Lucene search
+L

1508 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.8 views

The vulnerabilities of Mutt and NeoMutt email clients, related to errors in processing input data, allow a hacker to execute arbitrary code.

The vulnerability of Mutt and NeoMutt email clients is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.03166EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.14 views

The vulnerability of the Intel Graphics Driver’s API driver component allows a hacker to trigger a service failure.

The vulnerability of the Intel Graphics Driver’s API driver component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

6.5CVSS6.5AI score0.0028EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.15 views

The vulnerability of Intel Active Management Technology’s microprogramming software arises from insufficient testing of input data, allowing attackers to exploit this weakness to gain increased privileges.

The vulnerability of Microprogramming Software under Intel Active Management Technology exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain increased privileges...

7.5CVSS7.7AI score0.0061EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.7 views

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from insufficient validation of input data. This allows a perpetrator to trigger a service failure.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

8.5CVSS7.2AI score0.01078EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...

6.8CVSS6.5AI score0.05141EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.7 views

The vulnerability of the software for processing, transforming, and generating Ghostscript documents arises from insufficient checking of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the software for processing, transforming, and generating Ghostscript documents exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.02159EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.7 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

9.1CVSS8.2AI score0.10342EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.10 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

4.6CVSS6.5AI score0.00346EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.8 views

The vulnerability of Intel Active Management Technology’s microprogramming software, related to insufficient validation of input data, allows attackers to disclose protected information.

The vulnerability of Microprogramming Software under Intel Active Management Technology AMT is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

6.6CVSS6.4AI score0.00358EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:0 a.m.9 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

6.2CVSS6.5AI score0.00349EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2019/10/29 7:15 p.m.30 views

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.5CVSS6.5AI score
SaveExploits0References42
OSV
OSV
added 2019/10/29 7:15 p.m.3 views

DEBIAN-CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.5CVSS6.8AI score0.09156EPSS
SaveExploits0References1
Prion
Prion
added 2019/10/29 7:15 p.m.24 views

Design/Logic Flaw

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.8CVSS8.1AI score0.09156EPSS
SaveExploits0References42Affected Software3
GitLab Advisory Database
GitLab Advisory Database
added 2019/10/29 12:0 a.m.41 views

Loop with Unreachable Exit Condition (Infinite Loop)

In Apache Thrift, a server or client may run into an endless loop when feed with specific input data...

7.8CVSS2.2AI score0.09156EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:0 a.m.64 views

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch allows a attacker to gain access to protected information.

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...

7.8CVSS5.5AI score0.05802EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2019/10/28 10:32 p.m.35 views

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.4AI score0.09156EPSS
SaveExploits0References42
CVE
CVE
added 2019/10/28 10:32 p.m.436 views

CVE-2019-0205

CVE-2019-0205 affects Apache Thrift up to version 0.12.0, where a server or client may enter an endless loop when fed specific input data. The issue was partially fixed in 0.11.0, and depending on the language binding, only certain bindings are impacted. Exploitation details are not provided in t...

7.8CVSS7.3AI score0.09156EPSS
SaveExploits0References42Affected Software1
Debian CVE
Debian CVE
added 2019/10/28 10:32 p.m.43 views

CVE-2019-0205

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

7.8CVSS6.7AI score0.09156EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.8 views

The vulnerability of the Cisco IOS XE operating system, related to the lack of measures for cleaning input data, allows attackers to perform domain-based scenario attacks.

The vulnerability of the Cisco IOS XE operating system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to perform domain-joining attacks...

5.5CVSS5.5AI score0.00804EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.12 views

The vulnerability of Cisco IOS and Cisco IOS XE operating systems, related to the lack of measures for cleaning input data, allows attackers to execute cross-site scripting attacks.

The vulnerability of Cisco IOS and Cisco IOS XE systems is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to perform domain-to-domain scenario attacks using the HTTP banner parameter...

5.5CVSS5.5AI score0.00804EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder