Lucene search
K

1376 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.2 views

The vulnerability of the wav_write_header function in the libsndfile library, which relates to reading beyond the allowable buffer data limits, allows a attacker to cause a service failure.

The vulnerability of the wavwriteheader function in the libsndfile library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

6.5CVSS6.8AI score0.00879EPSS
Exploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.1 views

The vulnerability of the `caca_resize` function in the library for converting images into ASCII art in libcaca involves an out-of-buffer operation. This vulnerability allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the cacaresize function in the library that converts images into ASCII art in libcaca is related to the output of the operation outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and ev...

7.8CVSS7AI score0.0012EPSS
Exploits1References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.3 views

The vulnerability of the EVP_CipherUpdate, EVP_EncryptUpdate, and EVP_DecryptUpdate functions in the OpenSSL library for TLS and SSL protocols, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability of the EVPCipherUpdate, EVPEncryptUpdate, and EVPDecryptUpdate functions in the OpenSSL library for TLS and SSL protocols is related to a numerical overflow condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.5CVSS6.6AI score0.0054EPSS
Exploits0References20Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.2 views

The vulnerability of the MagickCore/visual-effects.c file, a set of programs for reading and editing ImageMagisk files, arises from the lack of zero-division checking. This allows an attacker to trigger a service failure.

The vulnerability of the MagickCore/visual-effects.c file, a set of programs for reading and editing ImageMagisk files, is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.1CVSS6.7AI score0.0013EPSS
Exploits0References13Affected Software5
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.3 views

Oracle Java SE 输入验证错误漏洞

Oracle Java SE is an Oracle Corporation Oracle for the development and deployment of Java applications for desktops, servers, and embedded devices and real-time environments. An input validation error vulnerability exists in Oracle Java SE version 7u301, which originates from incorrect input...

4.3CVSS6.5AI score0.00233EPSS
Exploits0References46
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.2 views

The vulnerability of the DwaCompressor::Classifier::Classifier function in software for storing images with wide dynamic range brightness in OpenEXR, related to a single offset error, allows attackers to cause service interruptions.

The vulnerability of the DwaCompressor::Classifier::Classifier function in software for storing images with wide dynamic range brightness in OpenEXR is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause service failures...

6.5CVSS6.7AI score0.00372EPSS
Exploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.1 views

The vulnerability of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the acceptable buffer limit. This allows attackers to cause service failures.

The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.5CVSS6.9AI score0.00576EPSS
Exploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.3 views

The vulnerability of the `str_lower_case_match` component in the Oniguruma regular expression library, which involves reading data beyond the allowed buffer limits, allows attackers to cause service interruptions.

The vulnerability of the strlowercasematch component in the Oniguruma regular expression library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.7AI score0.00232EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.3 views

The vulnerability of the software for creating a private virtual network, astra-openvpn-server, related to code errors, allows a intruder to trigger a service failure.

The vulnerability of the software used to create the private virtual network astra-openvpn-server is related to a code error that prevents the /etc/openvpn/keys/ directory from being created. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

3.5CVSS5.6AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.3 views

The vulnerability of the fly-fm file manager, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the fly-fm file manager is related to incorrect calculation of MD5 in the program window. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

4CVSS5.5AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.2 views

The vulnerability of the PALM image encoding engine in the ImageMagick console-based graphics editor allows an attacker to trigger a service failure by exceeding the allowed buffer data size.

The vulnerability of the PALM image encoding engine in the ImageMagick graphics editor involves reading data beyond the acceptable buffer limits. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

5.3CVSS6.9AI score0.00973EPSS
Exploits1References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.3 views

The vulnerability of the Trend Micro Home Network Security anti-virus protection, related to resource release errors, allows a perpetrator to trigger a service failure.

The vulnerability of the Trend Micro Home Network Security antivirus protection lies in resource release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.00688EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/25 12:0 a.m.2 views

The vulnerability of the Dovecot mail server, related to resource management errors, allows a hacker to cause a service failure.

The vulnerability of the Dovecot mail server is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5CVSS6.8AI score0.01243EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.1 views

The vulnerability in the configuration of Junos OS operating system-based ACX5800, EX9200, MX10000, MX240, MX480, and MX960 routers allows a attacker to cause service interruptions.

The vulnerability of the configuration of Junos OS operating system routers of the ACX5800, EX9200, MX10000, MX240, MX480, and MX960 series is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS6AI score0.00268EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.2 views

The vulnerability of Junos OS routers in the MX series, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of Junos OS routers in the MX series is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a attacker to cause service interruptions...

5.5CVSS5.9AI score0.00045EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.2 views

The vulnerability in the firewall filter configuration of Junos OS operating systems for MX series routers, PTX10003, and PTX10008, which allows a hacker to trigger a service failure.

The vulnerability of the firewall filter configuration in Junos OS operating systems for MX series routers, PTX10003, and PTX10008, relates to improper handling of exceptional states. Exploiting this vulnerability can allow a malicious actor to trigger service interruptions remotely...

7.8CVSS7.2AI score0.00241EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:0 a.m.1 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images allows for uncontrolled resource consumption, enabling attackers to cause service failures.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5CVSS7.5AI score0.00818EPSS
Exploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.1 views

The vulnerability of the TRUNCATE function implementation in the IBM DB2 database management system allows a hacker to trigger a service failure.

The vulnerability of the TRUNCATE function implementation in the IBM DB2 database management system is related to incorrect validation of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions using the SELECT query operator...

5.3CVSS6.5AI score0.00245EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.2 views

The vulnerability of the SSL-VPN portal for FortiOS operating systems allows a hacker to induce a service failure.

The vulnerability of the SSL-VPN portal for FortiOS operating systems is related to the execution of operations outside the buffer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted POST request...

5.3CVSS7.4AI score0.00534EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.2 views

The vulnerability of IBM DB2 JDBC database management system client allows a attacker to trigger a service failure.

The vulnerability of the IBM DB2 database management system’s JDBC client relates to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by using specially crafted commands...

6.5CVSS6.8AI score0.00296EPSS
Exploits0References5Affected Software2
Rows per page
Query Builder