Lucene search
+L

1508 matches found

RedHat Linux
RedHat Linux
added 2020/06/11 7:9 a.m.7 views

thrift: Endless loop when feed with specific input data

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.8CVSS7.3AI score0.09156EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.9 views

The vulnerabilities of SIPROTEC relay protection devices stem from insufficient validation of input data, allowing attackers to trigger malfunctions in the service.

The vulnerability of SIPROTEC relay protection devices is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to trigger a service failure using specially created packets sent to port 50000/UDP...

7.5CVSS7.2AI score0.01591EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.10 views

The vulnerability of the Istio network software lies in its ability to enter an infinite loop when certain input data is provided. This allows a malicious actor to cause a service failure.

The vulnerability of the Istio network software is related to entering an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a attacker to cause service failures...

7.8CVSS7.2AI score0.01214EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.7 views

The vulnerability of the network programming environments Envoy and Istio lies in their susceptibility to entering an infinite loop when processing certain input data. This allows attackers to cause service failures.

The vulnerability of the network programming environments Envoy and Istio is related to the entry into an infinite loop when certain input data is provided. Exploiting this vulnerability can allow a attacker to cause service failures...

7.8CVSS7.2AI score0.01938EPSS
SaveExploits1References5Affected Software2
RedHat Linux
RedHat Linux
added 2020/05/18 10:24 a.m.14 views

thrift: Endless loop when feed with specific input data

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.8CVSS7.3AI score0.09156EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.8 views

The vulnerability of the WordPress website content management system, related to insufficient validation of input data, allows attackers to compromise the integrity of the data.

The vulnerability of the WordPress website content management system is related to a JSON GET cache infection error. Exploiting this vulnerability allows an attacker to compromise data integrity...

7.8CVSS7.3AI score0.03154EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.8 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for checking input data, allowing attackers to trigger a service failure.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause service failures...

6.5CVSS6.8AI score0.00347EPSS
SaveExploits0References8Affected Software11
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.9 views

The vulnerability of Google Chrome’s payment security policy, related to the lack of a mechanism for verifying input data, allows attackers to compromise the integrity of data.

The vulnerability of Google Chrome’s payment security policy is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

7.1CVSS6.6AI score0.01219EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.9 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for verifying input data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

7.2CVSS6.8AI score0.00352EPSS
SaveExploits0References8Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.7 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for verifying input data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

8.8CVSS6.8AI score0.00353EPSS
SaveExploits0References7Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.11 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for checking input data, allowing attackers to trigger a service failure.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to cause service failures...

6.5CVSS6.8AI score0.0035EPSS
SaveExploits0References8Affected Software11
CNVD
CNVD
added 2020/04/24 12:0 a.m.11 views

Command Injection Vulnerability in Multiple NETGEAR Products (CNVD-2021-50928)

NETGEAR EX7000 and others are products of NETGEAR Corporation.NETGEAR EX7000 is a wireless network signal extender.NETGEAR R8500 is a wireless router.NETGEAR D6400 is a wireless modem.NETGEAR R8500 is a wireless router.NETGEAR R8500 is a wireless router.NETGEAR R8500 is a wireless router.NETGEAR...

9.8CVSS7.7AI score0.03353EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.9 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.1AI score0.00847EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.14 views

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the console-based graphic editor ImageMagick is caused by a numerical overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure termination of the application by sending large input data...

6.8CVSS7AI score0.01457EPSS
SaveExploits1References9Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.9 views

The vulnerability of Firefox’s browser security policy, related to the lack of input data validation mechanisms, allows attackers to compromise data integrity.

The vulnerability of Firefox’s browser security policy is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to compromise data integrity by using the HTTP protocol...

4.3CVSS6.4AI score0.00734EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.7 views

The vulnerability of the `gdImageCreateFromXbm` function in the GD graphics library for the PHP programming language allows a malicious actor to gain unauthorized access to sensitive information, due to a lack of mechanisms to verify the correctness of input data.

The vulnerability of the gdImageCreateFromXbm function in the GD graphics library for the PHP programming language is related to the lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to sensitive information...

7.8CVSS5.9AI score0.04332EPSS
SaveExploits1References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.11 views

The vulnerability of Google Chrome’s browser extension security policies, related to the lack of a mechanism for verifying input data, allows attackers to trigger a service failure.

The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure through the created HTML page...

7.1CVSS6.6AI score0.01217EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.12 views

The vulnerability of the Ceph storage system arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Ceph storage system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

6.8CVSS6.7AI score0.02136EPSS
SaveExploits0References9Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.8 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

7.1CVSS6.8AI score0.01915EPSS
SaveExploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.8 views

The vulnerability of Xen hypervisors arises from insufficient validation of input data, allowing attackers to trigger service failures or increase their privileges.

The vulnerability of Xen hypervisors exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to cause service failures or increase their privileges...

8.8CVSS6.8AI score0.00349EPSS
SaveExploits0References8Affected Software9
Rows per page
Query Builder