is related to buffer overflow in the stack. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

10CVSS7.7AI score0.01274EPSS
SaveExploits0References15Affected Software8
BDU FSTEC
BDU FSTEC
•added 2025/01/20 12:00 a.m.•17 views

FortiOS IKE Service DoS

The vulnerability of the IPsec IKE service in the FortiOS operating system and the scalable cloud security system FortiSASE is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted...

7.8CVSS5.5AI score0.00632EPSS
SaveExploits0References2Affected Software2
NVD
NVD
•added 2025/01/17 5:15 p.m.•25 views

CVE-2024-53683

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use...

5.6CVSS0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/17 4:44 p.m.•25 views

CVE-2024-53683 Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use...

5.6CVSS0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/17 12:00 a.m.•5 views

PT-2025-2978

Name of the Vulnerable Software and Affected Versions Affected software affected versions not specified Description A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of t...

5.6CVSS0.00192EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/01/17 12:00 a.m.•17 views

rsyncd Code Execution

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files involves a buffer overflow when processing the length of the checksum. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions remotely...

10CVSS8.1AI score0.72059EPSS
SaveExploits4References20Affected Software7
BDU FSTEC
BDU FSTEC
•added 2025/01/16 12:00 a.m.•18 views

IBM Engineering Lifecycle Optimization Publishing Regular Expression DoS

The vulnerability of software for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing PUB is related to the use of regular expressions with inefficient computational complexity. Exploiting this vulnerability can...

7.8CVSS5.5AI score0.00498EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/01/16 12:00 a.m.•18 views

Dell PowerScale InsightIQ Insufficient Attempt Limiting DoS

The vulnerability of the software for performance monitoring and report generation in Dell PowerScale InsightIQ is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to trigger service interruptions remotely...

5.6CVSS5.5AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/16 12:00 a.m.•20 views

Exiv2 Buffer Overflow DoS

The vulnerability of the Exiv2 metadata management library is related to overflow in the dynamic memory buffer. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.9AI score0.01499EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2025/01/16 12:00 a.m.•17 views

IBM Engineering Lifecycle Optimization Publishing TLS/SSL DoS

The vulnerability of software implementations of TLS and SSL protocols for automating the creation, publication, and distribution of reports and documents in IBM Engineering Lifecycle Optimization – Publishing PUB involves deficiencies in access control. Exploiting this vulnerability could allow ...

6.5CVSS5.4AI score0.00427EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/01/15 3:24 p.m.•23 views

CVE-2024-46901

A flaw was found in Apache Subversion when serving repositories via moddavsvn. This issue may allow authenticated users with commit access to commit a corrupted revision, leading to disruption for users of the repository via insufficient validation of filenames against control characters...

3.1CVSS6.4AI score0.0193EPSS
SaveExploits1References4
CVE
CVE
•added 2025/01/15 12:00 a.m.•96 views

CVE-2024-50954

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers (versions V3.5.3b through V3.7.2a ) are vulnerable to a crash caused by improper handling of Modbus messages . An attacker who establishes a TCP connection with the controller within a local area network (LAN) can send a specific Mo...

7.5CVSS6.7AI score0.00425EPSS
SaveExploits0References1
Rows per page
Query Builder