Lucene search
+L

8276 matches found

Vulnrichment
Vulnrichment
added 2021/10/27 6:56 p.m.13 views

CVE-2021-34793 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service DoS vulnerability. This...

8.6CVSS7AI score0.0067EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/27 4:00 p.m.5 views

CVE-2021-34793

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service DoS vulnerability. This...

8.6CVSS7.2AI score0.0067EPSS
SaveExploits0References2
Cisco
Cisco
added 2021/10/27 4:00 p.m.109 views

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service DoS vulnerability. This...

8.6CVSS8.4AI score0.0067EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/27 1:15 a.m.10 views

CVE-2021-37122

There is a use-after-free UAF vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. Successful exploitation may cause the service abnormal. Affected product versions include:CloudEngine 12800 V200R005C10SPC800,V200R019C00SPC800;CloudEngine 5800...

6.5CVSS5.8AI score0.00268EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/27 12:36 a.m.82 views

CVE-2021-37122

CVE-2021-37122 is a confirmed use-after-free (UAF) vulnerability disclosed in Huawei CloudEngine products. Affected models include CloudEngine 12800 (V200R005C10SPC800, V200R019C00SPC800), 5800 (V200R005C10SPC800, V200R019C00SPC800), 6800 (V200R005C10SPC800, V200R005C20SPC800, V200R019C00SPC800),...

6.5CVSS6.3AI score0.00268EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.11 views

The vulnerability of the flatview_read_continue() module of the QEMU hardware emulation software lies in the ability to write beyond the buffer boundaries. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the flatviewreadcontinue module of the QEMU hardware emulation software is related to improper handling of write operations in the case of SDHCBLKSIZE. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

5CVSS6.6AI score0.00638EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.9 views

The vulnerability of the Notifications component in the Google Chrome web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome web browser’s Notifications component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a special...

8.8CVSS7.6AI score0.01234EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability of the user interface of Google Chrome’s web UI, related to the use of memory after it is released, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the user interface of Google Chrome’s web UI is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created HTML...

8.8CVSS7.6AI score0.00962EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability of the MPLS Operation, Administration, and Maintenance (OAM) function of the Cisco NX-OS operating system allows a attacker to cause maintenance failures.

The vulnerability of the MPLS Operation, Administration, and Maintenance OAM function in the Cisco NX-OS operating system is related to the lack of checks on buffer length and reading beyond the memory boundary. Exploiting this vulnerability can allow a malicious actor to cause service...

8.6CVSS7.8AI score0.01316EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability in the Google Chrome web browser, related to the use of memory after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created HTML page...

8.8CVSS7.6AI score0.01201EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability of the Autofill component in the Google Chrome web browser, related to the use of memory after it is freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Autofill component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially creat...

8.8CVSS7.6AI score0.01107EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability of the TiffDecode.c component in the Pillow image processing library, related to out-of-buffer writing, allows a hacker to cause a service failure.

The vulnerability of the TiffDecode.c component in the Pillow image processing library is related to the lack of memory checks during reading operations. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS6.8AI score0.02353EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library, which involves reading data beyond the permissible buffer limits, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Nef polygon function in the CGAL computational geometry algorithm library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause servi...

10CVSS7.9AI score0.02878EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.15 views

The vulnerability of the WebRTC component in the Google Chrome web browser, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC component in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions through a specially create...

8.8CVSS7.6AI score0.01102EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.14 views

The vulnerability of the `build_diff_map` function in the Ffmpeg library, related to buffer overflows in memory, allows a hacker to trigger a service denial.

The vulnerability of the builddiffmap function in the Ffmpeg library is related to buffer overflow in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

6.5CVSS6.8AI score0.01516EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability of Google Chrome’s JavaScript V8 engine, related to type conversion errors, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s JavaScript V8 engine is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created HTML page...

8.8CVSS7.6AI score0.02517EPSS
SaveExploits1References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability of the Bookmarks component in the Google Chrome web browser, related to memory usage after it is freed, allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Bookmarks component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

8.8CVSS7.6AI score0.01004EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.9 views

The vulnerability of the Browser UI component in the Google Chrome web browser, related to memory usage after it is released, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Browser UI component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service interruptions...

6.8CVSS6.3AI score0.01254EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.11 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser, which involves reading data beyond the allowed buffer limit, allows attackers to access confidential data and cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a remote attacker to access confidential data and also cause service interruptions through a specially created HTML page...

8.1CVSS7.8AI score0.01185EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.8 views

The vulnerability of the History component in the Google Chrome web browser, related to writing beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the History component in the Google Chrome web browser is related to writing beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a special...

8.8CVSS7.8AI score0.01343EPSS
SaveExploits1References9Affected Software5
Rows per page
Query Builder