Lucene search
+L

8080 matches found

BDU FSTEC
BDU FSTEC
added 2022/12/23 12:00 a.m.12 views

The vulnerability of the Ldoms component in the Oracle Solaris operating system allows a perpetrator to gain read access to data, obtain privileged access to infrastructure, or cause partial service interruption.

The vulnerability of the Ldoms component in the Oracle Solaris operating system is related to errors in the code. Exploiting this vulnerability can allow an attacker to gain read access to data, obtain privileged access to infrastructure resources, or cause partial service interruption...

3.3CVSS6.3AI score0.00203EPSS
SaveExploits0References3Affected Software1
Malwarebytes
Malwarebytes
added 2022/12/22 4:00 a.m.29 views

The Guardian hit by "ransomware attack"

On Tuesday December 20, 2022 British newspaper The Guardian experienced a major IT security incident that crippled a part of its IT infrastructure. The suspected cause is ransomware. In an online article the newspaper published an internal statement from the chief executive and the editor-in-chie...

SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:00 a.m.20 views

The vulnerability of the free_charger_irq() function in the drivers/power/supply/wm8350_power.c file of the Linux kernel allows a hacker to cause a service failure or gain increased privileges.

The vulnerability of the freechargerirq function in the drivers/power/supply/wm8350power.c file of the Linux kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause system failures or gain increased privileges...

5.5CVSS6.5AI score0.00214EPSS
SaveExploits0References17Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:00 a.m.21 views

The vulnerability of the `__do_proc_dointvec` function in the Linux operating system’s kernel allows a hacker to cause a service failure or enhance their privileges.

The vulnerability of the doprocdointvec function in the Linux operating system’s kernel is related to the use of functions with non-standard implementations. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

8.4CVSS6.4AI score0.00431EPSS
SaveExploits0References23Affected Software21
Positive Technologies
Positive Technologies
added 2022/12/22 12:00 a.m.10 views

PT-2022-6165 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Junos OS version 22.3R1 Junos OS Evolved version 22.3R1-EVO Description: The issue is related to an Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved. This vulnerabili...

7.8CVSS7.3AI score0.00665EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:00 a.m.15 views

Vulnerability of the fib_nh_match() function (net/ipv4/fib_semantics.c) in Linux operating system kernels, which allows a attacker to trigger a service failure

The vulnerability of the fibnhmatch function net/ipv4/fibsemantics.c in the Linux operating system kernel is related to the execution of operations outside the buffer boundaries in memory. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...

5CVSS6.9AI score0.03998EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:00 a.m.15 views

The vulnerability of the _rtw_init_xmit_priv function in the drivers/staging/r8188eu/core/rtw_xmit.c file of the Linux kernel allows a hacker to cause a service failure or enhance their privileges.

The vulnerability of the rtwinitxmitpriv function in the drivers/staging/r8188eu/core/rtwxmit.c file of the Linux kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause a service failure or gain increased privileges...

5.5CVSS6.7AI score0.00224EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:00 a.m.17 views

The vulnerability of the uapi_finalize() function in the drivers/infiniband/core/uverbs_uapi.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the uapifinalize function in the drivers/infiniband/core/uverbsuapi.c file of the Linux kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00216EPSS
SaveExploits0References12Affected Software3
HackRead
HackRead
added 2022/12/20 3:41 p.m.23 views

Google Disruption Fails to Stop Glupteba Botnet

By Deeba Ahmed In December 2021, Google announced it had disrupted the Glupteba botnet and filed a lawsuit against two of its Russian operators, but it turns out the botnet is back and kicking. This is a post from HackRead.com Read the original post: Google Disruption Fails to Stop Glupteba Botne...

3.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/12/19 12:00 a.m.19 views

The vulnerability of the xrdp_mm_trans_process_drdynvc_channel_close() function on the XRDP server allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of the xrdpmmtransprocessdrdynvcchannelclose function on the XRDP server is related to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause service failures...

9.4CVSS7.4AI score0.00892EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/12/19 12:00 a.m.25 views

The vulnerability of the xrdp_caps_process_confirm_active() function on the XRDP server allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the xrdpcapsprocessconfirm-active function on the XRDP server is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or cause servic...

9.4CVSS7.4AI score0.00729EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/12/14 12:00 a.m.10 views

The vulnerability of the tdpServer software service in TP-Link RE300 wireless signal amplifiers allows a hacker to cause a service failure.

The vulnerability of the tdpServer microprogramming system in TP-Link RE300 wireless signal amplifiers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a hacker to cause malfunctions in the device’s functionality...

5.5CVSS5.5AI score0.00175EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/12/12 6:15 p.m.8 views

CVE-2022-3999

The DPD Baltic Shipping WordPress plugin before 1.2.57 does not have authorisation and CSRF in an AJAX action, which could allow any authenticated users, such as subscriber to delete arbitrary options from the blog, which could make the blog unavailable...

8.1CVSS5.9AI score0.00424EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2022/12/12 12:00 a.m.19 views

The vulnerability of Moxa VPORT 06EC-2V IP camera software and Moxa VPort 461A video encoder software lies in the reading of data beyond the buffer in memory. This allows an intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability of Moxa VPORT 06EC-2V microprogrammed software for IP cameras and the Moxa VPort 461A microprogrammed software for video encoders lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

10CVSS5.7AI score
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/12/09 12:00 a.m.12 views

The vulnerability of the Windows DNS Server component of the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the Windows DNS Server component of the operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.4AI score0.0327EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/12/08 12:00 a.m.8 views

The vulnerability of the enter_buffer function in the Vim text editor allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the enterbuffer function in the Vim text editor relates to the use of memory after it is freed when using :lopen and :bwipe commands. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...

9.3CVSS7.3AI score0.01395EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/12/08 12:00 a.m.10 views

The vulnerability of the Vim text editor lies in the fact that it allows reading beyond the permissible buffer data limits. This enables attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Vim text editor is related to reading data beyond the allowable buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.5AI score0.01351EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/12/08 12:00 a.m.11 views

The vulnerability of the Vim text editor lies in the fact that it allows reading beyond the allowed buffer data limits. This enables attackers to gain access to confidential data and also causes service interruptions.

The vulnerability of the Vim text editor is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and also cause service interruptions...

8.8CVSS7.5AI score0.01586EPSS
SaveExploits1References9Affected Software3
RedHat Linux
RedHat Linux
added 2022/12/07 8:19 a.m.8 views

snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

A flaw was found in the snakeyaml package due to a stack-overflow in parsing YAML files. By persuading a victim to open a specially-crafted file, a remote attacker could cause the application to crash, resulting in a denial of service...

6.5CVSS6.8AI score0.0165EPSS
SaveExploits0References4
Akamai Blog
Akamai Blog
added 2022/11/30 3:00 p.m.17 views

Accidentally Crashing a Botnet

As part of our research into the cryptomining botnet kmsdbot, we rendered it useless...

1.9AI score
SaveExploits0
Rows per page
Query Builder