Lucene search
K

359 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.1 views

The vulnerability of the Jackson-databind library in the FasterXML project, related to the restoration of unreliable data in memory, allows a attacker to cause a service failure.

The vulnerability of the Jackson-databind library in the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.00229EPSS
Exploits1References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.1 views

The vulnerability of the netfilter subsystem in the Linux operating system, which allows a hacker to cause a service failure or expose sensitive information

The vulnerability of the netfilter subsystem in the Linux operating system is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to cause a service failure or expose sensitive information...

7.1CVSS6.7AI score
Exploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:0 a.m.1 views

The vulnerability of the Serialization component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows a perpetrator to trigger a service failure.

The vulnerability of the Serialization component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to cause service interruptions remotel...

5.3CVSS6.2AI score0.00143EPSS
Exploits0References17Affected Software6
CNNVD
CNNVD
added 2023/08/25 12:0 a.m.2 views

go-libp2p 资源管理错误漏洞

go-libp2p is the libp2p implementation in Go. A resource management error vulnerability exists in go-libp2p 0.27.3 and earlier versions, which stems from a vulnerability that allows an attacker to store an arbitrary amount of data in a remote node's memory using signed peer records...

7.5CVSS7.5AI score0.00395EPSS
Exploits0References5
NCSC
NCSC
added 2023/08/09 12:0 a.m.1 views

Vulnerability fixed in Intel processors

A vulnerability has been fixed in the microcode of several Intel processors1. The vulnerability has been named "Downfall" and allows a local, authenticated malicious person to manipulate the operation of memory optimization. This allows the malicious party to gain access to memory locations...

6.5CVSS6.4AI score0.00781EPSS
Exploits1
Positive Technologies
Positive Technologies
added 2023/07/24 12:0 a.m.3 views

PT-2023-4081 · Abb · Abb Ability Zenon

Name of the Vulnerable Software and Affected Versions: ABB Ability zenon versions 11 build through 11 build 106404 Description: A vulnerability exists in the ABB Ability zenon system, allowing low-privileged users to read and update data in various directories. This issue can be exploited by...

7.5CVSS7.4AI score0.00431EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.1 views

The vulnerability of the Orchid Platform, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Orchid Platform relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.07112EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/07/14 12:0 a.m.21 views

Fedora 37 : cups (2023-9dbd5b28d4)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9dbd5b28d4 advisory. 2218124 - The command cancel -x does not remove job files 2218123 - Delays printing to lpd when reserved ports are exhausted Security fix for...

7.1CVSS6.8AI score0.00055EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2023/05/31 4:15 p.m.1 views

CVE-2023-29747

Story Saver for Instragram - Video Downloader 1.0.6 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the...

9.8CVSS7.1AI score0.00569EPSS
Exploits1References4
OSV
OSV
added 2023/05/30 8:15 p.m.4 views

CVE-2023-29732

SoLive 1.6.14 thru 1.6.20 for Android exists exposed component, the component provides the method to modify the SharedPreference file. The attacker can use the method to modify the data in any SharedPreference file, these data will be loaded into the memory when the application is opened. Dependi...

9.8CVSS5.8AI score0.0027EPSS
Exploits1References1
Amazon
Amazon
added 2023/05/16 12:0 a.m.84 views

Medium: libssh2

Issue Overview: An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the libssh2packetrequire and libssh2packetrequirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. CVE-2019-3859 An out of...

9.1CVSS7.9AI score0.01176EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.2 views

The vulnerability of the Apache Linkis application connection, management, and orchestration software lies in the recovery of unreliable data in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Apache Linkis application connection, management, and orchestration software is related to the lack of effective parameter filtering. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.04863EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/20 12:0 a.m.1 views

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data stored in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created UDP packets...

10CVSS7.9AI score0.00466EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:0 a.m.1 views

The vulnerability of the commercial web forum vBulletin, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the commercial web forum vBulletin relates to the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using a specially crafted HTTP request...

10CVSS8.2AI score0.93341EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:0 a.m.1 views

The vulnerability of the Apache InLong data integration platform, related to the recovery of unreliable data in memory, allows attackers to compromise privacy, integrity, and accessibility of the data.

The vulnerability of the Apache InLong data integration platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to compromise privacy, integrity, and accessibility of the data...

10CVSS7.8AI score0.01241EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:0 a.m.2 views

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in its ability to restore unreliable data stored in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially created UDP packets...

10CVSS8.6AI score0.82326EPSS
Exploits3References2Affected Software1
OpenVAS
OpenVAS
added 2023/03/31 12:0 a.m.16 views

Fedora: Security Advisory for redis (FEDORA-2023-86068d1187)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.9AI score0.45293EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/30 12:0 a.m.1 views

The vulnerability of the SolarWinds Orion network monitoring software, related to the restoration of unreliable data in memory, allows a intruder to execute arbitrary commands.

The vulnerability of SolarWinds Orion network monitoring software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS7.6AI score0.11276EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/30 12:0 a.m.1 views

The vulnerability of the SolarWinds Orion network monitoring software, related to the restoration of unreliable data in memory, allows a intruder to execute arbitrary commands.

The vulnerability of SolarWinds Orion network monitoring software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS7.5AI score0.17228EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/30 12:0 a.m.1 views

The vulnerability of the SolarWinds Orion network monitoring software, related to the restoration of unreliable data in memory, allows a intruder to execute arbitrary commands.

The vulnerability of SolarWinds Orion network monitoring software lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS7.6AI score0.11276EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder