Lucene search
+L

8089 matches found

BDU FSTEC
BDU FSTEC
added 2022/03/28 12:00 a.m.10 views

Vulnerability of the Server component: The Information Schema of the MySQL Server database management system, which allows a hacker to cause a service failure.

Vulnerability of the MySQL Server component: The information schema of the MySQL Server database management system is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...

6.3CVSS6.3AI score0.0136EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:00 a.m.13 views

The vulnerability of the legacy_parse_param function in the Linux operating system’s kernel, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the legacyparseparam function in the Linux operating system’s kernel is related to incorrect checking of the length of passed parameters. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

8.4CVSS7AI score0.25151EPSS
SaveExploits11References21Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:00 a.m.13 views

The vulnerability of the GPU Process browser processes in Microsoft Edge and Google Chrome allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the GPU Process browser engines in Microsoft Edge and Google Chrome is related to buffer overflows during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by using a specially created...

10CVSS8.3AI score0.01EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:00 a.m.14 views

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to the manipulation of the null pointer pointer, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...

6.5CVSS5.9AI score0.01912EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:00 a.m.14 views

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to the manipulation of the null pointer pointer, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...

6.5CVSS6.5AI score0.0182EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:00 a.m.12 views

The vulnerability of the SymCrypt library in the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the SymCrypt library in the Windows operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.4AI score0.03663EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/18 12:00 a.m.10 views

The vulnerability in the implementation of the Point to Point Tunneling Protocol (PPPT) for Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Point to Point Tunneling Protocol PPTP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6.8AI score0.56376EPSS
SaveExploits0References4
The Hacker News
The Hacker News
added 2022/03/17 8:46 a.m.60 views

Ukraine Secret Service Arrests Hacker Helping Russian Invaders

The Security Service of Ukraine SBU said it has detained a "hacker" who offered technical assistance to the invading Russian troops by providing mobile communication services inside the Ukrainian territory. The anonymous suspect is said to have broadcasted text messages to Ukrainian officials,...

0.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:00 a.m.11 views

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the WebXR components in Google Chrome and Microsoft Edge relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.1CVSS8AI score0.01073EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:00 a.m.8 views

The vulnerability of the BN_mod_sqrt() function in the OpenSSL library, which allows a hacker to cause a denial-of-service attack

The vulnerability of the BNmodsqrt function in the OpenSSL library is related to the execution of a loop without sufficient restrictions on its execution count. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.8CVSS7AI score0.73188EPSS
SaveExploits2References28Affected Software21
ATTACKERKB
ATTACKERKB
added 2022/03/15 9:15 p.m.4 views

CVE-2022-23989

In Stormshield Network Security SNS before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service might lead to saturation of the loopback interface. This could result in the blocking of almost all network traffic, maki...

7.5CVSS5.5AI score0.0093EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/03/14 12:00 a.m.6 views

PT-2022-7556 · Apple +8 · Ipados +13

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.3 Safari versions prior to 15.4 watchOS versions prior to 8.5 iOS versions prior to 15.4 iPadOS versions prior to 15.4 tvOS versions prior to 15.4 WebKitGTK affected versions not specified WPE WebKit affect...

10CVSS8.3AI score0.06701EPSS
SaveExploits1References142
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:00 a.m.12 views

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), related to reading data beyond the specified buffer, allows a intruder to trigger a service failure.

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, is related to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to cause a service failure...

7.8CVSS7.2AI score0.18178EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2022/03/09 11:15 p.m.23 views

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

5.9CVSS0.0086EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/09 11:15 p.m.9 views

CVE-2022-24323

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

5.9CVSS6.2AI score0.0086EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/09 11:15 p.m.23 views

Design/Logic Flaw

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause a disruption of communication between the Modicon controller and the engineering software, when an attacker is able to intercept and manipulate specific Modbus response data. Affected Product:...

4.3CVSS5.7AI score0.0086EPSS
SaveExploits0References1Affected Software2
Code423n4
Code423n4
added 2022/03/09 12:00 a.m.17 views

[WP-H3] money-market-contracts/oracle#feed_prices() delayed transaction may disrupt price feeds

Lines of code Vulnerability details The implementation only takes two attributes: asset and price. And the lastupdatedtime of the record will always be set to the current block.time. This makes it possible for the price feeds to be disrupted when the network is congested, or the endpoint is down...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.38 views

The vulnerability of software for the development and mass production of printed circuit boards, related to errors in processing uploaded files, allows a perpetrator to gain access to protected information or cause service failures.

The vulnerability of software for the development and mass production of printed circuit boards is related to errors in processing uploaded files. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures by sending a specially...

9.3CVSS5.5AI score0.01268EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:00 a.m.10 views

The vulnerability of the RouterOS operating system in MikroTik routers allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik routers lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure through a specially crafted FTP request...

7.8CVSS7.4AI score0.0125EPSS
SaveExploits0References4Affected Software1
Malwarebytes
Malwarebytes
added 2022/03/02 11:26 a.m.23 views

Toyota’s just in time manufacturing faced with disruptive cyberattack

Toyota suspended the operation of 28 lines at 14 plants in Japan on Tuesday, March 1, after a cyberattack on supplier Kojima Industries Corp. Some plants operated by Toyotas affiliates Hino Motors and Daihatsu are included in the shutdown. Hino suspended all operations at its Koga facility, which...

1.2AI score
SaveExploits0
Rows per page
Query Builder