Lucene search
+L

969 matches found

BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.7 views

The vulnerability of the Packet Forwarding Engine (PFE) module of the Junos OS Evolved operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in the Junos OS Evolved operating system is related to insufficient channel constraints for specified endpoints. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

8.5CVSS5.5AI score0.00583EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/10/21 12:0 a.m.9 views

The vulnerability of the Suricata intrusion detection and prevention system arises from errors in checking the JA4 identifier, which provides information about the application protocol used between the client and the server. This vulnerability allows attackers to trigger a service failure.

The vulnerability of the Suricata intrusion detection and prevention system is related to errors in checking the JA4 identifier, which provides information about the application protocol used between the client and the server. Exploiting this vulnerability allows a malicious actor to cause servic...

7.8CVSS7.3AI score0.00577EPSS
Exploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/10/17 12:0 a.m.6 views

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS5.9AI score0.00799EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:0 a.m.9 views

The vulnerability in the implementation of the Online Certificate Status Protocol (OCSP) on Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.5AI score0.02219EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/16 12:0 a.m.18 views

The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to improper checking of the return value of a function. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

7.8CVSS5.4AI score0.02448EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:0 a.m.17 views

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Windows Mobile Broadband Driver for Windows operating systems is related to the execution of operations beyond the buffer in memory due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.5CVSS5.8AI score0.00818EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:0 a.m.15 views

The vulnerability of the Network Address Translation (NAT) technology in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS5.9AI score0.02219EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:0 a.m.11 views

The vulnerability of the Network Address Translation (NAT) technology in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS5.9AI score0.02219EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/23 12:0 a.m.7 views

The vulnerability of the gnutls_pkcs7_verify function in the pkcs7 component of the GnuTLS library allows a attacker to cause a service failure.

The vulnerability of the gnutlspkcs7verify function in the pkcs7 component of the GnuTLS library is related to the reallocation of memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS6.9AI score0.01492EPSS
Exploits0References9Affected Software4
Veracode
Veracode
added 2024/09/19 4:32 a.m.12 views

Prototype Pollution

@backstage/plugin-catalog-backend is vulnerable to Prototype Pollution. The vulnerability is caused due to improper user input sanitization in the catalog API, which allows an attacker to interrupt the service using a specially crafted query...

6.5CVSS6.5AI score0.00513EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.6 views

The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service interruptions.

The vulnerability of the web servers of microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.00954EPSS
Exploits0References4Affected Software22
BDU FSTEC
BDU FSTEC
added 2024/09/18 12:0 a.m.11 views

The vulnerability of the Networking component of Windows operating systems, which allows a hacker to trigger a service failure

The vulnerability of the Networking component of Windows operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.5CVSS5.4AI score0.00929EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/09/17 8:14 p.m.42 views

CVE-2024-45815 Prototype pollution in @backstage/plugin-catalog-backend

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...

6.5CVSS0.00513EPSS
Exploits0References1
OSV
OSV
added 2024/09/17 8:14 p.m.18 views

CVE-2024-45815 Prototype pollution in @backstage/plugin-catalog-backend

Backstage is an open framework for building developer portals. A malicious actor with authenticated access to a Backstage instance with the catalog backend plugin installed is able to interrupt the service using a specially crafted query to the catalog API. This has been fixed in the 1.26.0 relea...

6.5CVSS6.3AI score0.00513EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.10 views

The vulnerability of the LibGD graphics library, related to reading beyond the allowed buffer data limits, allows attackers to cause service interruptions.

The vulnerability of the LibGD graphics library is related to reading data beyond the acceptable buffer limit. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS6.5AI score0.01659EPSS
Exploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.6 views

Vulnerability of the amdgpu_vm_bo_update function in the drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c file of the Linux kernel, related to pointer dereferencing errors, allowing attackers to cause service failures

The vulnerability of the amdgpuvmboupdate function in the drivers/gpu/drm/amd/amdgpu/amdgpuvm.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS5.9AI score0.00561EPSS
Exploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.6 views

The vulnerability in the `color.c` component of the `sycc420_to_rgb` function in the OpenJPEG library, related to buffer overflows, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the color.c component in the sycc420torgb function of the OpenJPEG library, which is used for image encoding and decoding, relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

7.8CVSS6.9AI score0.01536EPSS
Exploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/08/23 12:0 a.m.12 views

The vulnerability affects the .NET development platform used by Microsoft Visual Studio, allowing attackers to trigger a service failure.

The vulnerability of the .NET development platform used by Microsoft Visual Studio is related to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.1AI score0.02701EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/08/21 12:0 a.m.7 views

The vulnerability of the PAN-OS operating system in the centralized network switch management system of Palo Alto Networks Panorama allows a attacker to trigger a service failure.

The vulnerability of the PAN-OS operating system in the Palo Alto Networks Panorama network switch management system is related to the ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows a malicious actor to cause service interruptions by downloading...

6.8CVSS5.4AI score0.00576EPSS
Exploits0References4Affected Software1
CNVD
CNVD
added 2024/08/16 12:0 a.m.4 views

IBM Db2 Denial of Service Vulnerability (CNVD-2024-36740)

IBM Db2 is a high-performance relational database management system RDBMS developed by IBM and designed to handle large amounts of data and complex business needs. A denial of service vulnerability exists in IBM Db2 in versions 11.1 and 11.5. The vulnerability arises due to improper memory...

6.5CVSS6.4AI score0.0055EPSS
Exploits0References1
Rows per page
Query Builder