Lucene search
K

524 matches found

Prion
Prion
added 2018/12/20 5:29 p.m.29 views

Design/Logic Flaw

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors similar issue to CVE-2015-5262 vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear...

4.3CVSS5.5AI score0.19312EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2018/12/20 5:0 p.m.101 views

CVE-2018-1000872

Technical details for CVE-2018-1000872 are not provided in the connected documents. Public information here only reiterates the initial description; no product/vendor/version specifics or fixes are included.

6.5CVSS5.5AI score0.01276EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2018/12/20 5:0 p.m.24 views

CVE-2018-1000872

OpenKMIP PyKMIP version All versions before 0.8.0 contains a CWE 399: Resource Management Errors similar issue to CVE-2015-5262 vulnerability in PyKMIP server that can result in DOS: the server can be made unavailable by one or more clients opening all of the available sockets. This attack appear...

6.5CVSS6.2AI score0.01276EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.4 views

The vulnerability of NVIDIA GeForce Experience’s software, caused by privilege management errors, allows a hacker to elevate their privileges.

The vulnerability of NVIDIA GeForce Experience software is due to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

8.8CVSS7.2AI score0.00309EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.4 views

The vulnerability of Cisco AMP’s security tools for end devices allows attackers to trigger a service failure.

The vulnerability of Cisco AMP’s anti-virus and anti-malware tools for end devices is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure a critical kernel error remotely, provided that the system is operating in a network...

7.1CVSS6.2AI score0.01482EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/10/05 12:0 a.m.4 views

The vulnerability of Microprogramming Software, including Intel Converged Security and Manageability Engine (CSME), Intel Server Platform Services (SPS), and Intel Trusted Execution Engine (TXE), arises due to privilege management errors, allowing attackers to disclose or modify protected information.

The vulnerabilities of Intel CSME, Intel SPS, and Intel TXE are caused by privilege management errors. Exploiting these vulnerabilities can allow attackers to disclose or modify protected information...

7.3CVSS5.5AI score0.00433EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2018/10/05 12:0 a.m.4 views

The vulnerability of the Intel-SA-00086 Detection Tool arises from privilege management errors, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Intel-SA-00086 Detection Tool arises from privilege management errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

6.2CVSS5.8AI score0.00446EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/05 12:0 a.m.2 views

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller (BMC) arises from privilege management errors, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the microprogramming software of the Intel Baseboard Management Controller BMC is caused by privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure...

8.3CVSS6AI score0.02136EPSS
Exploits0References4Affected Software1
ICS
ICS
added 2018/08/28 12:0 a.m.162 views

Schneider Electric Modicon M221

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely Vendor: Schneider Electric Equipment: Modicon M221 Vulnerabilities: Information Management Errors, Permissions, Privileges, and Access Controls 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow...

9.8CVSS9.4AI score0.02478EPSS
Exploits0References5
ICS
ICS
added 2018/07/03 12:0 a.m.131 views

Rockwell Automation Allen-Bradley Stratix 5950

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Rockwell Automation Equipment: Allen-Bradley Stratix 5950 Vulnerabilities: Improper Input Validation, Improper Certificate Validation, Resource Management Errors 2. RISK EVALUATION Successful...

8.6CVSS8.6AI score0.99903EPSS
Exploits18References6
Snyk
Snyk
added 2018/05/18 7:29 p.m.1 views

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode function of PdfPagesTree.cpp. Remote attackers could leverage this vulnerability to cause a denial of...

5.5CVSS6.8AI score0.01146EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2018/04/27 12:0 a.m.4 views

The vulnerability of the ReadTIFFImage function in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadTIFFImage function in the coders/tiff.c file of the console-based graphic editor ImageMagick is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through the use of a specially crafted file...

7.1CVSS7.2AI score0.01756EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2018/04/12 12:0 a.m.3 views

The vulnerability of the Parallel Crypto Engine encryption subsystem in the Linux operating system, which allows a hacker to cause a service failure or exert other effects.

The vulnerability of the Parallel Crypto Engine encryption subsystem crypto/pcrypt.c in the Linux operating system, which has resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure or exert other effects through a specially crafted sequence of...

7.8CVSS7.2AI score0.00407EPSS
Exploits0References18Affected Software1
Positive Technologies
Positive Technologies
added 2018/03/28 12:0 a.m.3 views

PT-2018-3841 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software versions 15.42T through 15.43M Cisco IOS Software version 15.42CG and later Description: The issue is related to resource management errors in the Login Enhancements Login Block feature of Cisco IOS Software. It may allow a...

7.1CVSS6.9AI score0.05051EPSS
Exploits0References7
NVD
NVD
added 2018/02/15 4:29 p.m.22 views

CVE-2017-17290

The Light Directory Access Protocol LDAP clients of Huawei TE60 with software V600R006C00, ViewPoint 9030 with software V100R011C02, V100R011C03 have a resource management errors vulnerability. An unauthenticated, remote attacker may make the LDAP server not respond to the client's request by...

7.5CVSS7.6AI score0.01279EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2018/02/08 12:0 a.m.3 views

The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to induce a service failure.

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.7AI score0.00422EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/01/24 12:0 a.m.4 views

The vulnerability of the `ih264d_get_implicit_weights` function (decoder/ih264d_parse_bslice.c) in the Media Framework component of the Android operating system, which allows a perpetrator to manipulate the accessibility of data.

The vulnerability of the ih264dgetimplicitweights function in the decoder/ih264dparsebslice.c file of the Media Framework component of the Android operating system is related to resource management errors. Exploiting this vulnerability could allow a remote attacker to compromise data accessibilit...

7.8CVSS7.8AI score0.00441EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/01/24 12:0 a.m.3 views

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to compromise the accessibility of data

The vulnerability of the Media Framework component in the Android operating system is related to resource management errors. Exploiting this vulnerability allows an attacker to compromise data accessibility...

7.8CVSS7.8AI score0.00422EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/03 12:0 a.m.3 views

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Media Framework component in the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.00806EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/03 12:0 a.m.3 views

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Media Framework component in the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.01067EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder