Lucene search
+L

2059 matches found

BDU FSTEC
BDU FSTEC
added 2021/05/24 12:0 a.m.7 views

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the network MySQL protocol...

6.3CVSS6.3AI score0.01925EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.9 views

The vulnerability of the Pre Login component of Oracle FLEXCUBE Direct Banking system allows a perpetrator to modify data or gain privileged access.

The vulnerability of the Pre Login component of the Oracle FLEXCUBE Direct Banking system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to modify data or gain privileged access using network packets...

2.1CVSS6.6AI score0.00611EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/14 12:0 a.m.10 views

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS6.4AI score0.02072EPSS
SaveExploits0References5Affected Software1
Huawei
Huawei
added 2021/05/12 12:0 a.m.40 views

Security Advisory - Denial of Service Vulnerability in Huawei Product

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages due to validating inputs insufficiently. Attackers can exploit this vulnerability by sending specific messages to affected module. This can cause denial of service. Vulnerability ID:...

7.5CVSS7.4AI score0.00696EPSS
SaveExploits0Affected Software4
Cvelist
Cvelist
added 2021/05/10 4:49 a.m.41 views

CVE-2021-32471

Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs instead of 0s and 1s...

8AI score0.00849EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/05/10 12:0 a.m.9 views

PT-2021-19719 · Mit · Universal Turing Machine

Name of the Vulnerable Software and Affected Versions: Marvin Minsky 1967 Turing Machine affected versions not specified Description: The issue concerns insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine, allowing users to execute arbitrary code...

7.8CVSS7.5AI score0.00849EPSS
SaveExploits1References9
Huawei
Huawei
added 2021/05/06 12:0 a.m.39 views

Security Advisory - Insufficient Input Validation Vulnerability in FusionCompute Product

There is an insufficient input validation vulnerability in FusionCompute product. Due to the input validation is insufficient, an attacker can exploit this vulnerability to upload any files to the device. Successful exploit may cause the service abnormal. Vulnerability ID: HWPSIRT-2020-05085 This...

4.3CVSS4.5AI score0.00533EPSS
SaveExploits0Affected Software1
Cvelist
Cvelist
added 2021/04/30 3:25 p.m.24 views

CVE-2020-4039 Directory Traversal Vulnerability in SUSI.AI Server

SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient input validation. Any admin config and file readable by the app can be retrieved by the attacker. Furthermore, some files can also be moved o...

8.6CVSS9.3AI score0.01371EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/23 12:0 a.m.10 views

The vulnerability of the TCP/IP protocol driver for Microsoft Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the TCP/IP protocol driver for Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.5CVSS7.1AI score0.09365EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/04/21 12:0 a.m.7 views

PT-2021-2859 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to insufficient neutralization of special elements in data requests in the web-based management interface of Cisco SD-WAN vManage Software. This...

4.3CVSS7.3AI score0.00818EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2021/04/20 12:0 a.m.10 views

PT-2021-2776 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox. This can allow an attacker to gain unauthorized access to protected information. T...

8.8CVSS6.1AI score0.06932EPSS
SaveExploits9References248
Positive Technologies
Positive Technologies
added 2021/04/20 12:0 a.m.7 views

PT-2021-2773 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, allowing an unauthenticated attacker with logon to the infrastructure where Oracle...

8.8CVSS5.8AI score0.06932EPSS
SaveExploits9References248
Positive Technologies
Positive Technologies
added 2021/04/20 12:0 a.m.5 views

PT-2021-2852 · Oracle +2 · Virtualbox +2

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox versions prior to 6.1.20 Description: The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited to execute arbitrary code or gain full control over the...

8.8CVSS6.9AI score0.06932EPSS
SaveExploits9References252
Positive Technologies
Positive Technologies
added 2021/04/20 12:0 a.m.14 views

PT-2021-2899 · Oracle +11 · Mysql Server +10

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.7.33 and prior Description: The issue is related to insufficient input validation in the Server: DML component of Oracle MySQL Server. This allows a remote attacker to cause a denial of service using the MySQL...

10CVSS7AI score0.88402EPSS
SaveExploits140References1046
OSV
OSV
added 2021/04/17 8:32 a.m.11 views

OPENSUSE-SU-2021:0567-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 89.0.4389.128 boo1184700: CVE-2021-21206: Use after free in blink CVE-2021-21220: Insufficient validation of untrusted input in v8 for x8664...

8.8CVSS9.7AI score0.69291EPSS
SaveExploits6References4
BDU FSTEC
BDU FSTEC
added 2021/04/16 12:0 a.m.14 views

The vulnerability of the Console Driver service (condrv) of Microsoft Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Console Driver service in Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00648EPSS
SaveExploits0References3
Prion
Prion
added 2021/04/15 7:15 p.m.13 views

Input validation

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation...

5CVSS5.4AI score0.01297EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.10 views

The vulnerability of Huawei’s microprogrammed router software, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of Huawei’s microprogrammed router software is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS7.2AI score0.00883EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/04/08 12:0 a.m.14 views

Cisco IOS XR Command Injection Vulnerability

Cisco IOS XR software is a modular and fully distributed network operating system for service provider networks. A command injection vulnerability exists in the CLI of Cisco IOS XR versions prior to 7.3.1. The vulnerability stems from insufficient input validation of user-supplied commands. An...

7.8CVSS7.3AI score0.00322EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:0 a.m.10 views

The vulnerability in the web interface of Cisco IOS XE allows a hacker to trigger a service failure.

The vulnerability in the web interface of Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially crafted HTTP packet...

4.3CVSS6.4AI score0.00944EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder