Lucene search
+L

3908 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.7 views

Vulnerability of the utils.c:checkmailpath command in the UNIX shell Zsh: This vulnerability involves allowing an operation to exceed the permissible data buffer size. This allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the utils.c:checkmailpath command of the UNIX shell Zsh involves allowing the execution of commands beyond the data buffer’s allowed limits. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.7AI score0.00536EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the readValue method in the ObjectMapper class of the Jackson-databind library arises from the possibility of restoring unreliable data structures in memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the readValue method in the ObjectMapper class of the Jackson-databind library is related to improper validation of the data before it is deserialized. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

9.8CVSS7AI score0.37721EPSS
SaveExploits7References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.12 views

The vulnerability of the KVM virtualization subsystem in the file arch/arm64/kvm/guest.c of the Linux operating system allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the KVM virtualization subsystem in the Linux operating system’s arch/arm64/kvm/guest.c file is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of data and also cause service failures...

7.1CVSS7.1AI score0.0057EPSS
SaveExploits0References33Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability in the implementation of the WebUSB protocol of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebUSB protocol implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.7AI score0.22868EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.8 views

The vulnerability of the setuid function in the UNIX command shell Zsh allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the setuid function in the UNIX command shell Zsh is related to incorrect reallocation of the user ID. Exploitation of this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.00495EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of Google Chrome’s IndexedDB component allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.29292EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability in the implementation of the Google Chrome browser’s external protocol allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s external browser protocol is related to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.8AI score0.01632EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.7 views

The vulnerability of the SMB1 protocol implementation in Samba network communication software lies in the use of memory after it is freed. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SMB1 protocol implementation in Samba networking software lies in the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS7AI score0.09876EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the _krb5_extract_ticket() function in the Samba networking software package arises from a lack of authentication mechanism checks. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the krb5extractticket function in the Samba networking software package is related to the lack of a mechanism for verifying the authenticity of data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause...

8.1CVSS6.7AI score0.05118EPSS
SaveExploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s Blink rendering module is related to a numerical overflow of values. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.7AI score0.01488EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS7.6AI score0.01952EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the Zsh shell script interpreter on UNIX systems arises from the lack of input validation mechanisms. This allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the Shebang handler in the UNIX command shell Zsh is related to the shortening of the Shebang line that exceeds 64 characters. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.8CVSS6.9AI score0.02723EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability of the Gem Name Handler component in the Bundler’s dependency management tool for Ruby applications relates to a lack of mechanisms for managing code generation. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Gem Name Handler component in the Bundler dependency management tool for Ruby applications relates to improper handling of gems with identical names. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause...

9.8CVSS7.7AI score0.08482EPSS
SaveExploits1References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of the Samba networking communication package arises from the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Samba networking communication package is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

7.5CVSS7AI score0.11181EPSS
SaveExploits4References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.10 views

The vulnerability of Google Chrome browser developer tools allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browser developer tools is related to the operation of operations that go beyond the allowed data buffer limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS7.9AI score0.01493EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.26 views

The vulnerability in the directory math/i386/ of the C language library in Linux-based operating systems allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the math/i386/ library directory in the C language for Linux operating systems is related to a imbalance in the configuration of the floating-point stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and...

9.8CVSS7.4AI score0.02704EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.12 views

The vulnerability of the WebXR component in Google Chrome allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s WebXR component is related to the use of a memory area after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.29292EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.6 views

The vulnerability of the Kerberos protocol implementation in Samba’s network interaction software packages arises from a lack of privilege control mechanisms and access management tools. This allows attackers to induce service failures.

The vulnerability of the Kerberos protocol in Samba network communication software lies in the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows a malicious actor to cause service failures...

6.5CVSS6.3AI score0.06585EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.11 views

The vulnerability of the WebRTC technology implemented in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the execution of operations within the data buffer’s allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause...

6.8CVSS7.9AI score0.01913EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.9 views

The vulnerability of the WebRTC technology implementation in Google Chrome, Firefox, Firefox-ESR, and Thunderbird programs allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebRTC technology implementation in Google Chrome, Firefox, Firefox-ESR, and Thunderbird lies in the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failure...

7.3CVSS7.2AI score0.01725EPSS
SaveExploits0References20Affected Software8
Rows per page
Query Builder