Lucene search
+L

3908 matches found

Positive Technologies
Positive Technologies
added 2024/09/16 12:0 a.m.9 views

PT-2024-18146 · Unknown · Micard Plus Ci +1

Name of the Vulnerable Software and Affected Versions: MiCard PLUS Ci and MiCard PLUS BLE reader products affected versions not specified Description: The issue is related to a firmware fault in the MiCard PLUS Ci and MiCard PLUS BLE reader products, which may cause characters to be randomly...

5.3CVSS7AI score0.00204EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.29 views

The vulnerability of the libavfilter/vfcodecview.c component of the FFmpeg multimedia library involves an operation that occurs outside the buffer boundaries in memory. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libavfilter/vfcodecview.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

7.8CVSS7.1AI score0.00347EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.10 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.015EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.17 views

The vulnerability of the start_decoder component in the C/C++ Libstb library, related to integer overflow, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the startdecoder component in the C/C++ Libstb library is related to integer overflow. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

7.8CVSS7.2AI score0.00523EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.7 views

The vulnerability of the QEMU hardware emulation software’s “info” command, related to uncontrolled resource consumption, allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QEMU hardware emulation software’s “info” command is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a hacker to access confidential data, compromise its integrity, and even cause service failures through the use of a specially...

7.8CVSS7.2AI score0.00336EPSS
SaveExploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.7 views

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to inheritance permissions errors, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to errors with inherited permissions. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

8.1CVSS7AI score0.00603EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.11 views

The vulnerability of C/C++ Libstb libraries, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the C/C++ Libstb library relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures through a specially created file...

7.8CVSS7AI score0.00759EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.8 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.3AI score0.00974EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.9 views

The vulnerability of the `cv::HdrDecoder::checkSignature` function in the `imgcodecs/src/grfmt_hdr.cpp` component of the OpenCV computer vision library, related to reading beyond the allowed data buffer boundaries, allows a malicious actor to cause service failures.

The vulnerability of the cv::HdrDecoder::checkSignature function in the imgcodecs/src/grfmthdr.cpp component of the OpenCV computer vision library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to cause service failures...

7.5CVSS7.4AI score0.02313EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.18 views

The vulnerability in the `arch/s390/boot/decompressor.c` component of the Linux operating system, related to copying buffers without checking the input data, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the arch/s390/boot/decompressor.c component of the Linux operating system involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.1AI score
SaveExploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.13 views

The vulnerability of the snapd package management tool, related to improper validation of input data, allows a malicious actor to trigger a service failure.

The vulnerability of the snapd package management tool is related to improper file type checking during the extraction of snap packages. Exploiting this vulnerability can allow an attacker to cause service failures...

6.6CVSS5.4AI score0.00212EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.10 views

The vulnerability in the `arch/x86/kernel/fpu/xstate.c` component of the Linux operating system, related to the use of memory after it is freed, allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the arch/x86/kernel/fpu/xstate.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.4AI score0.00233EPSS
SaveExploits0References24Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.13 views

The vulnerability of the universal monitoring system Zabbix, related to the allocation of unlimited memory, allows a intruder to trigger a service failure.

The vulnerability of the Zabbix universal monitoring system is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.1CVSS5.8AI score0.01156EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.13 views

The vulnerability of the universal monitoring system Zabbix, related to the distribution of resources without any restrictions or regulations, allows a intruder to trigger a service failure.

The vulnerability of the Zabbix universal monitoring system is related to the use of excessive resources without proper restrictions or controls. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS5.4AI score0.00937EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.8 views

The vulnerability of the GIMP graphic editor arises from the possibility of an operation exceeding the buffer boundaries in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GIMP graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures due to the malicious file...

7.8CVSS7.5AI score0.61427EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.12 views

The vulnerability of the `createNewClientSessionWithId()` function in the `GenericMediaServer` component of the streaming multimedia Live555 library lies in its reliance on memory management after it is freed. This vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the createNewClientSessionWithId function in the GenericMediaServer component of the streaming multimedia Live555 library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise i...

9.8CVSS7.7AI score0.01716EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.7 views

The vulnerability of the Parse function in the Go programming language, which allows a hacker to trigger a service failure

The vulnerability of the Parse function in the Go programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS6.8AI score0.01046EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.9 views

The vulnerability of the decode_deliver() function in the OFono mobile communication interface, related to the issue of operations going beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decodedeliver function in the OFono mobile communication interface is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...

8.1CVSS7.9AI score0.0124EPSS
SaveExploits1References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.12 views

The vulnerability of the miEnumattr() function in the fs/ntfs3 component of the Linux operating system, which allows for buffer copying without checking input data. This vulnerability enables an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the miEnumattr function in the fs/ntfs3 component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...

8.4CVSS6.5AI score0.00281EPSS
SaveExploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.14 views

The vulnerability of the Samba networking communication package and the ldb database, related to uncontrolled resource consumption, allows a hacker to cause service failures.

The vulnerability of the Samba networking communication package and the ldb database is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.8CVSS6.7AI score0.01725EPSS
SaveExploits0References14Affected Software4
Rows per page
Query Builder