Lucene search
+L

2963 matches found

BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•18 views

The vulnerability of the asn1_time_to_time_t function (ext/openssl/openssl.c) in the PHP programming language allows a hacker to execute arbitrary code.

The vulnerability of the asn1timetotimet function in the OpenSSL library, a PHP programming language interpreter, arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

7.5CVSS8.3AI score0.35635EPSS
SaveExploits8References20Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•16 views

The vulnerability in the `build_tablename` function (`pgsql.c`) of the PHP programming language interpreter allows a hacker to trigger a service failure.

The vulnerability of the buildtablename function in the PHP programming language interpreter is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

5.3CVSS6.8AI score0.07407EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•19 views

The vulnerability of the mcrypt extension in the PHP programming language interpreter allows a hacker to trigger a service failure or possibly cause other effects.

The vulnerability of the mcrypt extension in the PHP programming language interpreter is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service failures or potentially have other adverse effects...

10CVSS7.8AI score0.08361EPSS
SaveExploits0References14Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•20 views

The vulnerability of the sapi/fpm/fpm/fpm_log.c component, a PHP programming language interpreter, allows an attacker to disclose protected information or cause service failures.

The vulnerability of the sapi/fpm/fpm/fpmlog.c component, a PHP programming language interpreter, is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

9.4CVSS7.8AI score0.04489EPSS
SaveExploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•16 views

The vulnerability of the PHP interpreter is related to an error in processing paths to files containing the character \x00. This error allows attackers to gain unauthorized access to files or directories.

The vulnerability of the PHP interpreter extension is related to an error in processing paths to files containing the character \x00. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to files or directories...

7.5CVSS7.5AI score0.1936EPSS
SaveExploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•18 views

The vulnerability of the `gdimagewebpctx` function in the GD Graphics Library, a programming language interpreter for PHP, allows attackers to trigger a service failure or potentially cause other adverse effects.

The vulnerability of the gdimagewebpctx function in the GD Graphics Library, a programming language interpreter for PHP, is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions or potentially have other effects through the invocation...

10CVSS7.9AI score0.05101EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•15 views

The vulnerability of the Zend/zend_exceptions.c component of the PHP programming language interpreter allows a attacker to cause a service failure.

The vulnerability of the Zend/zendexceptions.c component of the PHP programming language interpreter is related to an infinite loop. Exploiting this vulnerability can allow a malicious actor to cause service failures through the created Exception object...

7.8CVSS7.7AI score0.42401EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•24 views

The vulnerability of the zend_ini_do_op() function in the PHP interpreter allows a hacker to execute arbitrary PHP code.

The vulnerability of the zendinidoop function Zend/zendini parser.c in the PHP interpreter is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary PHP code...

9.3CVSS8.2AI score0.03365EPSS
SaveExploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•17 views

The vulnerability in the ext/session/session.c component of the PHP programming language interpreter allows a hacker to modify user session data.

The vulnerability of the ext/session/session.c component in the PHP programming language exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a remote attacker to modify user session data...

7.8CVSS7.5AI score0.0578EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•24 views

The vulnerability in the `ext/standard/link_win32.c` component of the PHP interpreter allows a perpetrator to compromise data confidentiality.

The vulnerability of the ext/standard/linkwin32.c component of the PHP interpreter involves exposing protected information. Exploiting this vulnerability could allow a malicious actor to compromise data confidentiality remotely...

7.8CVSS7.2AI score0.05139EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•18 views

The vulnerability of the `ext/standard/var_unserializer.c` component of the PHP interpreter allows a attacker to cause a service failure.

The vulnerability of the ext/standard/varunserializer.c component of the PHP interpreter is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to cause service failures by invoking the com, dotnet, or variant classes...

7.8CVSS7.3AI score0.04584EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•20 views

The vulnerability of the TCL-script interpreter (Tool Command Language) of the Cisco IOS XE operating system, which allows attackers to escalate their privileges.

The vulnerability of the TCL-script interpreter of the Cisco IOS XE operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.2CVSS6.8AI score0.00283EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/19 12:00 a.m.•19 views

The vulnerability of the exif component in the PHP programming language interpreter allows attackers to execute arbitrary PHP code.

The vulnerability of the exif component in the PHP programming language interpreter is related to the use of an uninitialized resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary PHP code...

10CVSS7.2AI score0.09395EPSS
SaveExploits2References12Affected Software4
CNVD
CNVD
•added 2022/04/19 12:00 a.m.•31 views

Wasm3 heap buffer overflow vulnerability

Wasm3 is the WebAssembly interpreter. heap buffer overflow vulnerability exists in Wasm3, and no detailed vulnerability details are currently available...

5.5CVSS2.1AI score0.00607EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/04/16 12:00 a.m.•19 views

Wasm3缓冲区错误漏洞

Wasm3 is the WebAssembly interpreter. heap buffer overflow vulnerability exists in Wasm3, and no detailed vulnerability details are currently available...

5.5CVSS5.8AI score0.00607EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/15 3:15 p.m.•41 views

CVE-2022-20676

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

7.2CVSS0.00283EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/15 3:15 p.m.•17 views

CVE-2022-20676

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

6.7CVSS6.7AI score0.00283EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/15 3:15 p.m.•28 views

Input validation

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

7.2CVSS7AI score0.00283EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2022/04/15 2:16 p.m.•136 views

CVE-2022-20676

Cisco IOS XE Software is affected by CVE-2022-20676, a local privilege-escalation vulnerability in the Tcl interpreter. Insufficient input validation in Tcl code loaded on an affected device can allow an authenticated, local attacker to escalate from privilege level 15 to root. By default, Tcl sh...

7.2CVSS6.7AI score0.00283EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/04/15 2:16 p.m.•48 views

CVE-2022-20676 Cisco IOS XE Software Tool Command Language Privilege Escalation Vulnerability

A vulnerability in the Tool Command Language Tcl interpreter of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root-level privileges. This vulnerability is due to insufficient input validation of data that is passed into the Tcl...

5.1CVSS7.1AI score0.00283EPSS
SaveExploits0References1
Rows per page
Query Builder