Lucene search
+L

1242 matches found

BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.15 views

The vulnerability in the Google Chrome web browser allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the Google Chrome web browser is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to influence the confidentiality, integrity, and accessibility of the protected information through a specially crafted HTML page...

10CVSS7.8AI score0.01976EPSS
SaveExploits1References12Affected Software5
ATTACKERKB
ATTACKERKB
added 2019/08/13 12:0 a.m.869 views

CVE-2019-14809

net/url in Go before 1.11.13 and 1.12.x before 1.12.8 mishandles malformed hosts in URLs, leading to an authorization bypass in some applications. This is related to a Host field with a suffix appearing in neither Hostname nor Port, and is related to a non-numeric port number. For example, an...

9.8CVSS1.2AI score0.08359EPSS
SaveIn wildExploits1References14
BDU FSTEC
BDU FSTEC
added 2019/08/13 12:0 a.m.14 views

The vulnerability of the PDFium browser’s PDF-content processor in Google Chrome, which allows a hacker to trigger a service failure.

The vulnerability of the PDFium browser’s PDF-content processing component in Google Chrome is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted web page...

6.8CVSS7.8AI score0.00723EPSS
SaveExploits0References7Affected Software4
CNVD
CNVD
added 2019/08/02 12:0 a.m.6 views

Wind River Systems VxWorks Numeric Error Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A numeric error vulnerability exists in Wind River Systems VxWorks. An attacker could exploit this vulnerability to execute code...

9.8CVSS7.1AI score0.7525EPSS
SaveExploits5References1
CNVD
CNVD
added 2019/08/01 12:0 a.m.6 views

Das U-Boot Digital Error Vulnerability

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A numeric error vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to caus...

9.8CVSS7.1AI score0.02446EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/31 12:0 a.m.7 views

Libav Number Error Vulnerability

Libav is Libav team's set of cross-platform audio and video can be recorded, converted solution, which includes a libavcodec encoder. A numeric error vulnerability exists in Libav. The vulnerability stems from a networked system or product that does not properly calculate or convert the resulting...

6.5CVSS6.7AI score0.01198EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/07/24 12:0 a.m.9 views

libdwarf Numeric Error Vulnerability

libdwarf is a library and command line tool for reading and writing DWARF2 standardized debug data format. A numeric error vulnerability exists in libdwarf. The vulnerability arises from a networked system or product that does not properly compute or convert resulting numbers. An attacker could...

6.5CVSS9.4AI score0.0273EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/07/14 12:0 a.m.7 views

VideoLAN VLC media player digital error vulnerability

VideoLAN VLC media player is a free, open source cross-platform multimedia player also a multimedia framework organized by VideoLAN France. The product supports the playback of a variety of media files, CD-ROMs, etc., a variety of audio and video formats WMV, MP3, etc. and so on. A numeric error...

7.8CVSS7AI score0.02107EPSS
SaveExploits0References1
OSV
OSV
added 2019/06/24 6:15 p.m.8 views

DEBIAN-CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

6.5CVSS6.7AI score0.01966EPSS
SaveExploits1References1
NVD
NVD
added 2019/06/24 6:15 p.m.27 views

CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

6.5CVSS6.2AI score0.01966EPSS
SaveExploits1References2
OSV
OSV
added 2019/06/24 6:15 p.m.40 views

UBUNTU-CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

6.5CVSS5.8AI score0.01966EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2019/06/24 5:33 p.m.29 views

CVE-2019-9085

Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service invoice-creation outage via the nfile parameter to visualizzacontratto.php with invalid arguments any non-numeric value, as demonstrated by the anno=2019&idtransazione=1&numerocontratto=1&nfile=a query string ...

6.2AI score0.01966EPSS
SaveExploits1References2
CNVD
CNVD
added 2019/06/21 12:0 a.m.7 views

Cisco Integrated Management Controller Numeric Error Vulnerability

Cisco Integrated Management Controller IMC is a set of software from the American company Cisco Cisco for the management of UCS Unified Computing System. The software supports HTTP, SSH access, etc., and can perform operations such as powering on, powering off and rebooting the server. A numeric...

5.5CVSS6.5AI score0.00385EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:0 a.m.8 views

The vulnerability of the TCP Selective Acknowledgment mechanism in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the TCP SACK mechanism TCP Selective Acknowledgement in the Linux operating system is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to cause a service failure by sending a specially crafted sequence of SACK packets remotely...

7.8CVSS6.9AI score0.98745EPSS
SaveExploits4References47Affected Software22
OSV
OSV
added 2019/06/07 9:29 p.m.7 views

DEBIAN-CVE-2019-9084

In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...

4.9CVSS4.9AI score0.01743EPSS
SaveExploits1References1
Debian CVE
Debian CVE
added 2019/06/07 8:31 p.m.48 views

CVE-2019-9084

In Hoteldruid before 2.3.1, a division by zero was discovered in $numtabelle in tabtariffe.php aka the numtariffa1 parameter due to the mishandling of non-numeric values, as demonstrated by the /tabtariffe.php?anno=YEAR&numtariffa1=1a URI. It could allow an administrator to conduct remote denial ...

4.9CVSS5AI score0.01743EPSS
SaveExploits1
OSV
OSV
added 2019/06/03 5:26 p.m.5 views

GHSA-G74R-FFVR-5Q9F Memory Exposure in concat-stream

Versions of concat-stream before 1.5.2 are vulnerable to memory exposure if userp provided input is passed into write Versions 1.3.0 are not affected due to not using unguarded Buffer constructor. Recommendation Update to version 1.5.2, 1.4.11, 1.3.2 or later. If you are unable to update make sur...

5.9AI score
SaveExploits0References4
Veracode
Veracode
added 2019/05/02 5:12 a.m.38 views

Buffer Overflow

PostgreSQL is an advanced object-relational database management system DBMS. An information leak flaw was found in the way the PostgreSQL database server handled certain error messages. An authenticated database user could possibly obtain the results of a query they did not have privileges to...

9.8CVSS8.3AI score0.05533EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:0 a.m.13 views

The vulnerability of the NTFS-3G driver for the NTFS file system in FUSE modules of Unix-like operating systems, related to buffer overflows, allows attackers to elevate their privileges to a superuser level.

The vulnerability of the NTFS-3G driver for the NTFS file system in the FUSE module of Unix-like operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to elevate their privileges to a superuser level...

5.5CVSS6.4AI score0.00531EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.9 views

The compatibility subsystem for running Linux applications allows the Windows Subsystem for Linux operating systems. This enables attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

7CVSS7.7AI score0.00934EPSS
SaveExploits0References2
Rows per page
Query Builder