Lucene search
+L

11727 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.13 views

The vulnerability of the `object_custom` function in the PHP programming language allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the objectcustom function located in ext/standard/varunserializer.c in the PHP interpreter is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

7.5CVSS8AI score0.28862EPSS
SaveExploits1References27Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.12 views

The vulnerability of the OCI (Open Container Initiative) Hotdog function, related to access control errors, allows attackers to increase their privileges.

The vulnerability of the OCI Open Container Initiative Hotdog function is related to access control errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.8CVSS7.8AI score0.00385EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.11 views

The vulnerability of the ext/shmop/shmop.c component of the PHP programming language interpreter allows a attacker to cause a service failure or disclose protected information.

The vulnerability of the ext/shmop/shmop.c component of the PHP programming language interpreter is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures or disclose sensitive information...

7.5CVSS7.9AI score0.17881EPSS
SaveExploits5References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.9 views

The vulnerability of the History API component in the Cisco SD-WAN vManage network management system allows a attacker to disclose protected information.

The vulnerability of the History API component in the Cisco SD-WAN vManage network management system is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

6.8CVSS6.1AI score0.00898EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/04/25 2:39 p.m.7 views

SUSE-RU-2022:1384-1 Recommended update for Salt

This update fixes the following issues: salt: - Clear network interfaces cache on grains request bsc1196050 - Handle old qemu-img not supporting -U parameter bsc1195221 - Restrict 'state.orchestratesingle' to pass a pillar value if it exists bsc1194632 - Fix sparse disk errors on Python 2 virt...

8.8CVSS8.4AI score0.01325EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.13 views

The vulnerability of Adobe Illustrator’s graphic editor, related to pointer naming errors, allows a hacker to trigger a service failure.

The vulnerability of the Adobe Illustrator graphic editor is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.01741EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.9 views

The vulnerability of the _zip_cdir_new function in the PHP programming language allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the zipcdirnew function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

7.5CVSS7.1AI score0.27692EPSS
SaveExploits1References22Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.9 views

The vulnerability of the phar_parse_tarfile function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the pharparsetarfile function ext/phar/tar.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

5CVSS7.4AI score0.21398EPSS
SaveExploits1References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.10 views

The vulnerability in the implementation of the DTLS protocol by the OpenSSL library, which allows a hacker to cause a service failure.

The vulnerability of the DTLS protocol implementation in the OpenSSL library is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.4AI score0.26559EPSS
SaveExploits1References24Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.12 views

The vulnerability of Perl interpreter modules, related to privilege management errors, allows attackers to execute arbitrary code.

The vulnerability of modules from the @INC directory in the Perl interpreter is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code using a Trojan virus program...

7.8CVSS7.6AI score0.00779EPSS
SaveExploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.10 views

The vulnerability of the ftp_genlist function in the PHP programming language allows a hacker to execute arbitrary code.

The vulnerability of the ftpgenlist function ext/ftp/ftp.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS7.9AI score0.20837EPSS
SaveExploits1References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/25 12:0 a.m.12 views

The vulnerability of the `php_raw_url_encode` function in the PHP programming language allows attackers to trigger a denial-of-service attack.

The vulnerability of the phprawurlencode function in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures...

7.8CVSS7.4AI score0.05719EPSS
SaveExploits1References19Affected Software4
OSV
OSV
added 2022/04/24 9:22 p.m.23 views

GSD-2022-1001546 net: asix: add proper error handling of usb read errors

net: asix: add proper error handling of usb read errors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

7.1AI score
SaveExploits0
OSV
OSV
added 2022/04/24 9:15 p.m.11 views

GSD-2022-1001471 btrfs: do not double complete bio on errors during compressed reads

btrfs: do not double complete bio on errors during compressed reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/04/24 9:15 p.m.12 views

GSD-2022-1001470 btrfs: handle csum lookup errors properly on reads

btrfs: handle csum lookup errors properly on reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

7.2AI score
SaveExploits0
OSV
OSV
added 2022/04/24 8:48 p.m.9 views

GSD-2022-1001146 btrfs: handle csum lookup errors properly on reads

btrfs: handle csum lookup errors properly on reads This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

7.2AI score
SaveExploits0
Citrix
Citrix
added 2022/04/22 12:0 a.m.9 views

Cannot start app **** - Issue when Storefront STA's configure as https.

Issue accessing the url of storefront store through Citrix ADC. Users are able to access storefront, but when users try to open any application it gives an error: Cannot start app However, when accessing the storefront url internally using store URL, all the applications open without problems,...

7AI score
SaveExploits0
Code423n4
Code423n4
added 2022/04/20 12:0 a.m.6 views

Initial StakedCitadel deposit with amount=1 wei causes very expensive share price leading to precision errors and loss of funds

Lines of code Vulnerability details Impact The first depositor into StakedCitadel is able to maliciously manipulate the share price by depositing the lowest possible amount 1 wei and then artificially blowing up the StakedCitadel Citadel token balance. Following depositors will loose their...

6.7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/04/20 12:0 a.m.9 views

PT-2022-2568 · Fanuc · Fanuc Roboguide

Name of the Vulnerable Software and Affected Versions: FANUC ROBOGUIDE affected versions not specified Description: The issue is related to errors in assigning permissions for files, which can allow an attacker to gain privilege escalation. It is also associated with misconfigured binaries,...

6.6CVSS5.7AI score0.00159EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.19 views

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus relates to errors in processing TCP packet headers. This vulnerability allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of microprogrammed software for controllers CAPITAL VSTAR, APOGEE MBC, APOGEE MEC, APOGEE PXC, TALON TC, and the operating system Nucleus is related to errors in processing the TCP header. Exploiting this vulnerability can allow an attacker to gain access to protected informatio...

9.4CVSS7.7AI score0.0215EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder