Lucene search
+L

1091 matches found

BDU FSTEC
BDU FSTEC
added 2024/08/16 12:0 a.m.21 views

The vulnerability of PPMD in operating systems Juniper Networks Junos OS and Junos OS Evolved allows a attacker to cause a service failure.

The vulnerability of PPMD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to memory release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.3CVSS5.5AI score0.00228EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/08/12 12:0 a.m.11 views

The vulnerability of the gf_av1_reset_state() function on the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfav1resetstate function on the GPAC multimedia platform is related to the repeated release of memory. Exploiting this vulnerability could allow a hacker to cause a service failure...

7.8CVSS6.7AI score0.0037EPSS
SaveExploits1References6Affected Software3
Redos
Redos
added 2024/08/12 12:0 a.m.8 views

ROS-20240812-34

A vulnerability in the utf8asn1str function of the ASN1 parser of the cURL command line utility is related to the release of previously unallocated memory when processing the ASN1 UTF-8 string. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

7.5CVSS7AI score0.04296EPSS
SaveExploits1
Redos
Redos
added 2024/08/12 12:0 a.m.318 views

ROS-20240812-14

Vulnerability of the utf8asn1str function of the ASN1 parser of the cURL command line utility is related to the release of previously unallocated memory when processing the ASN1 UTF-8 string. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

7.5CVSS6.8AI score0.04296EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.14 views

The vulnerability of the utf8asn1str() function in the ASN1 parser’s command-line utility cURL allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the utf8asn1str function in the ASN1 parser’s command-line utility cURL is related to the release of previously unallocated memory during the processing of ASN1 UTF-8 strings. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service...

7.8CVSS7.9AI score0.04296EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.13 views

The vulnerability of the curl_url_get() function in the command-line utility cURL allows a attacker to cause a service failure.

The vulnerability of the curlurlget function in the command-line utility cURL is related to the release of previously unallocated memory due to the use of the Punycode method for converting IDN domains. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

3.1CVSS6.8AI score0.00786EPSS
SaveExploits1References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.12 views

The vulnerability of the vf.c and vf_vo.c files of the Mplayer media player allows a hacker to cause a service failure.

The vulnerability of the vf.c and vfvo.c files in the Mplayer media player is related to the lack of memory release after the effective lifespan of these files has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00358EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.15 views

The vulnerability of the HTTP client in Apache CXF web services allows attackers to trigger a service failure.

The vulnerability of the HTTP client component in Apache CXF web services is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

3.5CVSS6.4AI score0.01197EPSS
SaveExploits0References5Affected Software3
Redos
Redos
added 2024/07/16 12:0 a.m.22 views

ROS-20210716-02

A vulnerability in the DICOM DCMTK library is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service Vulnerability of the library for working with DICOM DCMTK format is related to allocation of heap memory for parsing the data, b...

7.5CVSS6.9AI score0.01728EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/07/12 12:0 a.m.14 views

Vulnerability of QTS and QuTS operating systems, as well as Qnap network devices, related to the re-release of memory allows attackers to execute arbitrary code.

The vulnerability of QTS and QuTS operating systems, as well as Qnap network devices, is related to the re-release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

7.2CVSS6.3AI score0.00696EPSS
SaveExploits0References3
CVE
CVE
added 2024/07/11 4:27 p.m.100 views

CVE-2024-39549

CVE-2024-39549 affects Junos OS and Junos OS Evolved. A crafted BGP Path attribute update can trigger a Missing Release of Memory after Effective Lifetime in the routing process daemon (rpd), causing memory to be allocated but not freed in all paths and leading to a DoS. Impact is memory exhausti...

8.7CVSS7.5AI score0.00466EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/07/11 12:0 a.m.67 views

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

8.7CVSS6.7AI score0.00466EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/11 12:0 a.m.13 views

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

6CVSS6.7AI score0.00228EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/10 12:0 a.m.12 views

PT-2024-28521 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS on MX Series versions prior to 21.2R3-S6 Junos OS on MX Series version 21.4 prior to 21.4R3-S6 Junos OS on MX Series version 22.1 prior to 22.1R3-S5 Junos OS on MX Series version 22.2 prior to 22.2R3-S3 Junos OS on MX Series version...

6CVSS7.3AI score0.00217EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/07/10 12:0 a.m.15 views

Juniper Junos OS Vulnerability (JSA82999)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82999 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a...

6CVSS5.7AI score0.00217EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/07/10 12:0 a.m.95 views

Juniper Junos OS Vulnerability (JSA83011)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA83011 advisory. - An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a network based,...

8.7CVSS5.6AI score0.00466EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2024/07/09 12:31 a.m.31 views

Undertow Missing Release of Memory after Effective Lifetime vulnerability

A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the...

5.3CVSS6.6AI score0.01866EPSS
SaveExploits0References14Affected Software1
Redos
Redos
added 2024/07/08 12:0 a.m.37 views

ROS-20240708-01

Vulnerability in the HTTP/2 network protocol implementation of the cURL command line utility is related to memory release errors. memory freeing errors. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service Vulnerability in the cURL command line...

3.5CVSS7.1AI score0.01681EPSS
SaveExploits1
Redos
Redos
added 2024/07/08 12:0 a.m.6 views

ROS-20240708-21

Vulnerability in cURL command line utility is due to bugs in protocol removal logic. Exploitation The exploitation of the vulnerability may allow a remote intruder to gain access to protected information Vulnerability in the HTTP/2 network protocol implementation of the cURL command line utility ...

8.6CVSS7.2AI score0.36081EPSS
SaveExploits2
AstraLinux
AstraLinux
added 2024/06/26 1:32 p.m.19 views

Astra Linux – Vulnerability in Parsec

The vulnerability of the pdp-id utility in the PARSEC security subsystem is related to improper memory release after its use. Exploiting this vulnerability allows an attacker to cause a service failure...

5.5CVSS5.5AI score
SaveExploits0References3
Rows per page
Query Builder