Lucene search
+L

2056 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.11 views

The vulnerability of the xHCI component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the xHCI component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.2CVSS7.4AI score0.00636EPSS
SaveExploits0References3Affected Software1
OpenVAS
OpenVAS
added 2020/06/05 12:0 a.m.25 views

Huawei Data Communication: DoS Vulnerability in Some Huawei Products (huawei-sa-20171202-01-pse)

There is a DoS vulnerability caused by memory exhaustion in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

4.9CVSS0.3AI score0.00218EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.8 views

The vulnerability of the Squid proxy server arises from insufficient validation of input data, allowing attackers to access features that can only be used by reverse proxies.

The vulnerability of the Squid proxy server exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to gain access to features that can only be used by reverse proxies...

7.5CVSS6.7AI score0.03829EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.9 views

The vulnerability of the drivers/spi/spi-dw.c component in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the drivers/spi/spi-dw.c component in Linux operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause system failures...

5.5CVSS6.7AI score0.00652EPSS
SaveExploits1References23Affected Software3
OpenVAS
OpenVAS
added 2020/05/27 12:0 a.m.32 views

Huawei Data Communication: Insufficient Input Validation Vulnerability in Some Huawei Products (huawei-sa-20171215-01-ike)

There is an insufficient input validation vulnerability in some Huawei products. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

7.5CVSS7.6AI score0.01218EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/05/26 12:0 a.m.30 views

Huawei Data Communication: Out-Of-Bounds Read Vulnerability in Some Huawei Products (huawei-sa-20180131-01-sip)

Some Huawei products have an out-of-bounds read vulnerability due to insufficient input validation. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.5CVSS7.5AI score0.01218EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2020/05/26 12:0 a.m.48 views

Huawei Products DoS Vulnerability (huawei-sa-20171201-01-pse)

Multiple Huawei products are prone to a denial of service vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

5.5CVSS5.5AI score0.00218EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:0 a.m.8 views

The vulnerability of the is_wlc_event_frame function in the Broadcom brcmfmac WiFi kernel driver for the Linux operating system allows a hacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the iswlceventframe function in the Broadcom brcmfmac WiFi driver for Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and...

8.3CVSS6.4AI score0.03251EPSS
SaveExploits0References28Affected Software15
Check Point Advisories
Check Point Advisories
added 2020/05/10 12:0 a.m.112 views

Cisco Data Center Network Manager SQL Injection (CVE-2019-15984)

An SQL injection vulnerability exists in Cisco Data Center Network Manager. The vulnerability is due to insufficient input validation when processing HTTP requests in the Java class smartLicensingController...

9CVSS1.7AI score0.46935EPSS
SaveExploits10
Cvelist
Cvelist
added 2020/04/29 8:40 p.m.34 views

CVE-2019-16011 Cisco IOS XE SD-WAN Software Command Injection Vulnerability

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to...

7.8CVSS7.7AI score0.00391EPSS
SaveExploits0References1
NVD
NVD
added 2020/04/27 8:15 p.m.31 views

CVE-2019-5302

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

5.3CVSS4.4AI score0.00323EPSS
SaveExploits0References1
Prion
Prion
added 2020/04/27 8:15 p.m.23 views

Input validation

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

2.9CVSS4.6AI score0.01336EPSS
SaveExploits0References1Affected Software47
Prion
Prion
added 2020/04/27 8:15 p.m.26 views

Input validation

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

2.9CVSS5.7AI score0.00873EPSS
SaveExploits0References1Affected Software47
Cvelist
Cvelist
added 2020/04/27 8:1 p.m.42 views

CVE-2019-5303

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device...

6.3AI score0.00323EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.8 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.1AI score0.01285EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.16 views

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

7.1CVSS7AI score0.0139EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.7 views

The vulnerability in the Git version control system’s component that handles NTFS Alternate Data Streams allows a attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Git version control system’s NTFS Alternate Data Streams handling component is related to a lack of input validation mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

9.3CVSS7.4AI score0.24014EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:0 a.m.11 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to information.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information through a specially created HTML page...

7.4CVSS7AI score0.00737EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:0 a.m.14 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...

7.1CVSS6.5AI score0.00729EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:0 a.m.10 views

The vulnerability of the _ctl_ioctl_main function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ctlioctlmain function drivers/scsi/mpt3sas/mpt3sasctl.c in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7.1AI score0.00406EPSS
SaveExploits0References20Affected Software3
Rows per page
Query Builder