Lucene search
+L

11743 matches found

Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.11 views

PT-2023-6993 · Siemens · Scalance M826-2 Shdsl-Router +16

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM RM1224 LTE4G EU versions V8.0 RUGGEDCOM RM1224 LTE4G NAM versions V8.0 SCALANCE M804PB versions V8.0 SCALANCE M812-1 ADSL-Router versions V8.0 SCALANCE M816-1 ADSL-Router versions V8.0 SCALANCE M826-2 SHDSL-Router versions V8.0...

5.9CVSS6.6AI score0.00879EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.11 views

The vulnerability of the setup_group function in the elf.c component of the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the setupgroup function in the elf.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

7.8CVSS7.1AI score0.02674EPSS
SaveExploits0References5Affected Software2
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.4 views

PT-2023-6950 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Windows operating system kernel. This can allow an attacker to elevate their privileges. The...

7CVSS9.2AI score0.00363EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.8 views

PT-2023-6933 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to cryptographic problems with In-Meeting Chat for some Zoom clients, which may allow a privileged user to disclose information via network access. This could potentially...

6.8CVSS6.4AI score0.00619EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.11 views

The vulnerability of the libraw_cxx.cpp component in the LibRaw image processing library allows a intruder to trigger a service failure.

The vulnerability of the librawcxx.cpp component in the LibRaw image processing library is related to pointer dereferencing errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS6.5AI score0.02842EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.12 views

The vulnerability of the res_query function in the GNU C Library’s system library allows a attacker to cause a service failure.

The vulnerability of the resquery function in the GNU C Library’s system library is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.06219EPSS
SaveExploits0References13Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.10 views

The vulnerability of the dwarf2.c component in the GNU Binutils development environment allows a hacker to trigger a service failure.

The vulnerability of the dwarf2.c component in the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to trigger a service failure using a specially created ELF file...

7.8CVSS6.8AI score0.02017EPSS
SaveExploits0References7Affected Software2
Code423n4
Code423n4
added 2023/11/13 12:0 a.m.10 views

AuctionDemo opens itself several DoS attack vectors

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. Proof of Concept The auctionDemo.auctionInfoData map holds important info on auctions, and hold this info per tokenId. Needless to say, for many auctions that may become popular and/or long running, the...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/11/13 12:0 a.m.13 views

The vulnerabilities of the `setsockopt` and `getsockopt` functions in the Linux operating system’s kernel allow attackers to influence the confidentiality, integrity, or accessibility of information.

The vulnerability of the setsockopt and getsockopt functions in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, or accessibility of...

7.1CVSS6.5AI score0.00449EPSS
SaveExploits0References24Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.10 views

The vulnerability of the get_register function in the Vim text editor allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the getregister function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

7.8CVSS6.6AI score0.00467EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.17 views

The vulnerability of the jcopy_sample_rows() function in the Libjpeg-turbo image processing library allows a hacker to cause a service failure.

The vulnerability of the jcopysamplerows function in the Libjpeg-turbo image processing library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created file...

5.5CVSS6.6AI score0.00274EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.11 views

The vulnerability of Intel Microcode processors lies in the possibility of unauthorized errors causing malfunctions in backup equipment. This allows attackers to gain access to confidential data, compromise its integrity, and even cause service failures.

The vulnerability of Intel Microcode processors lies in the possibility that backup equipment may malfunction due to unauthorized introduction of errors. Exploiting this vulnerability can allow a perpetrator to gain access to confidential data, compromise its integrity, and even cause service...

6.7CVSS6.6AI score0.00281EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.10 views

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows a hacker to trigger a service failure.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00171EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:0 a.m.9 views

The vulnerability of the WAF engine for Apache ModSecurity, related to security configuration errors, allows attackers to bypass existing network firewall rules.

The vulnerability of the WAF engine for Apache ModSecurity is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing network firewall rules...

9.4CVSS6.8AI score0.00906EPSS
SaveExploits0References7Affected Software6
Ubuntu
Ubuntu
added 2023/11/08 1:47 p.m.106 views

USN-6474-1: xrdp vulnerabilities

It was discovered that xrdp incorrectly handled validation of client-supplied data, which could lead to out-of-bounds reads. An attacker could possibly use this issue to crash the program or extract sensitive information. CVE-2022-23479, CVE-2022-23481, CVE-2022-23483, CVE-2023-42822 It was...

9.8CVSS7.1AI score0.00892EPSS
SaveExploits0
OSV
OSV
added 2023/11/08 10:15 a.m.9 views

CVE-2023-46772

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

7.5CVSS5.8AI score0.00514EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/08 10:15 a.m.26 views

CVE-2023-46772

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

7.5CVSS0.00514EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/08 9:6 a.m.73 views

CVE-2023-46772

CVE-2023-46772 describes a vulnerability in the QMI service module where parameters are out of the value range. The resulting behavior can cause errors when reading file data. Connected sources corroborate the same root cause and describe the impact as reading-file-data errors, with several refer...

7.5CVSS7.4AI score0.00514EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/11/08 3:15 a.m.7 views

CVE-2023-46770

Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on users' mobile phones...

7.5CVSS5.8AI score0.00514EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/08 3:15 a.m.32 views

CVE-2023-46770

Out-of-bounds vulnerability in the sensor module. Successful exploitation of this vulnerability may cause mistouch prevention errors on users' mobile phones...

7.5CVSS0.00514EPSS
SaveExploits0References2
Rows per page
Query Builder