Lucene search
+L

1619 matches found

BDU FSTEC
BDU FSTEC
added 2020/11/18 12:00 a.m.12 views

The vulnerability of Intel microprocessor microprogramming software arises from insufficient testing of input data, allowing attackers to exploit this weakness to gain increased privileges.

The vulnerability of Intel processor microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.7CVSS7.2AI score0.00424EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:00 a.m.10 views

The vulnerability of the Cisco IOS XE operating system’s web management infrastructure, related to errors in processing input data, allows attackers to gain access to protected information or cause service interruptions.

The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

8.5CVSS7.5AI score0.00911EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/05 12:00 a.m.13 views

The vulnerability of the Common Open Policy Service (COPS) service in the Cisco IOS XE operating system, exposed by Cisco cBR-8 gateways, allows a attacker to cause a malfunction in the device’s operation.

The vulnerability of the Common Open Policy Service COPS service in the Cisco IOS XE operating system, when exposed by Cisco cBR-8 broadband routers, is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in the device...

8.6CVSS7.6AI score0.01374EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/02 12:00 a.m.13 views

The vulnerability of the `var_NetworkSettingDhcpSvrRoute` function in the Moxa EDR-810 industrial router’s software allows a attacker to trigger an emergency shutdown of the device.

The vulnerability of the varNetworkSettingDhcpSvrRoute function in the Moxa EDR-810 industrial router’s microprogramming system is related to the lack of input data verification when accessing by using the OID identifier index. Exploiting this vulnerability can allow a malicious actor to trigger ...

5.7CVSS5.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:00 a.m.19 views

The vulnerability of Intel Thunderbolt controller interfaces, related to insufficient input data validation, allows attackers to gain unauthorized access to protected information.

The vulnerability of Intel Thunderbolt controller interfaces is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.8CVSS5.5AI score0.00338EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/27 12:00 a.m.19 views

The vulnerability of microprogramming software in server boards, server systems, and Intel computing modules arises from the lack of measures to protect input data. This allows attackers to exploit their privileges.

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

5.4CVSS6.6AI score0.00608EPSS
SaveExploits0References3Affected Software18
attackerkb
attackerkb
added 2020/10/16 5:15 a.m.6 views

CVE-2020-27174

In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the standard input. This can result in a memory leak on the microVM emulation thread, possibly occupying more memory than intended on the host...

7.5CVSS5.6AI score0.01741EPSS
SaveExploits0References5
attackerkb
attackerkb
added 2020/10/16 4:15 a.m.5 views

CVE-2020-27173

In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source i.e., standard input. This behavior cannot be reproduced from the guest side. When no rate limiting is in place, the host can be subject to memory pressure, impacting all...

7.5CVSS5.4AI score0.01531EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/10/09 12:00 a.m.19 views

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 Series operating system, which stems from insufficient input data validation, allows attackers to trigger service interruptions.

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 series operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service interruptions...

7.4CVSS6.9AI score0.00726EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/07 12:00 a.m.17 views

The vulnerability of the ASP.NET Core software platform’s cookie analyzer allows a hacker to bypass security functions.

The vulnerability of the ASP.NET Core software platform’s cookie analyzer is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to bypass security measures...

7.8CVSS7.2AI score0.05926EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2020/10/02 9:15 p.m.25 views

CVE-2020-5986

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

5.5CVSS0.00275EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/02 9:15 p.m.26 views

CVE-2020-5985

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

7.1CVSS0.0028EPSS
SaveExploits0References1
Prion
Prion
added 2020/10/02 9:15 p.m.33 views

Design/Logic Flaw

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

2.1CVSS5.9AI score0.00275EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2020/10/02 9:15 p.m.27 views

Design/Logic Flaw

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

3.6CVSS6.9AI score0.0028EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/02 9:10 p.m.45 views

CVE-2020-5985

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

7AI score0.0028EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/02 9:10 p.m.77 views

CVE-2020-5986

The CVE-2020-5986 entry concerns NVIDIA Virtual GPU Manager. The vulnerability is due to the vGPU plugin not validating input data size, which may allow tampering or a denial of service. Affected are vGPU versions 8.x (before 8.5), 10.x (before 10.4), and 11.0. Connected sources (NVD, Red Hat, NV...

5.5CVSS6.1AI score0.00275EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/10/02 9:10 p.m.40 views

CVE-2020-5986

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.5, version 10.x prior to 10.4 and version 11.0...

6AI score0.00275EPSS
SaveExploits0References1
CVE
CVE
added 2020/10/02 9:10 p.m.71 views

CVE-2020-5985

CVE-2020-5985 affects NVIDIA Virtual GPU Manager (vGPU plugin). The root cause is input data length not being validated in the vGPU plugin, which may lead to tampering or denial of service. Affected are vGPU 8.x (before 8.5), 10.x (before 10.4), and 11.0. NVIDIA’s security bulletin and accompanyi...

7.1CVSS6.9AI score0.0028EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/29 12:00 a.m.12 views

The vulnerability of the Microsoft Visual Studio software, related to errors in processing input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software relates to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS7.8AI score0.04369EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/29 12:00 a.m.14 views

The vulnerability of the Windows operating system’s routing utility, which allows a hacker to trigger a service failure

The vulnerability of the Windows operating system’s routing utilities is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause a service failure by using a specially created application...

5.5CVSS6.2AI score0.01221EPSS
SaveExploits0References3
Rows per page
Query Builder