Lucene search
+L

3919 matches found

OSV
OSV
added 2021/12/19 7:44 p.m.25 views

GSD-2021-1002598 btrfs: free exchange changeset on failures

btrfs: free exchange changeset on failures This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.8 by commit...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.9 views

The vulnerability of the Windows operating system arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.02833EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.10 views

The vulnerability of the “New Tab Page” component in Microsoft Edge and Google Chrome browsers allows a perpetrator to influence the accessibility of data or cause service failures.

The vulnerability of the “New Tab Page” component in Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to influence the accessibility of data or cause service failures...

3.1CVSS7AI score0.01299EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.8 views

The vulnerabilities of the TwinCAT OPC UA Server and IPC Diagnostics UA Server stem from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the TwinCAT OPC UA Server and IPC Diagnostics UA Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS5.9AI score0.00955EPSS
SaveExploits0References3Affected Software3
Positive Technologies
Positive Technologies
added 2021/12/14 12:0 a.m.15 views

PT-2021-6876 · Openssl · Openssl

Name of the Vulnerable Software and Affected Versions: OpenSSL version 3.0.0 OpenSSL versions prior to 3.0.1 Description: The issue is related to the mishandling of internal errors by the X509 verify cert function in OpenSSL. This function may return a negative value to indicate an internal error...

7.8CVSS6.4AI score0.50099EPSS
SaveExploits3References28
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.15 views

The vulnerability of the Android EMUI operating system’s shell, which arises due to insufficient validation of input data, allows a hacker to disclose protected information or cause service failures.

The vulnerability of the Android EMUI operating system’s shell exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

10CVSS7.7AI score0.00741EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.9 views

The vulnerability of the HarmonyOS operating system’s kernel arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.7AI score0.00774EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.10 views

The vulnerability of the TCP/IP protocol implementation in the Microsoft Windows operating system allows a perpetrator to cause a service failure.

The vulnerability of the TCP/IP protocol implementation in the Microsoft Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted input data to the application...

7.8CVSS7.2AI score0.03253EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.7 views

The vulnerability of UniFi switch microprogramming software, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the microprogramming software of UniFi switches is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

6.5CVSS6.6AI score0.00369EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.11 views

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) relates to uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller and Citrix Gateway access control systems formerly known as Citrix NetScaler Gateway is related to uncontrolled resource consumption. Exploiting this vulnerability c...

7.8CVSS7.2AI score0.00894EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.21 views

The vulnerability of the HarmonyOS operating system’s kernel arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.7AI score0.00752EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.7 views

The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller) and Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway) relates to uncontrolled resource consumption, allowing attackers to cause service failures.

The vulnerability of Citrix ADC application delivery controllers formerly known as Citrix NetScaler Application Delivery Controller, as well as the Citrix Gateway access control system formerly known as Citrix NetScaler Gateway, is related to an uncontrolled resource consumption. Exploiting this...

7.8CVSS7.3AI score0.0089EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.7 views

The vulnerability of the rdata_copy function in the Unbound DNS server allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the rdatacopy function in the Unbound DNS server relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.02037EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.8 views

The vulnerability in the socket implementation of the Microsoft Windows operating system allows a hacker to cause a service failure. [source-iocs-preserved const=AF_UNIX]

The vulnerability of the socket implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, working remotely, to cause service failures by sending specially crafted input data to the application...

7.8CVSS7.2AI score0.03253EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.12 views

The vulnerability of the FreeRDP remote desktop protocol lies in the reading beyond the permissible buffer data limit. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the FreeRDP remote desktop protocol lies in the reading of data from the buffer beyond its allowable limits. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

6.6CVSS7.4AI score0.01944EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.11 views

The vulnerability of the dname_pkt_copy function in the DNS server Unbound, allowing a hacker to cause a service failure

The vulnerability of the dnamepktcopy function in the Unbound DNS server is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.02128EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.5 views

The vulnerability of the ub_packed_rrset_key function in the Unbound DNS server allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ubpackedrrsetkey function in the Unbound DNS server is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.8AI score0.02037EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.9 views

The vulnerability of the Windows Hyper-V component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the Windows Hyper-V component of the operating system exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by transmitting specially crafted input data to the application...

7.5CVSS6.9AI score0.03529EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.13 views

The vulnerability of the dynamic configuration server’s RPC ports, RPCbind, arises from the unlimited distribution of resources, allowing attackers to cause service failures.

The vulnerability of the dynamic configuration server for RPC ports, RPCbind, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.4AI score0.8123EPSS
SaveExploits5References18Affected Software11
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.11 views

The vulnerability of Juniper Networks’ Junos OS routers of the MX series lies in insufficient checking of unusual or exceptional states, allowing attackers to trigger a service failure.

The vulnerability of Juniper Networks’ Junos OS routers of the MX series is related to insufficient checking of unusual or exceptional states during packet processing on MS-MPC/MS-MIC. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.2AI score0.0102EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder