Lucene search
+L

971 matches found

BDU FSTEC
BDU FSTEC
added 2022/10/24 12:0 a.m.7 views

Vulnerability of the Server component: The stored procedures of the MySQL Server database management system, which allow attackers to cause service interruptions.

The vulnerability of the MySQL Server component, specifically the stored procedures, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.8CVSS6.3AI score0.0117EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:0 a.m.8 views

The vulnerability of component C of the MySQL Server database management system allows a hacker to cause a service failure.

The vulnerability of the C API component of the MySQL Server database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

4.9CVSS6.4AI score0.01048EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/10/21 12:0 a.m.10 views

The vulnerability of the ax25_release() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ax25release function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS6.7AI score0.0155EPSS
SaveExploits0References24Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.7 views

The vulnerability of the Valmet System 2019 software suite (Metso DNA) lies in insufficient validation of input data, allowing a violator to trigger a service failure.

The vulnerability of the Valmet System 2019 software suite Metso DNA is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to trigger service interruptions...

7.8CVSS5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:0 a.m.8 views

The vulnerability of the internal/dcraw_common.cpp component in the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the internal/dcrawcommon.cpp component in the LibRaw image processing library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.1CVSS7AI score0.01796EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:0 a.m.12 views

The vulnerability of the `glob` function in the `glob.c` component of the GNU C Library allows a attacker to cause a service failure.

The vulnerability of the glob function in the glob.c component of the GNU C Library is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

7.1CVSS6.7AI score0.01431EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:0 a.m.24 views

The vulnerability of the `cv::RBaseStream::setPos` function in the `modules/imgcodecs/src/bitstrm.cpp` file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a attacker to cause a service failure.

The vulnerability of the cv::RBaseStream::setPos function in the modules/imgcodecs/src/bitstrm.cpp file of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to an improper conversion from a 64-bit integer to a 32-bit integer...

7.1CVSS6.3AI score0.01372EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:0 a.m.11 views

The vulnerability of the _zip_read_eocd64 function in the zip_open.c component of the Libzip library allows a attacker to cause a service failure.

The vulnerability of the zipreadeocd64 function in the zipopen.c component of the Libzip library library for working with Zip archives is related to the allocation of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.1CVSS6.2AI score0.032EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:0 a.m.7 views

The vulnerability of the `ff_frame_pool_get` function in the `framepool.c` component of the FFmpeg multimedia library allows a attacker to cause a service failure.

The vulnerability of the ffframepoolget function in the framepool.c component of the FFmpeg multimedia library is related to improper memory release before deleting the last references. Exploiting this vulnerability allows an attacker to cause service interruptions...

7.1CVSS6.3AI score0.00902EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:0 a.m.5 views

The vulnerability of the SPICE remote virtual desktop rendering system, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the SPICE remote virtual desktop rendering system is related to significantly lower resource consumption on the client side compared to the server when establishing a new SSL connection. Exploiting this vulnerability allows a malicious actor to cause service interruptions...

5.3CVSS6.4AI score0.02703EPSS
SaveExploits1References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:0 a.m.10 views

The vulnerability of the urllib component in the Python programming language allows a hacker to trigger a service failure.

The vulnerability of the urllib component in the Python programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.5CVSS7.1AI score0.11994EPSS
SaveExploits1References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/21 12:0 a.m.10 views

The vulnerability of the telnetd server in the Inetutils network programming package allows a hacker to cause a service failure.

The vulnerability of the telnetd server in the Inetutils network programming package is related to errors in pointer manipulation during byte sequence processing. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS7.1AI score0.01657EPSS
SaveExploits1References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:0 a.m.12 views

The vulnerability of the sbr_process_channel function in the libfaad/sbr_dec.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a intruder to trigger a service failure.

The vulnerability of the sbrprocesschannel function in the libfaad/sbrdec.c component of the Freeware Advanced Audio Decoder 2 FAAD2 audio decoder is related to improper processing of new PS channels. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.1CVSS6.6AI score0.01128EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/12 12:0 a.m.11 views

The vulnerability of the xfrm_expand_policies function (net/xfrm/xfrm_policy.c) in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xfrmexpandpolicies function net/xfrm/xfrmpolicy.c in the Linux operating system is related to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

5.5CVSS6.6AI score0.00309EPSS
SaveExploits0References39Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.17 views

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software allows a perpetrator to trigger a service failure.

The vulnerability of Oracle Banking Trade Finance software’s Infrastructure component exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.9AI score0.00733EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.9 views

The vulnerability of the Web Services sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows attackers to cause service failures.

The vulnerability of the Web Services sub-component of the Oracle WebLogic Server application server within the Oracle Fusion Middleware software platform exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using...

5.3CVSS6.3AI score0.00984EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.7 views

The vulnerability of the hvc_xen component (console) of the Xen hypervisor allows a attacker to cause a service failure.

The vulnerability of the hvcxen component console of the Xen hypervisor is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...

6.5CVSS6.5AI score0.00332EPSS
SaveExploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/08/26 12:0 a.m.7 views

The vulnerability of the PK11_ChangePW function in the Mozilla Firefox browser and Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the PK11ChangePW function in the Mozilla Firefox browser and Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions...

5CVSS7.2AI score0.0082EPSS
SaveExploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/08/08 12:0 a.m.11 views

The vulnerability of the NGINX Instance Manager automation platform, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the NGINX Instance Manager automation platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.8CVSS6.5AI score0.00658EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/08/02 4:15 p.m.13 views

Deserialization of untrusted data

EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker to execute arbitrary code, manipulate...

7.5CVSS9.8AI score0.0129EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder