Lucene search
K

22 matches found

Redos
Redos
added 2025/10/31 12:0 a.m.7 views

ROS-20251031-03

A vulnerability in the Apache ActiveMQ software platform is related to the recovery of invalid data in memory data. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code by creating an OpenWire class. arbitrary code by creating a class over the OpenWire protoco...

10CVSS7.9AI score0.99654EPSS
Exploits31
Redos
Redos
added 2025/06/25 12:0 a.m.4 views

ROS-20250625-02

A vulnerability in the br.com.anteros.dbcp.AnterosDBCPConfig component of the Java library for grammar parsing JSON files jackson-databind is related to the recovery of invalid data in memory. Exploitation of the of the vulnerability could allow an attacker acting remotely to cause a denial of...

9.8CVSS8AI score0.26587EPSS
Exploits5
BDU FSTEC
BDU FSTEC
added 2025/05/02 12:0 a.m.2 views

The vulnerability of the Apache ActiveMQ NMS OpenWire Client software platform lies in its ability to restore unreliable data in memory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Apache ActiveMQ NMS OpenWire Client software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01648EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/24 12:0 a.m.10 views

The vulnerability of the Apache OpenMeetings video conferencing software, related to the restoration of unreliable data in memory, allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Apache OpenMeetings video conferencing software lies in the recovery of unreliable data from memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8AI score0.63667EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/07 12:0 a.m.2 views

The vulnerability of the scsi_host_busy() function in the drivers/scsi/scsi_error.c component of the Linux kernel allows a malicious actor to cause a service failure.

The vulnerability of the scsihostbusy function in the drivers/scsi/scsierror.c component of the Linux kernel relates to the recovery of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00242EPSS
Exploits0References39Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:0 a.m.1 views

The vulnerability of the JDBC URL Handler component of the Apache InLong data integration platform allows a attacker to execute arbitrary code.

The vulnerability of the JDBC URL Handler component of the Apache InLong data integration platform relates to the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.01228EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:0 a.m.2 views

The vulnerability of the Jackson-Databind library from the FasterXML project allows for arbitrary code execution due to the inability to recover unreliable data from memory.

The vulnerability of the jackson-databind library from the FasterXML project relates to the restoration of unreliable data in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8.1CVSS7.9AI score0.07483EPSS
Exploits0References9Affected Software16
BDU FSTEC
BDU FSTEC
added 2023/12/15 12:0 a.m.1 views

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data in memory, allowing an attacker to execute commands with local administrator privileges.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute code with local administrator privileges...

10CVSS8AI score0.16573EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/27 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.5016EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/23 12:0 a.m.2 views

The vulnerability of the ColdFusion software platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.4CVSS8.1AI score0.64558EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/20 12:0 a.m.2 views

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data stored in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created UDP packets...

10CVSS7.9AI score0.0109EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:0 a.m.2 views

The vulnerability of the commercial web forum vBulletin, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the commercial web forum vBulletin relates to the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially crafted HTTP request...

10CVSS8.2AI score0.23926EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:0 a.m.1 views

The vulnerability of the Apache InLong data integration platform, related to the recovery of unreliable data in memory, allows attackers to compromise privacy, integrity, and accessibility of the data.

The vulnerability of the Apache InLong data integration platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to compromise privacy, integrity, and accessibility of the data...

10CVSS7.8AI score0.01409EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/30 12:0 a.m.2 views

The vulnerability of the SolarWinds Orion network monitoring software, related to the restoration of unreliable data in memory, allows a intruder to execute arbitrary commands.

The vulnerability of SolarWinds Orion network monitoring software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS7.6AI score0.24439EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/30 12:0 a.m.2 views

The vulnerability of the SolarWinds Orion network monitoring software, related to the restoration of unreliable data in memory, allows a intruder to execute arbitrary commands.

The vulnerability of SolarWinds Orion network monitoring software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS7.6AI score0.25061EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/26 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the ColdFusion software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.8CVSS8.5AI score0.17937EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2023/01/24 12:0 a.m.3 views

PT-2023-1356 · Vmware · Vrealize Log Insight

Name of the Vulnerable Software and Affected Versions: vRealize Log Insight affected versions not specified Description: The issue is related to a deserialization vulnerability in vRealize Log Insight, which can be exploited by an unauthenticated malicious actor to trigger the deserialization of...

7.8CVSS6.8AI score0.0147EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2022/10/31 12:0 a.m.4 views

The vulnerability of the Apache Linkis application connection, management, and orchestration software lies in the recovery of unreliable data in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Apache Linkis application programming interface for connecting, managing, and orchestrating applications is related to the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8AI score0.01747EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.2 views

The vulnerability of the Apache jUDDI software lies in its ability to restore unreliable data from memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Apache jUDDI software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.1AI score0.04115EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.1 views

The vulnerability of Huawei AnyOffice mobile office platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code or gain full control over the application.

The vulnerability of Huawei AnyOffice mobile office platform relates to the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain full control over the application through a specially crafted request...

9.3CVSS8AI score0.00826EPSS
Exploits0References4
Rows per page
Query Builder