Lucene search
+L

8078 matches found

BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.8 views

The vulnerability of the os_unix.c component of the SQLite database management system allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the osunix.c component of the SQLite database management system is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

5.9CVSS6.5AI score0.0048EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.11 views

The vulnerability of the `process_mips_specific` function in the `binutils/readelf.c` component of the GNU Binutils development environment allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the processmipsspecific function in the binutils/readelf.c component of the GNU Binutils development environment is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

10CVSS7AI score0.01976EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.10 views

The vulnerability of the functions ezxml_str2utf8 and ezxmlParseStr in the ezxml.c component of the ezXML library for XML document syntax analysis allows a attacker to cause a service failure.

The vulnerability of the ezxmlstr2utf8 and ezxmlParseStr functions in the ezxml.c component of the ezXML XML syntax analysis library is related to pointer aliasing errors. Exploiting this vulnerability allows an attacker to trigger a service failure using a specially created XML file...

7.1CVSS6.5AI score0.01185EPSS
SaveExploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.17 views

The vulnerability of the backtrace function in the GNU C Library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the backtrace function in the GNU C Library is related to writing beyond buffer boundaries due to incorrect checks on array bounds. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

6.2CVSS7.1AI score0.00537EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.13 views

The vulnerability in the opj2_decompress program of the OpenJPEG library allows a attacker to cause a service failure.

The vulnerability of the opj2decompress program in the OpenJPEG image encoding and decoding library is related to improper handling of directories containing a large number of files. Exploiting this vulnerability allows an attacker to cause service interruptions...

7.8CVSS6.7AI score0.01104EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.11 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.01085EPSS
SaveExploits1References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.10 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.00969EPSS
SaveExploits1References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.12 views

The vulnerability of the ezxml_decode function in the XML document syntax analysis library ezXML allows a attacker to cause a service failure.

The vulnerability of the ezxmldecode function in the ezXML XML syntax analysis library involves reading data beyond the allowable buffer size. Exploiting this vulnerability allows a malicious actor to cause service interruptions by using a specially created XML file...

7.8CVSS6.7AI score0.01085EPSS
SaveExploits1References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.14 views

The vulnerability of the library for working with the DICOM format allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the library for working with the DICOM format in DCMT is related to deficiencies in pathname restrictions for accessing the catalog. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

10CVSS6.9AI score0.03108EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.9 views

The vulnerability of the CPAN.pm component in the Perl programming language allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CPAN.pm component in the Perl programming language is related to errors in the TLS certificate validation process. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.1CVSS7.3AI score0.01548EPSS
SaveExploits1References19Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.10 views

The vulnerability of the fromNatStaticSetting() function in the microprogramming software for Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromNatStaticSetting function in the microprogramming software for Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 lies in the fact that the operation outputs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a...

10CVSS8.4AI score0.00928EPSS
SaveExploits1References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.9 views

The vulnerability of the CGI programming language Ruby allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the CGI programming language Ruby is related to the occurrence of interpretation conflicts when unreliable input data is inserted into the HTTP response header. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and...

9CVSS6.7AI score0.02287EPSS
SaveExploits1References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:00 a.m.10 views

The vulnerability of the fromDhcpListClient() function in the microprogrammed software for Tenda routers such as F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromDhcpListClient function in the microprogrammed routing devices Tenda F1202, FH1202, AC10, AC1206, ACV7, AC5, and AC9 relates to the issue of the operation going beyond the buffer boundaries in memory when processing the page parameter. Exploiting this vulnerability...

10CVSS8.4AI score0.00928EPSS
SaveExploits1References3Affected Software6
OSV
OSV
added 2023/07/18 9:15 p.m.6 views

CVE-2023-22011

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Analytics Server. Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis...

5.4CVSS7.3AI score0.00481EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/07/18 12:00 a.m.23 views

EulerOS 2.0 SP10 : screen (EulerOS-SA-2023-2393)

According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users...

6.5CVSS6.4AI score0.0054EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2023/07/18 12:00 a.m.7 views

PT-2023-18597 · Rockwell Automation · Kinetix 5700 Dc Bus Power Supply Series A

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A affected versions not specified Description: The issue concerns a vulnerability to CIP fuzzing, which affects the establishment of new ENIP connections. If impacted, this...

7.8CVSS7.3AI score0.01226EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/07/18 12:00 a.m.14 views

EulerOS 2.0 SP10 : screen (EulerOS-SA-2023-2367)

According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users...

6.5CVSS6.4AI score0.0054EPSS
SaveExploits3References2
Vulnrichment
Vulnrichment
added 2023/07/17 12:31 p.m.12 views

CVE-2023-2912 SiteManager Embedded service disruption

Use After Free vulnerability in Secomea SiteManager Embedded allows Obstruction...

5.9CVSS7AI score0.00542EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:00 a.m.12 views

The vulnerability of the programming interface of Windows CryptoAPI on Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows CryptoAPI programming interface on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.8CVSS7AI score0.02082EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:00 a.m.15 views

The vulnerability of the Good plugin (gst-plugins-good) in the Gstreamer multimedia framework allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Good gst-plugins-good plugin of the Gstreamer multimedia framework is related to insufficient protection of sensitive data due to the absence of security updates on the remote host. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protect...

7.8CVSS5.9AI score
SaveExploits0References3Affected Software2
Rows per page
Query Builder