Lucene search
K

1477 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.2 views

The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.02391EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.3 views

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a hacker to trigger a service failure.

The vulnerability of the Outside In Filters component within Oracle’s software development kit SDK “Outside In Technology” exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using the HTTP protocol...

7.8CVSS7.5AI score0.01442EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.2 views

The vulnerability of HEVC Video Extensions relates to insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions relates to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.8AI score0.02121EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.3 views

The vulnerability of the Adobe Bridge file manager, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02027EPSS
Exploits0References3Affected Software1
Redos
Redos
added 2022/06/22 12:0 a.m.27 views

ROS-20220622-01

Vulnerability of the E2fsprogs service utility set is related to a boundary error when processing unreliable input data. Exploitation of the vulnerability could allow an attacker to exploit a specially crafted file system, run an out-of-bounds entry, and execute arbitrary code on the target syste...

7.8CVSS9AI score0.01336EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/06/22 12:0 a.m.18 views

FreeRDP < 2.4.1 Multiple Vulnerabilities

FreeRDP is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.4AI score0.01553EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/22 12:0 a.m.3 views

The vulnerability relates to the signature verification function of Authenticode for the Windows operating system, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Authenticode signature verification function in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.8CVSS6.3AI score0.8878EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/06/21 12:0 a.m.2 views

The vulnerability of the Adobe Bridge file manager, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02133EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/21 12:0 a.m.2 views

The vulnerability of the hardware virtualization system of the Windows Hyper-V operating system from Microsoft allows a perpetrator to trigger a service failure.

The vulnerability of the Windows Hyper-V hardware virtualization system of the Microsoft operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using specially created data...

6.5CVSS6.9AI score0.00593EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:0 a.m.4 views

The vulnerability of the Network File System (NFS) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Network File System NFS of Windows operating systems exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.77645EPSS
Exploits2References4
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:0 a.m.3 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

5.3CVSS7.2AI score0.01646EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:0 a.m.2 views

The vulnerability of the Siebel Core – Server Infrastructure component of the Oracle Siebel CRM system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Siebel Core – Server Infrastructure component of the Oracle Siebel CRM system exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through...

7.5CVSS6.8AI score0.01517EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.3 views

The vulnerability in Intel NUC’s built-in software exists due to insufficient testing of input data, allowing attackers to exploit their privileges.

The vulnerability of Intel NUC’s built-in software exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.2CVSS6.6AI score0.00228EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/07 12:0 a.m.3 views

The vulnerability of the Wiser Smart programmable logic controllers from Schneider Electric, Wiser Controller EER21000 and Wiser Controller EER21001, related to insufficient validation of input data, allows attackers to exploit this to increase their privileges.

The vulnerability of the Wiser Smart programmable logic controllers from Schneider Electric, Wiser Controller EER21000 and Wiser Controller EER21001, relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges through a...

7.8CVSS6.7AI score0.00657EPSS
Exploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2022/06/06 11:27 p.m.50 views

CVE-2022-28948

A flaw was found in the Unmarshal function in Go-Yaml. This vulnerability results in program crashes when attempting to convert or deserialize invalid input data, potentially impacting system stability and reliability...

7.5CVSS7.3AI score0.035EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2022/06/02 12:0 a.m.2 views

The vulnerability of the DirectShow component in Windows operating systems, related to insufficient input data validation, allows attackers to execute arbitrary code.

The vulnerability of the DirectShow component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS7.6AI score0.01225EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/01 12:0 a.m.1 views

The vulnerability of the CPU FX5U(C) and FX5UJ modules of MELSEC iQ-F series PLCs, which stems from insufficient input data verification, allows attackers to trigger malfunctions during maintenance operations.

The vulnerability of the CPU FX5UC and FX5UJ modules of the MELSEC iQ-F series is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system...

8.6CVSS7.6AI score0.03679EPSS
Exploits0References3
Redos
Redos
added 2022/05/30 12:0 a.m.62 views

ROS-20220530-03

Vulnerability of Array method of Mozilla Firefox and Mozilla Firefox ESR browsers and Thunderbird mail client is related to code generation errors. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary JavaScript code. remotely to execute arbitrary...

8.8CVSS8.8AI score0.26709EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.2 views

The vulnerability of the Windows Graphics component in Microsoft Windows operating systems arises from insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of the Windows Graphics component in Microsoft Windows systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.3CVSS7.7AI score0.02444EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.1 views

The vulnerability of the Microsoft.NET Framework software, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the Microsoft.NET Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.3AI score0.02461EPSS
Exploits0References3
Rows per page
Query Builder