Lucene search
+L

3908 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.17 views

The vulnerability of the Python ECDSA cryptographic library, related to insufficient processing of exceptional states, allows a perpetrator to trigger a service failure.

The vulnerability of the Python ECDSA cryptographic library involves simultaneous operations using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow a remote attacker to cause service failures...

3.6CVSS6.5AI score0.0051EPSS
SaveExploits0References16Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.13 views

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor allows a hacker to gain access to confidential data after it is released. This enables the hacker to compromise the integrity of those data and cause service failures.

The vulnerability of the coders/mat.c function in the ImageMagick console graphics editor involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS6.7AI score0.04104EPSS
SaveExploits1References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.17 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s V8 browser kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.5AI score0.00879EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.11 views

The vulnerability of the component responsible for checking the names of submodules in the Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the component responsible for checking the names of sub-modules in the distributed version control system Git is related to a lack of input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

9.3CVSS7.3AI score0.04426EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:0 a.m.15 views

The vulnerability of the WriteMATLABImage function in the GraphicsMagick graphics editor allows a hacker to trigger a service failure or cause other effects.

The vulnerability of the WriteMATLABImage function coders/mat.c in the GraphicsMagick graphics editor is caused by buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects through the use of a specially crafted image...

8.8CVSS7.4AI score0.02557EPSS
SaveExploits1References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:0 a.m.13 views

The vulnerability of the libseccomp library lies in its lack of access control for certain functions. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the libseccomp library is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

9.8CVSS6.8AI score0.03041EPSS
SaveExploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.15 views

The vulnerability of the Ceph storage system arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Ceph storage system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

6.8CVSS6.7AI score0.02136EPSS
SaveExploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.8 views

The vulnerability of the Git version control system, related to insufficient validation of input data, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git version control system lies in the improper updating of submodules. This occurs because the operation can execute commands found in the .gitmodules file of the malicious repository. Exploiting this vulnerability allows a remote attacker to access confidential data,...

9.3CVSS7.6AI score0.03691EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.6 views

The vulnerability of Firefox browsers, including Firefox ESR, relates to access to resources through incompatible types. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers, including Firefox ESR, is related to a type object absence error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.02489EPSS
SaveExploits0References21Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.13 views

The vulnerabilities of the functions p2m_resolve_translation_fault() and p2m_get_entry() in Xen hypervisors, related to insufficient input data validation, allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerabilities of the functions p2mresolvetranslationfault and p2mgetentry in the Xen hypervisor are related to incorrect checks on the root table. Exploitation of these vulnerabilities can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause servi...

8.8CVSS6.4AI score0.02059EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.10 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures or increase their privileges.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...

8.8CVSS6.8AI score0.00349EPSS
SaveExploits0References8Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.8 views

The vulnerability in browsers Firefox and Firefox ESR arises from copying buffers without checking the size of the input data. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Firefox browsers, including Firefox ESR, is related to a copying error from memory without checking its size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.02455EPSS
SaveExploits1References20Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.14 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures...

6.5CVSS6.7AI score0.0035EPSS
SaveExploits0References7Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.7 views

The vulnerability of the tcp_emu function in software emulation for hardware devices on various platforms, related to writing beyond the buffer boundaries of memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the tcpemu function in software for emulating hardware on various QEMU platforms is related to a memory management error. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS6.6AI score0.03566EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.9 views

The rendering mechanism in the Google Chrome browser for Android is vulnerable due to a lack of input validation mechanisms. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the rendering mechanism in the Google Chrome browser for Android is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data...

9.3CVSS7AI score0.01311EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.10 views

The vulnerability of the hypercall_initialise function in Xen hypervisors, related to insufficient validation of input data, allows a malicious actor to trigger a service failure.

The vulnerability of the hypercallinitialise function in Xen hypervisors is related to incorrect error handling for the invalid format symbol. Exploiting this vulnerability can allow a malicious actor to cause service failures...

6.5CVSS6.5AI score0.02522EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.14 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to memory management after memory is freed, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to a memory management error after the memory is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.3AI score0.01178EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/13 12:0 a.m.13 views

The vulnerability of Xen hypervisors relates to insufficient validation of input data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors relates to the dynamic adaptation of the number of page levels in the IOMMU, in accordance with the size of the address space of the user. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause...

7.2CVSS6.7AI score0.00503EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/13 12:0 a.m.13 views

The vulnerability of the data input mechanism in Blink’s Google Chrome browser lies in the lack of a mechanism for verifying the correctness of entered data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the data input mechanism in Blink’s Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise the...

9.3CVSS7AI score0.01102EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/13 12:0 a.m.7 views

The vulnerability of the BIND DNS server, related to the simultaneous execution using a shared resource with incorrect synchronization, allows attackers to cause service failures.

The vulnerability of the BIND DNS server is related to an error in processing distorted packets, which can lead to out-of-memory situations. Exploiting this vulnerability allows a remote attacker to cause a service failure...

7.1CVSS6.6AI score0.03298EPSS
SaveExploits0References6Affected Software3
Rows per page
Query Builder