Lucene search
+L

8274 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.12 views

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogramming-based chips from the Demon model in 1905 allows a hacker to trigger a service failure.

The vulnerability of the MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microprogrammed software chips in 1905 is related to the lack of authentication. Exploiting this vulnerability can allow a remote attacker to cause service failures...

7.8CVSS7.3AI score0.01118EPSS
SaveExploits0References2Affected Software7
ATTACKERKB
ATTACKERKB
added 2022/01/11 7:30 p.m.13 views

CVE-2021-36199

Running a vulnerability scanner against VideoEdge NVRs can cause some functionality to stop...

5.3CVSS6AI score0.01045EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/11 12:00 a.m.4 views

PT-2022-1495 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the incorrect clearing or release of resources in the Windows IKE extension, which can lead to a denial-of-service condition. This can be exploited by a remote...

7.5CVSS9.2AI score0.0303EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.15 views

Silicon Labs 700 数据伪造问题漏洞

Silicon Labs 700 is a family of chips from Silicon Labs, Inc. The Silicon Labs 700 suffers from a data forgery vulnerability that stems from the presence of insufficient authentication or encryption in the Silicon Labs 700 series chips using S2. An attacker could exploit the vulnerability by...

6.5CVSS6.5AI score0.00703EPSS
SaveExploits0References6
CNVD
CNVD
added 2022/01/05 12:00 a.m.41 views

Shockwall system authorization issue vulnerability

Sun & Moon Rise Shockwall System is a computer endpoint protection system from Sun & Moon Rise, a Chinese company. A server-side request forgery SSRF attack can be launched against another proxy computer using local registry information, resulting in the execution of arbitrary code to control the...

9CVSS3.7AI score0.00451EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:00 a.m.9 views

The vulnerability of the CAPWAP control protocol implementation in the Cisco IOS XE operating system allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the CAPWAP control protocol implementation in the Cisco IOS XE operating system is related to buffer overflow errors in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

10CVSS8AI score0.02964EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/01/03 10:15 a.m.22 views

CVE-2021-44158

ASUS RT-AX56U Wi-Fi Router is vulnerable to stack-based buffer overflow due to improper validation for httpd parameter length. An authenticated local area network attacker can launch arbitrary code execution to control the system or disrupt service...

8CVSS0.00677EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/03 10:15 a.m.8 views

CVE-2021-45916

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

3.5CVSS5.8AI score0.00302EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/03 10:15 a.m.20 views

Authentication flaw

The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery SSRF attack on another agent computer,...

7.7CVSS9.1AI score0.00451EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2022/01/03 10:15 a.m.20 views

Input validation

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

2.7CVSS4AI score0.00302EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/01/03 12:00 a.m.6 views

Sun & Moon Rise Shockwall system 输入验证错误漏洞

The Sun & Moon Rise Shockwall System is a computer endpoint protection system from Sun & Moon Rise, a Chinese company, that suffers from a security vulnerability that could be exploited to send malicious responses to servers to partially disrupt service...

3.5CVSS5.6AI score0.00302EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/30 8:40 a.m.10 views

CVE-2021-45916

The programming function of Shockwall system has an improper input validation vulnerability. An authenticated attacker within the local area network can send malicious response to the server to disrupt the service partially...

3.5CVSS5.5AI score0.00302EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.13 views

The vulnerability in the sound/usb/mixer.c component of the Linux operating system, which occurs when the operation exceeds the permissible buffer data limits, allows an attacker to access confidential information or cause service failures.

The vulnerability in the sound/usb/mixer.c component of the Linux kernel is related to the operation of pushing data beyond the buffer’s allowed limits. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

7.8CVSS6.5AI score0.00613EPSS
SaveExploits0References44Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:00 a.m.9 views

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE routers cBR-8 allows a attacker to cause a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE routers cBR-8 is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.7CVSS7.2AI score0.01101EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2021/12/22 12:00 a.m.11 views

Fortinet FortiWeb Resource Management Error Vulnerability (CNVD-2024-26508)

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

7.5CVSS7.2AI score0.01119EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/12/21 7:16 a.m.20 views

Improper Input Validation

Apache Parquet is vulnerable to improper input validation. The vulnerability exits in util.java of parquet-mr which allows an attacker to perform service disruption using malicious parquet files...

7.5CVSS4AI score0.03052EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/21 12:00 a.m.11 views

The vulnerability of the UAS emulation device’s hardware emulation by QEMU, related to writing beyond the buffer boundaries, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the UAS emulation device’s hardware emulation software, QEMU, lies in the lack of flow number verification. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and even cause service failures...

7.4CVSS6.8AI score0.00566EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/21 12:00 a.m.11 views

The vulnerability of the VIRTIO_GPU_CMD_GET_CAPSET command in the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the VIRTIOGPUCMDGETCAPSET command in the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.2CVSS6.7AI score0.00463EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/21 12:00 a.m.14 views

The vulnerability of the RGW component of the Ceph storage system, which is related to insufficient validation of input data, allows a attacker to trigger a service failure.

The vulnerability of the RGW component of the Ceph storage system is related to incorrect processing of URL addresses that end with two slashes. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.3CVSS6.7AI score0.02425EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:00 a.m.11 views

The vulnerability of the SwiftShader library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the SwiftShader library in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure through a specially created web page...

10CVSS8.2AI score0.0075EPSS
SaveExploits0References10Affected Software6
Rows per page
Query Builder