Lucene search
K

1376 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/02 12:0 a.m.1 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to improper cleaning or release of resources, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS6.3AI score0.00068EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/02 12:0 a.m.3 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient input data validation, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS7.2AI score0.00091EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/02 12:0 a.m.1 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient input data validation, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS7.2AI score0.00091EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/02 12:0 a.m.1 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient input data validation, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS7.2AI score0.00091EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/29 12:0 a.m.1 views

The vulnerability of the __ip_set_put_netlink() function in the net/netfilter/ipset/ip_set_core.c module of the netfilter kernel of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the ipsetputnetlink function in the net/netfilter/ipset/ipsetcore.c module of the netfilter component of the Linux operating system is related to concurrent access to resources race condition. Exploiting this vulnerability could allow a attacker to cause service interruptions...

4.7CVSS6.4AI score0.00004EPSS
Exploits1References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:0 a.m.1 views

The vulnerability of the `sanitize_html` function in Ruby Redcloth software allows a hacker to cause a service failure.

The vulnerability of the sanitizehtml function in Ruby Redcloth text processing software is related to the use of a regular expression with inefficient computational complexity. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

7.8CVSS7.1AI score0.00912EPSS
Exploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/21 12:0 a.m.1 views

The vulnerability of the GetParentControlInfo() function in Tenda AC10 router software allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the GetParentControlInfo function in Tenda AC10 router software lies in the issue of the operation exceeding the buffer in memory when processing the mac parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

7.8CVSS8.4AI score0.01246EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.1 views

The vulnerability of the CMPappBP component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPappBP component in CODESYS software products is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.8AI score0.00111EPSS
Exploits0References4Affected Software16
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.1 views

The vulnerability of the Exiv2 metadata management library, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.7AI score0.00178EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.2 views

The vulnerability of the webpimage.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the webpimage.cpp component in the Exiv2 media metadata management library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS7.2AI score0.00604EPSS
Exploits1References6Affected Software2
Code423n4
Code423n4
added 2023/09/07 12:0 a.m.9 views

Potential Out-of-Bounds Error When Modifying Ranges

Lines of code Vulnerability details The method allows for the modification of a range based on an index. However, there's no explicit check to ensure that the provided indexToModify is within the bounds of the ranges array. If an out-of-bounds index is provided, the method will throw a generic...

6.9AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/09/06 12:0 a.m.2 views

The vulnerability of the Security component of Oracle Java SE software and the Oracle GraalVM Enterprise Edition virtual machine allows a perpetrator to trigger a service failure.

The vulnerability of the Security component of Oracle Java SE and the Oracle GraalVM Enterprise Edition software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.3CVSS6.2AI score0.00146EPSS
Exploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.1 views

The vulnerability of the Serialization component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a perpetrator to trigger a service failure.

The vulnerability of the Serialization component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause service interruptions remotel...

5.3CVSS6.2AI score0.00143EPSS
Exploits0References17Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.1 views

The vulnerability of the TACACS and RADIUS protocols implemented in Cisco NX-OS operating system routers MDS 9000, Nexus 1000, Nexus 1000V, Nexus 3000, Nexus 5500, Nexus 5600, Nexus 6000, Nexus 7000, Nexus 9000 allows a attacker to cause service interruptions.

The vulnerability of the TACACS and RADIUS protocols for operating systems of Cisco NX-OS routers such as MDS 9000, Nexus 1000, Nexus 1000V, Nexus 3000, Nexus 5500, Nexus 5600, Nexus 6000, Nexus 7000, and Nexus 9000 exists due to insufficient validation of input data. Exploiting this vulnerabilit...

7.1CVSS6.5AI score0.00117EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/08/31 12:0 a.m.1 views

The vulnerability of the CP2179 component, a traffic analyzer for computer networks in Wireshark, allows a hacker to cause a service failure.

The vulnerability of the CP2179 component, a traffic analyzer in Wireshark, is related to a division by zero error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

7.8CVSS6.8AI score0.00212EPSS
Exploits1References6Affected Software4
Talos Blog
Talos Blog
added 2023/08/29 12:0 p.m.17 views

What's in a name? Strange behaviors at top-level domains creates uncertainty in DNS

Google introduced the new ".zip" Top Level Domain TLD on May 3, 2023, igniting a firestorm of controversy as security organizations warned against the confusion that was certain to occur. When clicking on a name that ends in ".zip" are people intending to open an archive file or an internet URL?...

6.8AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/08/28 12:0 a.m.1 views

The vulnerability of the AutoIt module in the ClamAV antivirus software package allows a malicious actor to trigger a service failure. This vulnerability exists in the Cisco Secure Endpoint Connector for Windows protection software.

The vulnerability of the AutoIt module in the ClamAV antivirus software package affects systems for protecting against malicious programs. This issue is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01054EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:0 a.m.1 views

The vulnerability in the `appendvfs.c` component of the SQLite database management system allows a hacker to cause a service failure.

The vulnerability of the appendvfs.c component in the SQLite database management system is related to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9.4CVSS7.5AI score0.04459EPSS
Exploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/08/11 12:0 a.m.1 views

The vulnerability of the WatsonX.data data storage service on the IBM Cloud Pak for Data (CP4D) cloud platform allows a attacker to cause a service failure.

The vulnerability of the WatsonX.data data storage service on the IBM Cloud Pak for Data CP4D cloud platform involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.00109EPSS
Exploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/08/08 12:0 a.m.27 views

RHEL 8 : nodejs:16 (RHSA-2023:4537)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4537 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

7.5CVSS6.9AI score0.01916EPSS
Exploits1References13
Rows per page
Query Builder