Lucene search
+L

1446 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.13 views

The vulnerability of the microprogrammed software of the D-Link DCS-825L network camera allows a intruder to trigger a service failure.

The vulnerability of the microprogrammed software of the D-Link DCS-825L network camera relates to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending a large number of specially crafted network packets SYN...

7.8CVSS7.2AI score0.01299EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.12 views

The vulnerability of the ksmbd module in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the ksmbd module in Linux operating systems is related to the improper release of resources during TCP connection processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.9CVSS6.2AI score0.00726EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/22 12:0 a.m.7 views

The vulnerability of the web interface of microprogramming software for Cisco Small Business Series switches allows a hacker to trigger a service failure.

The vulnerability of the web interface of Cisco Small Business Series Switches’ microprogramming software is related to the possibility of buffer overflow attacks based on a stack mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

8.6CVSS8AI score0.01318EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/05/19 12:0 a.m.11 views

The vulnerability of the bgpd software module for implementing network routing on Unix-like systems allows a hacker to cause service interruptions.

The vulnerability of the bgpd software module for implementing routing on Unix-like systems is related to the issue where an operation is executed outside the buffer in memory when processing BGP OPEN messages with a length of one octet or word. Exploiting this vulnerability allows a remote...

7.8CVSS7.2AI score0.02107EPSS
SaveExploits0References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2023/05/15 3:15 p.m.6 views

CVE-2023-32787

The OPC UA Legacy Java Stack before 6f176f2 enables an attacker to block OPC UA server applications via uncontrolled resource consumption so that they can no longer serve client applications...

7.5CVSS7.1AI score0.01168EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/05/15 12:0 a.m.41 views

Rockwell Automation ArmorStart ST Cross-Site Scripting Vulnerability (CNVD-2023-44290)

Rockwell Automation ArmorStart ST is a simple and cost-effective solution for machine-side control architectures from Rockwell Automation. A cross-site scripting vulnerability exists in Rockwell Automation ArmorStart ST, which can be exploited by an attacker to view user data and modify the web...

5.9CVSS6AI score0.0062EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/05/12 12:0 a.m.9 views

Vulnerability of the Server component: The DML of the MySQL Server database management system, which allows attackers to cause service interruptions.

The vulnerability of the MySQL Server component exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.1CVSS6.3AI score0.01144EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/11 5:51 p.m.8 views

CVE-2023-29029 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

4.7CVSS6.4AI score0.0062EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/11 5:50 p.m.9 views

CVE-2023-29028 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

4.7CVSS6.4AI score0.0062EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/11 5:47 p.m.10 views

CVE-2023-29027 Rockwell Automation ArmorStart ST Vulnerable to Cross-Site Scripting Attack

A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin privileges and network access to view user data and modify the web interface. Additionally, a malicious user could potentially cause...

4.7CVSS5.5AI score0.0062EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.7 views

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server, related to insufficient validation of input data, allows a perpetrator to cause service failures.

The vulnerability of the IBM DB2 database management system and the IBM DB2 Connect Server automatic redirection server is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.9CVSS6.7AI score0.00963EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.13 views

The vulnerability of Juniper Networks’ Junos OS operating system’s IPsec library allows a attacker to induce a service failure.

The vulnerability of Juniper Networks’ Junos OS operating system’s IPsec library is related to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.00644EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.8 views

The vulnerability of the SIP ALG server of Juniper Networks Junos OS allows a attacker to trigger a service failure.

The vulnerability of the SIP ALG server of Juniper Networks Junos OS is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.1AI score0.00616EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/03 12:0 a.m.11 views

The vulnerability of the IBM DB2 database management system, related to errors in processing input data, allows a perpetrator to cause a service failure.

The vulnerability of the IBM DB2 database management system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.1AI score0.01018EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/24 12:0 a.m.8 views

The vulnerability of the APC Easy UPS Online Monitoring Software and Easy UPS Online Monitoring Software lies in the lack of authentication for critical functions, allowing attackers to trigger a service failure.

The vulnerability of the APC Easy UPS Online Monitoring Software and Easy UPS Online Monitoring Software lies in the lack of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

10CVSS7.2AI score0.00712EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/20 12:0 a.m.8 views

The vulnerability of the lou_logFile function in logginc.c, the translator of Liblouis, allows a hacker to cause a service failure.

The vulnerability of the loulogFile function in logginc.c of the Liblouis translator is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.01345EPSS
SaveExploits1References14Affected Software10
BDU FSTEC
BDU FSTEC
added 2023/04/17 12:0 a.m.8 views

The vulnerability of the rmacinstring function in the editing and reproduction tools for PCAP files, Tcpreplay, allows a hacker to cause a service failure.

The vulnerability of the rmacinstring function in the PCAP-file editing and reproduction utility Tcpreplay is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

7.8CVSS7.1AI score0.01468EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/11 12:0 a.m.9 views

The vulnerability of the Vector Packet Processor (VPP) platform, a microprogramming-based software solution for data packet transmission gateways in Cisco Packet Data Networks, allows a hacker to trigger a service failure.

The vulnerability of the Vector Packet Processor VPP platform, a microprogramming-based software for packet transmission networks like the Cisco Packet Data Network Gateway PGW, is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to caus...

5.8CVSS7.2AI score0.00866EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:0 a.m.9 views

The vulnerability of Microprogramming Software in Cisco Business 150, Cisco Business 151 Mesh Extenders, and Cisco Catalyst 9100 arises from the ability to write beyond the buffer boundaries, allowing attackers to cause service interruptions.

The vulnerability of Microprogrammed Software in Cisco Business 150, Cisco Business 151 Mesh Extenders, and Cisco Catalyst 9100 is related to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.4CVSS6.9AI score0.00303EPSS
SaveExploits0References2Affected Software4
The Hacker News
The Hacker News
added 2023/04/03 11:41 a.m.47 views

Western Digital Hit by Network Security Breach - Critical Services Disrupted!

Data storage devices maker Western Digital on Monday disclosed a "network security incident" that involved unauthorized access to its systems. The breach is said to have occurred on March 26, 2023, enabling an unnamed third party to gain access to a "number of the company's systems." Following th...

6.7AI score
SaveExploits0
Rows per page
Query Builder