Lucene search
K

1376 matches found

BDU FSTEC
BDU FSTEC
added 2023/03/03 12:0 a.m.1 views

The vulnerability of the Windows Secure Channel component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the Windows Secure Channel component in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.3AI score0.13724EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/03 12:0 a.m.2 views

The vulnerability of the Windows Secure Channel component of the Windows operating system, which allows a hacker to trigger a service failure

The vulnerability of the Windows Secure Channel component in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.3AI score0.21377EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/01 12:0 a.m.1 views

The vulnerability in the implementation of the Common Industrial Protocol (CIP) for Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the implementation of the Common Industrial Protocol CIP in Cisco IOS and Cisco IOS XE operating systems is related to insufficient validation of input data during the processing of CIP packets. Exploiting this vulnerability can allow a malicious actor to cause service...

8.6CVSS7.2AI score0.009EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.1 views

The vulnerability of Microsoft Edge browser, related to improper resource release, allows attackers to trigger a service failure.

The vulnerability of Microsoft Edge relates to the improper release of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.4CVSS6.6AI score0.00346EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.1 views

The vulnerability of Dell Enterprise SONiC operating systems, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of Dell Enterprise SONiC operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.00447EPSS
Exploits0References3Affected Software1
Hacker One
Hacker One
added 2023/02/23 2:30 a.m.32 views

Node.js: node.js process aborts when processing x509 certs with invalid public key information

A vulnerability existed in Node.js versions 18.14.2 and 19.7.0 that allowed malicious actors to cause a denial-of-service DoS by providing x509 certificates with invalid public key information. This vulnerability could lead to the termination of the Node.js process, resulting in interruptions to...

5.3CVSS6.3AI score0.0003EPSS
Exploits0
F5 Networks
F5 Networks
added 2023/02/21 6:48 p.m.31 views

K19501795: BIG-IP HTTP profile vulnerability CVE-2019-6631

Security Advisory Description iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs. CVE-2019-6631 Impact The...

7.5CVSS7.3AI score0.01009EPSS
Exploits0Affected Software13
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.1 views

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

7.5CVSS7.2AI score0.01037EPSS
Exploits0References3Affected Software12
SUSE CVE
SUSE CVE
added 2023/02/15 5:59 a.m.1 views

SUSE CVE-2010-1860

The htmlentitydecode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents or trigger memory corruption by causing a userspace interruption of an internal call, related to the call time pass by reference feature...

5CVSS6.8AI score0.00462EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:59 a.m.2 views

SUSE CVE-2010-1862

The chunksplit function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by reference feature...

5CVSS6.7AI score0.00462EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:59 a.m.2 views

SUSE CVE-2010-1861

The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's sleep function to interrupt an internal call to the shmputvar function, which triggers access of a freed resource...

6.4CVSS7.2AI score0.00362EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:58 a.m.1 views

SUSE CVE-2010-2097

The 1 iconvmimedecode, 2 iconvsubstr, and 3 iconvmimeencode functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the call time pass by...

5CVSS6.7AI score0.00571EPSS
Exploits1References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:58 a.m.2 views

SUSE CVE-2010-2101

The 1 striptags, 2 setcookie, 3 strtok, 4 wordwrap, 5 strwordcount, and 6 strpad functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function, related to the...

5CVSS6.7AI score0.0112EPSS
Exploits2References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:58 a.m.1 views

SUSE CVE-2010-2100

The 1 htmlentities, 2 htmlspecialchars, 3 strgetcsv, 4 httpbuildquery, 5 strpbrk, and 6 strtr functions in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents by causing a userspace interruption of an internal function,...

5CVSS6.7AI score0.00918EPSS
Exploits5References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:22 a.m.1 views

SUSE CVE-2015-0830

The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows remote attackers to cause a denial of service application crash via crafted WebGL content...

5CVSS8.4AI score0.01246EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 3:28 a.m.1 views

SUSE CVE-2022-22677

A logic issue in the handling of concurrent media was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5. Video self-preview in a webRTC call may be interrupted if the user answers a phone call...

4.3CVSS6.2AI score0.00207EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:27 a.m.1 views

SUSE CVE-2022-24791

Wasmtime is a standalone JIT-style runtime for WebAssembly, using Cranelift. There is a use after free vulnerability in Wasmtime when both running Wasm that uses externrefs and enabling epoch interruption in Wasmtime. If you are not explicitly enabling epoch interruption it is disabled by default...

9.8CVSS8.7AI score0.00393EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:0 a.m.1 views

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, allows a perpetrator to cause a service failure.

The vulnerability of the Core server component of Oracle WebLogic Server, a software platform of Oracle Fusion Middleware, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS7.1AI score0.00887EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/06 12:0 a.m.2 views

The vulnerability of the Packet Forwarding Engine (PFE) module in Juniper Networks’ Junos OS Evolved and Junos operating systems allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS Evolved and Junos operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.1CVSS6.3AI score0.00138EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/03 12:0 a.m.2 views

The vulnerability of the dcpfe component in Juniper Networks’ Junos operating systems allows a hacker to induce a service failure.

The vulnerability of the dcpfe component in Juniper Networks’ Junos operating systems arises due to buffer overflows in the stack. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by triggering a malfunction of the dcpfe process...

7.8CVSS7.4AI score0.00468EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder