Lucene search
+L

391 matches found

BDU FSTEC
BDU FSTEC
added 2024/06/21 12:00 a.m.14 views

The vulnerability of the PDF.js library is related to access to resources through incompatible types, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the PDF.js library is related to access to resources through incompatible types. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

7.6CVSS8AI score0.7066EPSS
SaveExploits16References22Affected Software14
OSV
OSV
added 2024/06/11 12:24 p.m.15 views

USN-6823-1 mysql-8.0 vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.37 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.10, and Ubuntu 24.04 LTS. In addition to security fixes, the updated packages contain bug...

5.3CVSS7AI score0.01107EPSS
SaveExploits0References15
Debian CVE
Debian CVE
added 2024/05/17 2:01 p.m.54 views

CVE-2023-52665

Removed by vendor...

5.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:00 a.m.12 views

The vulnerability of the getBoundName() function in the JIT-compiler of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to execute arbitrary code.

The vulnerability of the getBoundName function in the JIT-compiler of Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to access to resources through incompatible types during object processing. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.6CVSS7.1AI score0.00627EPSS
SaveExploits0References18Affected Software8
BDU FSTEC
BDU FSTEC
added 2024/05/06 12:00 a.m.14 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious HTML page...

10CVSS8.1AI score0.21401EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/05/01 12:00 a.m.15 views

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to bypass the sandbox protection mechanisms and execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to bypass the sandboxing mechanisms and execute arbitrary code...

10CVSS7.9AI score0.08951EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/04/22 12:00 a.m.9 views

The vulnerability of Windows operating systems’ message queues allows a perpetrator to execute arbitrary code.

The vulnerability of Windows operating systems’ message queues is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.3CVSS8AI score0.00926EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.12 views

PT-2024-2806 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a Remote Procedure Call Runtime Remote Code Execution problem, which is associated with accessing a resource through incompatible types. This can allow a...

9CVSS9.4AI score0.02518EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2024/04/09 12:00 a.m.8 views

PT-2024-2983 · Microsoft · Message Queuing +1

Name of the Vulnerable Software and Affected Versions: Microsoft Message Queuing MSMQ affected versions not specified Description: The issue is related to accessing a resource through incompatible types in the Windows operating system's message queuing component. This can allow an attacker to...

7.3CVSS8.8AI score0.00926EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2024/04/03 12:00 a.m.11 views

The vulnerability of the WebAssembly module in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the WebAssembly module in Google Chrome and Microsoft Edge relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...

10CVSS7.5AI score0.17922EPSS
SaveExploits5References17Affected Software7
VulnCheck KEV
VulnCheck KEV
added 2024/03/24 12:00 a.m.5 views

VulnCheck KEV: CVE-2023-39296

A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network. We have already fixed the...

7.5CVSS7.3AI score0.01564EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/03/08 12:00 a.m.22 views

Fedora: Security Advisory for openjfx8 (FEDORA-2024-129d8ca6fc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9.2AI score0.02578EPSS
SaveExploits3References2
Fedora
Fedora
added 2024/03/07 10:33 p.m.23 views

[SECURITY] Fedora 40 Update: openjfx8-8.0.202-40.b07.fc40

JavaFX/OpenJFX is a set of graphics and media APIs that enables Java developers to design, create, test, debug, and deploy rich client applications that operate consistently across diverse platforms. The media and web module have been removed due to missing dependencies. The swt module has been...

8.8CVSS7AI score0.02578EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2024/02/08 12:15 p.m.7 views

CVE-2023-6517

Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. MİA-MED allows Collect Data as Provided by Users. This issue affects MİA-MED: before 1.0.7...

7.5CVSS7.1AI score0.00477EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/08 12:15 p.m.10 views

CVE-2023-6517

Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. MİA-MED allows Collect Data as Provided by Users.This issue affects MİA-MED: before 1.0.7...

7.5CVSS5.8AI score0.00477EPSS
SaveExploits0References1
NVD
NVD
added 2024/02/08 12:15 p.m.36 views

CVE-2023-6517

Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. MİA-MED allows Collect Data as Provided by Users. This issue affects MİA-MED: before 1.0.7...

7.5CVSS7.5AI score0.00477EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/02/08 11:41 a.m.19 views

CVE-2023-6517 Seeing the SMS Verification Code in Mia Technology's Mia-Med

Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc. MİA-MED allows Collect Data as Provided by Users. This issue affects MİA-MED: before 1.0.7...

7.5CVSS7.1AI score0.00477EPSS
SaveExploits0References2
OSV
OSV
added 2024/02/02 5:03 a.m.3 views

SUSE-SU-2024:0312-1 Security update for slurm_23_02

This update for slurm2302 fixes the following issues: Update to slurm 23.02.6: Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. bsc1218046 - CVE-2023-49935: Prevent message hash bypass in slurmd which can allow an attacker to reuse root-level...

9.8CVSS8.5AI score0.01386EPSS
SaveExploits0References13
OSV
OSV
added 2024/01/31 10:03 a.m.10 views

SUSE-SU-2024:0283-1 Security update for slurm_22_05

This update for slurm2205 fixes the following issues: Update to slurm 22.05.11: Security fixes: - CVE-2023-49933: Prevent message extension attacks that could bypass the message hash. bsc1218046 - CVE-2023-49936: Prevent NULL pointer dereference on sizevalp overflow. bsc1218050 - CVE-2023-49937:...

9.8CVSS8.4AI score0.01386EPSS
SaveExploits0References11
Ubuntu
Ubuntu
added 2024/01/30 12:38 p.m.263 views

USN-6615-1: MySQL vulnerabilities

Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.36 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.10. In addition to security fixes, the updated packages contain bug fixes, new features...

6.5CVSS6AI score0.01539EPSS
SaveExploits0
Rows per page
Query Builder