Lucene search
+L

3908 matches found

BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.19 views

The vulnerability of the Node.js software platform, related to the presence of localhost6 in the white list, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node.js software platform is related to the presence of localhost6 in the white list. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

7.5CVSS6.9AI score0.32362EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.9 views

The vulnerability of the configuration management system and remote execution of operations, related to the lack of measures to neutralize special elements, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cau...

9.8CVSS7.7AI score0.99585EPSS
SaveExploits4References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.15 views

The vulnerability of the salt-netapi component in the Configuration Management system and remote execution of Salt operations, due to insufficient input data validation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the salt-netapi component in the Configuration Management system and remote Salt execution operations is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and...

9.8CVSS8AI score0.57726EPSS
SaveExploits2References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/01 12:0 a.m.13 views

The vulnerability of the WebReports server lies in the improper limitation of XML links to external objects. This allows attackers to disclose protected information or cause service failures.

The vulnerability of the WebReports report server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

9CVSS7.6AI score0.01805EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/01 12:0 a.m.9 views

The vulnerability of the slapd process in the OpenLDAP package, which allows a hacker to trigger a service failure.

The vulnerability of the slapd process in the OpenLDAP package is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

7.8CVSS7.2AI score0.02183EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.12 views

The vulnerability of the unix_stream_recvmsg function in Linux operating system kernels, which allows a hacker to cause a service failure

The vulnerability of the unixstreamrecvmsg function in Linux operating system kernels is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.4AI score0.00339EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.18 views

Vulnerability of the check_output function in output.c. SUID in a isolated programming environment. Firejail, due to the lack of measures to neutralize special elements, allows a violator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the checkoutput function of output.c, with the SUID attribute and a isolated programming environment like Firejail, is related to the lack of measures to neutralize special elements. Exploiting this vulnerability can allow an attacker to access confidential data, compromise i...

7.8CVSS7.4AI score0.01464EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.10 views

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to security flaws in service data protection. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.5CVSS7.1AI score0.03355EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.14 views

The vulnerability of the DNS server service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the DNS server service for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.1AI score0.05741EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.11 views

The vulnerability of the Sympa mailing list manager, related to a bug in the resource consumption monitoring mechanism, allows a violator to trigger a service failure.

The vulnerability of the Sympa mailing list manager is related to the improper handling of incorrect parameters. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS6.8AI score0.02915EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.9 views

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism, related to integer overflow of the value, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Squid proxy server’s nonce digest authentication mechanism is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS6.7AI score0.27246EPSS
SaveExploits0References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.11 views

The vulnerability of the DNS server service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the DNS server service in Windows operating systems is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to cause service failures...

9.8CVSS8.2AI score0.19274EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.10 views

The vulnerability of the Samba network interaction software package from AD DC arises from insufficient input data validation, allowing attackers to trigger service failures.

The vulnerability of the Samba network interaction software suite in AD DC is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.03539EPSS
SaveExploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.5 views

The vulnerability of Google Chrome’s SwiftShader component relates to the issue of allowing operations to exceed the permissible buffer data size. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s SwiftShader component relates to the execution of operations that exceed the permissible buffer data size. Exploiting this vulnerability can allow remote attackers to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS8.2AI score0.03291EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.11 views

The vulnerability of the DCHP server configuration of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 network devices allows a hacker to cause a service failure.

The vulnerability of the DCHP configuration of Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 networking devices relates to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to trigger...

7.1CVSS7.1AI score0.00604EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.16 views

The vulnerability of the GPU Display Driver relates to the insecure handling of privileges, allowing an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the GPU Display Driver is related to improper access to outdated APIs in the driver nvlddmkm.sys for DxgkDdiEscape or IOCTL. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.2CVSS7.1AI score0.00452EPSS
SaveExploits0References5Affected Software2
OpenVAS
OpenVAS
added 2021/03/27 12:0 a.m.32 views

Fedora: Security Advisory for busybox (FEDORA-2021-e82915eee1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.02719EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/25 7:15 p.m.5 views

ALPINE-CVE-2021-20214

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash...

7.5CVSS6.5AI score0.02024EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/25 7:15 p.m.1 views

DEBIAN-CVE-2021-20214

A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash...

7.5CVSS7.2AI score0.02024EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.12 views

The vulnerability of the Google Chrome browser’s media component relates to the use of memory after it is freed. This allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s media component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.29292EPSS
SaveExploits0References8Affected Software5
Rows per page
Query Builder