Lucene search
+L

8088 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.13 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication procedures, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect configuration of access rights for previously deleted users. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service interruption...

5.4CVSS6AI score0.00818EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.9 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper authentication, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the improper handling of OAuth client identifiers. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause servic...

9CVSS7.7AI score0.00865EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.13 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functional decoding process allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoder relates to the lack of verification for the result of arithmetic operations. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause...

9.3CVSS7.6AI score0.0201EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.12 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoding process allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoding process is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and...

9.3CVSS7.6AI score0.01695EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.21 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function is related to the lack of a mechanism for converting data types. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.01632EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.17 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s functional decoding process allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.0201EPSS
SaveExploits1References7Affected Software3
OSV
OSV
added 2022/04/12 12:15 p.m.11 views

CVE-2022-0878

Electric Vehicle EV commonly utilises the Combined Charging System CCS for DC rapid charging. To exchange important messages such as the State of Charge SoC with the Electric Vehicle Supply Equipment EVSE CCS uses a high-bandwidth IP link provided by the HomePlug Green PHY HPGP power-line...

6.5CVSS5.8AI score0.00486EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:00 a.m.11 views

The vulnerability of Google Chrome’s BFCache component allows attackers to access sensitive data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s BFCache component relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created web page...

10CVSS7AI score0.00946EPSS
SaveExploits1References8Affected Software5
CNNVD
CNNVD
added 2022/04/12 12:00 a.m.10 views

Combined Charging System 访问控制错误漏洞

Combined Charging System CCS is a combined charging system. The Combined Charging System CCS for DC suffers from a security vulnerability where an attack could use electromagnetic interference to wirelessly interrupt the necessary control communications between the vehicle and the charger from a...

6.5CVSS6.6AI score0.00486EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:00 a.m.9 views

The vulnerability of Google Chrome’s storage mechanism allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of Google Chrome’s storage mechanism is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code through a specially created web page...

10CVSS7.6AI score0.00878EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the `Exiv2::IptcParser::decode` function in the `iptc.cpp` component of the Exiv2 metadata management library lies in the possibility of a buffer overflow. This allows an attacker to cause a service failure.

The vulnerability of the Exiv2::IptcParser::decode function in the iptc.cpp component of the Exiv2 metadata management library is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a...

7.1CVSS6.9AI score0.01332EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to errors in resource release, allows a violator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect handling of user names. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions...

4.3CVSS5.5AI score0.00998EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.80 views

The vulnerability of the JavaScript MuJS interpreter, related to copying buffers without checking the input data, allows a violator to trigger a service failure.

The vulnerability of the JavaScript MuJS interpreter is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01554EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.16 views

The vulnerability of the `find_color_or_error` function in the Gifsicle software package, which is used for creating, editing, and optimizing GIF files. This vulnerability relates to pointer arithmetic errors, allowing attackers to trigger a service failure.

The vulnerability of the findcolororerror function in the Gifsicle software package, which is used for creating, editing, and optimizing GIF files, is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service interruptions...

7.8CVSS7.4AI score0.01605EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the `store_sm_boundary_item` function in the `Nef_S2/SNC_io_parser.h` component of the CGAL algorithm library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the storesmboundaryitem function in the NefS2/SNCioparser.h library, a part of the computational geometry algorithm library CGAL, relates to reading data beyond the allowed buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data...

9.3CVSS7.9AI score0.02328EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.10 views

The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to gain unauthorized access to read, modify, or delete data, or to cause a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data, or to cause a service failure using t...

6.5CVSS6.8AI score0.01222EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.12 views

The vulnerability of the `store_sm_boundary_item` function in the `Nef_S2/SNC_io_parser.h` component of the CGAL algorithm library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the storesmboundaryitem function in the NefS2/SNCioparser.h library, a part of the computational geometry algorithm library CGAL, relates to reading data beyond the allowed buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data...

9.3CVSS7.9AI score0.02375EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.10 views

The vulnerability of the Icinga network availability monitoring system, related to insecure management of privileges, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Icinga network availability monitoring system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

9CVSS7.1AI score0.0114EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.12 views

The vulnerability of the crc64i function in the nasmlib/crc64.c assembly file of NASM allows a hacker to cause a service failure.

The vulnerability of the crc64i function in the nasmlib/crc64.c assembly file of NASM involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

4.3CVSS6.4AI score0.00827EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.13 views

The vulnerability of the `heif::Box_iref::get_references` function in the Libheif library for encoding and decoding HEIF and AVIF files involves reading data beyond the permissible buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the heif::Boxiref::getreferences function in the HEIF and AVIF file encoding/decoding library Libheif lies in the reading of data beyond the permissible buffer size. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

9.3CVSS7.8AI score0.01368EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder