Lucene search
+L

474 matches found

BDU FSTEC
BDU FSTEC
added 2020/10/07 12:0 a.m.5 views

The vulnerability of the reduceRight method in Thunderbird email clients, Firefox browsers, and the SeaMonkey software suite allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the reduceRight method in Thunderbird email clients, Firefox browsers, and the SeaMonkey software suite is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures remotely...

10CVSS8.2AI score0.75691EPSS
SaveExploits17References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.14 views

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...

4.3CVSS6.6AI score0.00324EPSS
SaveExploits0References3Affected Software2
NVD
NVD
added 2020/08/27 10:15 p.m.21 views

CVE-2020-10517

An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not allow unauthorized access to any repository conten...

4.3CVSS4.5AI score0.0105EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/08/19 12:0 a.m.9 views

The vulnerability of the vhost-crypto module in the libraries and drivers for fast packet processing in dpdk allows a hacker to gain access to confidential data.

The vulnerability of the vhost-crypto module in the libraries and drivers for fast packet processing in dpdk is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

4.6CVSS6.5AI score0.00353EPSS
SaveExploits0References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/08/19 12:0 a.m.11 views

The vulnerability of the stralloc_readyplus function in the netqmail mail client allows a hacker to trigger a service failure.

The vulnerability of the strallocreadyplus function in the netqmail mail client is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

7.8CVSS7.3AI score0.10789EPSS
SaveExploits4References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.8 views

The vulnerability of the `update_recv_order` function in the RDP client FreeRDP allows a intruder to gain unauthorized access to protected information.

The vulnerability of the updaterecvorder function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

3.5CVSS6.8AI score0.02003EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.9 views

The vulnerability of the update_recv_order function in the RDP client FreeRDP allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the updaterecvorder function in the RDP client FreeRDP is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

3.5CVSS6.8AI score0.02003EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/06/30 12:0 a.m.6 views

The vulnerability in the Linux kernel’s driver/tty/vt/keyboard.c file, which allows a hacker to execute arbitrary code.

The vulnerability in the Linux kernel’s driver/tty/vt/keyboard.c component is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.1AI score0.0057EPSS
SaveExploits1References40Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:0 a.m.11 views

The vulnerability of the vclmi.dll component in the OpenOffice.org office software suite, specifically LibreOffice, relates to numerical processing errors. This vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the vclmi.dll component in the OpenOffice.org suite of office programs for LibreOffice is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...

10CVSS5.4AI score0.13734EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.8 views

The vulnerability of the whoopsie service in the Ubuntu operating system allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the whoopsie service in the Ubuntu operating system is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

7.8CVSS7.4AI score0.00577EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2020/06/09 1:24 p.m.30 views

CVE-2020-13776

A flaw was found in systemd, where it mishandles numerical usernames beginning with decimal digits, or "0x" followed by hexadecimal digits. When the usernames are used by systemd, for example in service units, an unexpected user may be used instead. In some particular configurations, this flaw...

6.2CVSS1.9AI score0.00461EPSS
SaveExploits0References3
OSV
OSV
added 2020/06/03 3:15 a.m.2 views

DEBIAN-CVE-2020-13776

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

6.7CVSS6.1AI score0.00461EPSS
SaveExploits0References1
NVD
NVD
added 2020/06/03 3:15 a.m.14 views

CVE-2020-13776

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

6.7CVSS8.2AI score0.00461EPSS
SaveExploits0References3
Prion
Prion
added 2020/06/03 3:15 a.m.25 views

Buffer overflow

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

6.2CVSS8.1AI score0.03878EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
added 2020/06/03 3:15 a.m.35 views

CVE-2020-13776

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

6.7CVSS6.6AI score0.00461EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/06/03 2:5 a.m.2 views

CVE-2020-13776

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

7.8AI score0.00461EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/06/03 2:5 a.m.40 views

CVE-2020-13776

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

8.2AI score0.00461EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2020/06/03 2:5 a.m.54 views

CVE-2020-13776

systemd through v245 mishandles numerical usernames such as ones composed of decimal digits or 0x followed by hex digits, as demonstrated by use of root privileges when privileges of the 0x0 user account were intended. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000082...

6.7CVSS6.2AI score0.00461EPSS
SaveExploits0
CVE
CVE
added 2020/06/03 2:5 a.m.214 views

CVE-2020-13776

CVE-2020-13776 (systemd) affects systemd up to version v245, where it mishandles usernames that start with decimal digits or 0x followed by hex digits. This can enable privilege escalation to root, as demonstrated by the 0x0 user account scenario. The issue is noted as a consequence of an incompl...

6.7CVSS8.1AI score0.00461EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.10 views

The vulnerability of the FTS3 virtual table module in the SQLite database management system allows a hacker to execute arbitrary code.

The vulnerability of the FTS3 virtual table module in the SQLite database management system is caused by a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

8.1CVSS7.1AI score0.07565EPSS
SaveExploits0References14Affected Software11
Rows per page
Query Builder