Lucene search
K

2506 matches found

BDU FSTEC
BDU FSTEC
added 2024/05/07 12:0 a.m.5 views

The vulnerability of the flow processing daemon (flowd) in Juniper Networks’ Junos OS routers of the MX series allows a attacker to cause a service failure.

The vulnerability of the flow processing daemon on Juniper Networks’ Junos OS routers of the MX series is related to the operation of data out of the buffer in memory due to improperly implemented URL filtering based on templates. Exploiting this vulnerability can allow a remote attacker to cause...

7.8CVSS5.8AI score0.00694EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/03 12:0 a.m.5 views

The vulnerability of the microprogramming software in SIP phones of the Mitel series 6800, 6900, 6970, and 6900w allows a intruder to execute arbitrary commands.

The vulnerability of the microprogramming software of Mitel telephones of models 6800, 6900, 6970, and 6900w lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending...

9CVSS6.2AI score0.0025EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/30 12:0 a.m.4 views

The vulnerability of Adobe Illustrator’s graphic editor arises from the possibility of an operation beyond the buffer boundaries in memory, allowing a malicious actor to gain unauthorized access to protected information.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS5.8AI score0.00245EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/26 12:0 a.m.5 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page or file...

10CVSS7.3AI score0.01228EPSS
Exploits1References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/04/24 12:0 a.m.4 views

The vulnerability of the KEYENCE CORPORATION’s programming software for programmable logic controllers, as well as the data viewing and analysis software for controllers called KV REPLAY VIEWER, relates to writing beyond the buffer boundaries in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the KEYENCE CORPORATION KV STUDIO programming software and the KV REPLAY VIEWER data viewing and analysis software lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remote...

10CVSS7.9AI score0.00848EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/18 12:0 a.m.2 views

The vulnerability of the Daemon Routing Protocols (RPD) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause service interruptions.

The vulnerability of the Daemon Routing Protocols RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS5.7AI score0.00664EPSS
Exploits0References2Affected Software2
Huawei
Huawei
added 2024/04/17 12:0 a.m.30 views

Security Advisory - Huawei PC Product Vulnerable to Improper Restriction of Operations within the Bounds of a Memory Buffer

A Huawei PC product is vulnerable to improper restriction of operations within the bounds of a memory buffer. Successful exploitation of this vulnerability could compromise SMRAM memory, resulting in code execution in SMM.Vulnerability ID:HWPSIRT-2023-11450 This vulnerability has been assigned a...

7.8CVSS7.1AI score0.0013EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.4 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot security loading protocol for Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions using a specially created .bcd file...

6.5CVSS8.1AI score0.00813EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.3 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

8.3CVSS7.8AI score0.01231EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.4 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

7.1CVSS7.9AI score0.01273EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.4 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

7.1CVSS7.9AI score0.01273EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/04/12 3:26 p.m.21 views

CVE-2024-30398 Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash

An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When a high amount of specific traffic is received on a...

8.7CVSS7.7AI score0.00602EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2024/04/11 12:0 a.m.20 views

Juniper Junos OS Vulnerability (JSA79176)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79176 advisory. - An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an...

8.7CVSS5.6AI score0.00602EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.6 views

PT-2024-3102 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions 21.2 before 21.2R3-S7 Junos OS versions 21.4 before 21.4R3-S6 Junos OS versions 22.1 before 22.1R3-S5 Junos OS versions 22.2 before 22.2R3-S3 Junos OS versions 22.3 before 22.3R3-S2 Junos OS versions 22.4 before 22.4R3 Junos...

8.7CVSS6.8AI score0.00602EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.3 views

PT-2024-2778 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security-feature bypass vulnerability in the implementation of the Secure Boot protocol in Windows operating systems. It is caused by a buffer overflow in memory,...

7.8CVSS9.2AI score0.00655EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2024/04/09 12:0 a.m.3 views

The vulnerability of thejq programming language lies in its ability to write data beyond the buffer boundaries in memory, which allows attackers to trigger a service failure.

The vulnerability of the JQ programming language lies in the overflow of the stack buffer in distributions that use decNumber. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00444EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/04 12:0 a.m.4 views

The vulnerability of the programmatic tools and libraries used for working with OpenSC smart cards stems from improper restrictions on operations within memory buffers. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the programmatic tools and libraries used to work with OpenSC smart cards is related to memory errors during card registration using the pkcs15-init function. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

6.8CVSS6.6AI score0.01174EPSS
Exploits0References12Affected Software6
Redos
Redos
added 2024/04/03 12:0 a.m.28 views

ROS-20240403-09

Vulnerability of the peekforas4capability function of the software tool for implementing network routing on Unix-like systems FRRouting is related to flaws in the use of the assert function. Unix-like systems FRRouting is related to flaws in using assert function. Exploitation The vulnerability...

7.5CVSS7.3AI score0.02152EPSS
Exploits3
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:0 a.m.3 views

The vulnerability of the Arena Simulation software in simulating and automating discrete events lies in its ability to read data beyond the buffer in memory. This allows attackers to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Arena Simulation software for modeling and automating discrete events is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and compromise the confidentiality, integrity, and accessibility of...

7.8CVSS6.2AI score0.00256EPSS
Exploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2024/03/28 4:14 a.m.3 views

SUSE CVE-2024-26646

In the Linux kernel, the following vulnerability has been resolved: thermal: intel: hfi: Add syscore callbacks for system-wide PM The kernel allocates a memory buffer and provides its location to the hardware, which uses it to update the HFI table. This allocation occurs during boot and remains...

4.9CVSS6.7AI score0.00227EPSS
Exploits0References10
Rows per page
Query Builder