Lucene search
K

305 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.5 views

The vulnerability of the udmabuf_vm_fault() function in the drivers/dma-buf/udmabuf.c module of Linux kernel allows a attacker to escalate their privileges and execute arbitrary code.

The vulnerability of the udmabufvmfault function in the drivers/dma-buf/udmabuf.c module of Linux operating systems is related to unvalidated array indexing due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute...

8.2CVSS7.1AI score0.01013EPSS
Exploits1References15Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.7 views

The vulnerability of the Secure Channel component in Windows operating systems, which allows a hacker to cause a service failure

The vulnerability of the Secure Channel component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS7.3AI score0.01731EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.5 views

The vulnerability in the implementation of the Secure Socket Tunneling Protocol (SSTP) on Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.01986EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.5 views

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created data...

7.8CVSS7.3AI score0.01936EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.5 views

The vulnerability of the Microsoft Visual Studio software allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00681EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.4 views

The vulnerability of the Microsoft Office software package, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.03011EPSS
Exploits4References2
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.5 views

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE allows a hacker to trigger a service failure.

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.4CVSS6.5AI score0.00303EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/07 12:0 a.m.4 views

The vulnerability of the IBM DB2 database management system, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the IBM DB2 database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by executing the Load command...

6.2CVSS7.2AI score0.00739EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/24 12:0 a.m.5 views

The vulnerability of the formWriteFacMac function in the Tenda AC1206 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function in the Tenda AC1206 router microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary commands...

10CVSS8.1AI score0.02488EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.4 views

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.01654EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.6 views

The vulnerability of the Windows Media Foundation component in Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows Media Foundation component in Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00598EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.3 views

The vulnerability of Microsoft Excel, Office, and Office 365 software lies in insufficient validation of input data, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel, Office, and Office 365 packages is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.02532EPSS
Exploits3References2
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:0 a.m.7 views

The vulnerability of the DNS Server component for Windows operating systems allows a perpetrator to carry out a DoS attack.

The vulnerability of the DNS Server component for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute a DoS attack...

8.3CVSS7.4AI score0.01256EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/07 12:0 a.m.4 views

The vulnerability of the Adobe Photoshop graphic editor lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00326EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.7 views

The vulnerability of BIOS microprogramming software in Dell laptops, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.5CVSS7.5AI score0.00205EPSS
Exploits0References2Affected Software26
BDU FSTEC
BDU FSTEC
added 2023/02/20 12:0 a.m.5 views

The vulnerability of BIOS microprogramming software in Dell laptops and workstations arises from insufficient validation of input data. This allows attackers to execute arbitrary code.

The vulnerability of the BIOS software on Dell laptops and workstations exists due to insufficient testing of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00204EPSS
Exploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
added 2023/02/15 12:0 a.m.5 views

The vulnerability of the System Management Unit (SMU) component of AMD processors allows attackers to disclose protected information.

The vulnerability of the System Management Unit SMU component of AMD processors exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

3.3CVSS5.3AI score0.00243EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.5 views

The vulnerability of Eclipse Jetty servlet containers arises from insufficient validation of input data, allowing attackers to cause failures in the proxy script.

The vulnerability of Eclipse Jetty servlet containers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause failures in the proxy scenarios...

4CVSS6.5AI score0.00931EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/01/25 12:0 a.m.6 views

The vulnerability of the Windows Authentication component in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Authentication component in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted data...

7.5CVSS7.8AI score0.01163EPSS
Exploits0References2
CNVD
CNVD
added 2022/11/23 12:0 a.m.23 views

Google TensorFlow buffer overflow vulnerability (CNVD-2022-80680)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from tf.rawops.ResizeNearestNeighborGrad's lack of length size validation of the input data. validation, an attacker could exploi...

7.5CVSS3.5AI score0.0044EPSS
Exploits1References1
Rows per page
Query Builder