Lucene search
+L

3908 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.11 views

The vulnerability of the HTTP/2 module in the Apache Traffic Server, which exists due to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.1AI score0.02447EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.13 views

The vulnerability of Adobe After Effects’ video and dynamic image editing software arises from the use of a null pointer, which allows an attacker to trigger a service failure.

The vulnerability of Adobe After Effects software for video and dynamic image editing is caused by a pointer issue. Exploiting this vulnerability can allow an attacker to cause service failures...

5CVSS6.6AI score0.01374EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.11 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the handling of data beyond the buffer in memory. This allows attackers to exploit the protected information or cause system failures.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

8.1CVSS7.2AI score0.03021EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/27 12:0 a.m.9 views

The vulnerability of the `gb18030_mbc_enc_len` function in the Oniguruma regular expression library, which relates to reading data beyond the allowed buffer limits, allows attackers to cause service failures.

The vulnerability of the gb18030mbcenclen function in the Oniguruma regular expression library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.8AI score0.04052EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.11 views

The vulnerability of the cPython programming language, related to deficiencies in HTTP request processing, allows attackers to compromise data integrity or cause service failures.

The vulnerability of the cPython programming language in Python is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to compromise data integrity or cause service failures...

5.9CVSS7.1AI score0.35963EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.47 views

The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading beyond the permissible buffer size, allows an attacker to access confidential information or cause service failures.

The vulnerability of the d2alawarray function in the SI libsndfile library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential information or cause service failures...

8.1CVSS6.9AI score0.02043EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.9 views

The vulnerability of the Apache Ant build automation tool, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Apache Ant build automation tool is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS6.3AI score0.02642EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.13 views

The vulnerability of zip file compression software lies in the use of memory after it is freed, allowing an attacker to access confidential information or cause service failures.

The vulnerability of zip file compression software relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...

9.8CVSS7.7AI score0.03977EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.15 views

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, stems from the lack of zero-division checking. This allows an attacker to trigger a service failure.

The vulnerability of the coders/jp2.c file, a program set for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

6.5CVSS6.7AI score0.01117EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.17 views

The vulnerability of the DBI interpreter component in the Perl programming language, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the DBI interpreter for the Perl programming language is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

7.1CVSS7.3AI score0.00607EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.8 views

The vulnerability of the demon for controlling Libvirt virtualization, related to the repeated release of memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the demon for controlling Libvirt virtualization relates to the repeated release of memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

6.7CVSS6.8AI score0.00529EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.11 views

The vulnerability of the RPL routing protocol implementation in Contiki-NG operating systems for IoT devices allows a attacker to cause service failures.

The vulnerability of the RPL routing protocol implementation in Contiki-NG IoT devices is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

8.6CVSS7.7AI score0.00993EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.10 views

The vulnerability of the OverlayFS component arises from the Firejail jailer’s SUID status. This vulnerability stems from insufficient checks on the state of shared resources. As a result, attackers can gain access to confidential data, compromise its integrity, and even cause service failures.

The vulnerability of the OverlayFS component in Firejail’s SUID mode is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7CVSS7.1AI score0.00444EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.16 views

The vulnerability of the PDFium component in Google Chrome browsers, related to the use of an uninitialized resource, allows attackers to access confidential information or cause service failures.

The vulnerability of the PDFium component in the Google Chrome browser is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information or cause service failures...

8.8CVSS7.6AI score0.01501EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.15 views

The vulnerability of the Network Internals component of the Google Chrome browser, related to the use of memory after it is freed, allows attackers to access confidential information or cause service failures.

The vulnerability of the Network Internals component in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential information or cause service failures...

8.8CVSS7.6AI score0.01414EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.13 views

The vulnerability of the ZeroMQ messaging library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the ZeroMQ messaging library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS7.1AI score0.01073EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.11 views

The vulnerability of the Ceph storage system, related to pointer swapping errors, allows a attacker to cause a service failure.

The vulnerability of the Ceph storage system is related to errors during the POST request with an invalid XML tag. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.02654EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:0 a.m.29 views

The vulnerability of several functions in libscp_v0.c allows an attacker to access confidential information or cause service failures, due to buffer overflows in the stack of the RDP server xrdp.

The vulnerability of several functions in libscpv0.c affects the RDP server xrdp. It involves buffer overflow in the data stack buffer. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

7.8CVSS7.5AI score0.02404EPSS
SaveExploits0References8Affected Software2
Cvelist
Cvelist
added 2021/07/13 8:55 p.m.31 views

CVE-2021-32755 Certificate pinning is not enforced on the web socket connection

Wire is a collaboration platform. wire-ios-transport handles authentication of requests, network failures, and retries for the iOS implementation of Wire. In the 3.82 version of the iOS application, a new web socket implementation was introduced for users running iOS 13 or higher. This new...

5.4CVSS5.7AI score0.00314EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.9 views

The vulnerability of the re-hashing function for utility functions in E2fsprogs, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the re-hashing function in the E2fsprogs utility library for working with file systems lies in the fact that the operation exceeds the permissible buffer data size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and...

6.7CVSS7.1AI score0.01025EPSS
SaveExploits1References10Affected Software3
Rows per page
Query Builder