Lucene search
+L

969 matches found

CNVD
CNVD
added 2022/04/22 12:0 a.m.42 views

Kyocera d-COLOR MF3555 Denial of Service Vulnerability

Kyocera d-COLOR MF3555 is a color multifunction printer from Kyocera Japan.A denial of service vulnerability exists in the firmware version Kyocera d-COLOR MF3555 2XDS000.002.271, which stems from a failure to properly handle incoming error messages and can be exploited by an authenticated attack...

7.8CVSS2.3AI score0.01329EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.9 views

The vulnerability of the php_wddx_pop_element function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the phpwddxpopelement function ext/wddx/wddx.c in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS7.5AI score0.06672EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.8 views

The vulnerability of the `mysqli_real_escape_string` function in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the mysqlirealescapestring function in the PHP programming language is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to cause service interruptions or potentially have other adverse effects...

10CVSS6.9AI score0.07562EPSS
SaveExploits1References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.9 views

The vulnerability of BitTorrent DHT traffic analyzer software from Wireshark allows a hacker to cause a service failure.

The vulnerability of BitTorrent DHT traffic analyzer software from Wireshark involves executing a loop with an unavailable exit condition. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted packets...

7.8CVSS7.2AI score0.03879EPSS
SaveExploits1References10Affected Software4
OSV
OSV
added 2022/04/19 9:15 p.m.8 views

CVE-2022-21473

Vulnerability in the Oracle Banking Treasury Management product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

5.9CVSS7.3AI score0.00609EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.23 views

The vulnerabilities of PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, Adobe Acrobat Reader 2020 are related to the manipulation of the null pointer pointer, allowing attackers to cause service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...

3.3CVSS6.7AI score0.03629EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.9 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.02588EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.8 views

Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.

Vulnerability of the Server component: The DDL system for managing databases in MySQL is vulnerable to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

6.8CVSS6.5AI score0.0171EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.8 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.01791EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.6 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.02588EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.6 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.02588EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.5 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.0171EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.5 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

6.8CVSS6.4AI score0.02088EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.8 views

Vulnerability of the Server component: The DDL system for database management in MySQL, which allows a hacker to cause a service failure.

Vulnerability of the Server component: The DDL system for managing databases in MySQL is vulnerable to errors during resource release. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

6.8CVSS6.5AI score0.02831EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.5 views

The vulnerability of the stbl_GetSampleSize function in the isomedia/stbl_read.c component of the multimedia platform GPAC allows a attacker to cause a service failure.

The vulnerability of the stblGetSampleSize function in the isomedia/stblread.c component of the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created media file...

7.1CVSS6.1AI score0.0063EPSS
SaveExploits1References4Affected Software2
CNVD
CNVD
added 2022/04/08 12:0 a.m.9 views

ASUS RT-AX56U update_PLC/PORT file path traversal vulnerability

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatePLC/PORT file, which can be exploited by an attacker to overwrite system files by uploading another PLC/PORT file with the same filename, resulting in a service...

8.1CVSS6.7AI score0.00472EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/08 12:0 a.m.15 views

ASUS RT-AX56U update_json function path traversal vulnerability

The ASUS RT-AX56U is a wireless router from ASUS of Taiwan, China. A path traversal vulnerability exists in the ASUS RT-AX56U updatejson function due to insufficient filtering of special characters in URL parameters. An attacker can exploit the vulnerability to cause a service interruption by...

8.1CVSS6.7AI score0.00472EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.9 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020, which exploit memory after it is released, allow attackers to trigger service interruptions.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these...

5.5CVSS6.6AI score0.0275EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.9 views

The vulnerability of the RADIUS protocol implementation (Remote Authentication in Dial-In User Service) of the Cisco Identity Services Engine (ISE) allows a perpetrator to cause service interruptions.

The vulnerability of the RADIUS protocol implementation Remote Authentication in Dial-In User Service of the Cisco Identity Services Engine ISE is related to incorrect processing of RADIUS requests. Exploiting this vulnerability can allow a malicious actor to cause service failures...

8.6CVSS7.4AI score0.01433EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2022/04/07 12:0 a.m.6 views

D-Link DIR-878 操作系统命令注入漏洞

The D-Link DIR-878 is a wireless router from D-Link, a Taiwan-based company. The D-Link DIR-878 is vulnerable to a command injection vulnerability that could be exploited by an unauthenticated LAN attacker to execute arbitrary system commands to control the system or interrupt services...

8.8CVSS6.1AI score0.01527EPSS
SaveExploits0References2
Rows per page
Query Builder