Lucene search
+L

8080 matches found

BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.12 views

The vulnerability in the `src/libraw_cxx.cpp` component of the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the src/librawcxx.cpp component in the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

7.1CVSS6.6AI score0.02039EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.12 views

The vulnerability in the kernel/sched/wait.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the kernel/sched/wait.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.7AI score0.00247EPSS
SaveExploits0References28Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.10 views

The vulnerability at the sysfs level of the Linux operating system allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability at the sysfs level of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

6.8CVSS6.8AI score0.0015EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.12 views

The vulnerability of the `av_buffersrc_add_frame_flags` function in the `buffersrc` component of the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the avbuffersrcaddframeflags function in the buffersrc component of the FFmpeg multimedia library is related to improper memory release before deleting the last pointer. Exploiting this vulnerability allows an attacker to cause service failure remotely...

7.1CVSS6.7AI score0.00902EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.7 views

The vulnerability of the inode_init_owner function in the fs/inode.c component of the Linux operating system allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the inodeinitowner function in the fs/inode.c component of the Linux operating system’s kernel is related to insecure privilege management. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.4AI score0.0101EPSS
SaveExploits3References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.12 views

The vulnerability of the `url_open_dyn_buf_internal` function in the `libavformat/aviobuf.c` file of the multimedia library FFmpeg allows a attacker to cause a service failure.

The vulnerability of the urlopendynbufinternal function in the libavformat/aviobuf.c file of the FFmpeg multimedia library is related to improper memory release before deleting last references. Exploiting this vulnerability allows an attacker to cause service failures remotely...

7.1CVSS6.3AI score0.01039EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.13 views

The vulnerability of the Simple DirectMediaLayer library, related to integer overflow, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Simple DirectMediaLayer library is related to a potential overflow when creating a new RGB surface. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through the use of a special...

9.3CVSS7.3AI score0.03072EPSS
SaveExploits2References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.20 views

The vulnerability of the internal/dcraw_common.cpp component in the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.1CVSS7AI score0.01796EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.9 views

The vulnerability of the USB device subsystem in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the USB device subsystem in the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.8AI score0.00461EPSS
SaveExploits2References31Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.8 views

The vulnerability of the libelf/elf_end.c component of the ELF modification and analysis utility Elfutils allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libelf/elfend.c component of the ELF modification and analysis utility Elfutils involves a repeated memory release mechanism. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS6.3AI score0.03691EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:00 a.m.13 views

The vulnerability of the Libjpeg-turbo image processing library, related to writing beyond the buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Libjpeg-turbo library for image processing is related to improper compression/decompression of gigapixel images. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7AI score0.02461EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:00 a.m.12 views

The vulnerability of the API virStoragePoolLookupByTargetPath in the virtualization management library Libvirt allows a attacker to cause a service failure.

The vulnerability of the API virStoragePoolLookupByTargetPath in the virtualization management library Libvirt is related to insufficient blocking mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

6.5CVSS7AI score0.01366EPSS
SaveExploits0References9Affected Software4
CNNVD
CNNVD
added 2022/09/21 12:00 a.m.7 views

ISC BIND 资源管理错误漏洞

ISC BIND is the United States ISC company's set of open source software that implements the DNS protocol. ISC BIND suffers from a denial-of-service vulnerability that stems from a flaw in the resolver code that could cause naming to take an inordinate amount of time to process large delegates,...

5.3CVSS6.9AI score0.01723EPSS
SaveExploits0References23
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:00 a.m.9 views

Vulnerability of the Annot.h function: AnnotPath::getCoordsLength() in the Poppler PDF rendering library, which allows an attacker to cause a service failure.

Vulnerability of the Annot.h function: The AnnotPath::getCoordsLength function in the Poppler PDF rendering library is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS6.3AI score0.02435EPSS
SaveExploits1References11Affected Software5
RedHat Linux
RedHat Linux
added 2022/09/20 1:42 p.m.17 views

mysql: Server: Security: Encryption unspecified vulnerability (CPU Jul 2022)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

3.1CVSS7.3AI score0.00753EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/09/20 12:00 a.m.14 views

PT-2022-6341 · Unknown · Mklogic-500

Name of the Vulnerable Software and Affected Versions: MKLogic-500 affected versions not specified Description: The issue is related to a lack of authentication for a critical function in the MKLogic-500 PLC configuration protocol. This could allow a remote attacker to modify the device's logic,...

8CVSS7.2AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:00 a.m.13 views

The vulnerability of the ps_mix_phase function in the libfaad/ps_dec.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the psmixphase function in the libfaad/psdec.c component of the Freeware Advanced Audio Decoder 2 FAAD2 decoder is related to the lack of checking for the iidindex. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service...

8.8CVSS7.1AI score0.01153EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:00 a.m.15 views

The vulnerability of the read_header_tga function in the gd_tga.c component of the LibGD graphics library allows a hacker to cause a service failure.

The vulnerability of the readheadertga function in the gdtga.c component of the LibGD graphics library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a malicious actor to cause service failure by using a specially created TGA file...

7.1CVSS7AI score0.01869EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:00 a.m.11 views

The vulnerability of the `calculate_gain` function in the `libfaad/sbr_hfadj.c` component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the calculategain function in the libfaad/sbrhfadj.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to the lack of comparison with MAXM. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its...

9.3CVSS7.2AI score0.01281EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:00 a.m.9 views

The vulnerability of the “runc exec --cap” command in the Runc tool for running isolated containers allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the “runc exec --cap” command in the Runc tool for running isolated containers is related to the default access permissions settings. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS7AI score0.00393EPSS
SaveExploits0References12Affected Software5
Rows per page
Query Builder