Lucene search
+L

969 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/17 12:0 a.m.13 views

The vulnerability in the processing of Control Plane protocols and the provisioning of CAPWAP points allows a attacker to induce a service failure.

The vulnerability of the CAPWAP management protocol and wireless access point services in the Cisco IOS XE operating system is related to insufficient checking of CAPWAP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

8.6CVSS7.2AI score0.0139EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/16 12:0 a.m.8 views

The vulnerability of the software for creating metadata, processing, and exchanging Adobe XMP-Toolkit-SDK standard sets, related to reading beyond the buffer in memory, allows a perpetrator to cause service failures.

The vulnerability of the software for creating metadata, processing, and exchanging data according to the Adobe XMP-Toolkit-SDK is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a speciall...

4.3CVSS6.6AI score0.01964EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2021/11/15 10:15 a.m.17 views

CVE-2021-42839

Grand Vice info Co. webopac7 file upload function fails to filter special characters. While logging in with general user’s permission, remote attackers can upload malicious script and execute arbitrary code to control the system or interrupt services...

9CVSS0.0235EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:0 a.m.13 views

The vulnerability of the Protection Against Distributed Denial of Service attacks function in Cisco IOS XE allows a attacker to cause a service failure.

The vulnerability of the Protection Against Distributed Denial of Service attacks in Cisco IOS XE operating systems is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5.8CVSS7.5AI score0.01328EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/12 12:0 a.m.13 views

The vulnerability of the AnyConnect and WebVPN interfaces of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows a perpetrator to cause service interruptions.

The vulnerability of AnyConnect and WebVPN web services, which are part of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD, stems from insufficient validation of input data during syntax analysis of HTTPS requests. Exploiting this vulnerability can allow a malicious...

8.6CVSS7.2AI score0.01307EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/11/11 12:0 a.m.8 views

The vulnerability of the Traffic Management Microkernel component of BIG-IP access control and remote authentication tools allows a attacker to cause a service failure.

The vulnerability of the Traffic Management Microkernel component of the BIG-IP access control and remote authentication solutions is related to deficiencies in the segmentation of the controlled system area. Exploiting this vulnerability could allow a malicious actor to cause service interruptio...

7.8CVSS7.5AI score0.0095EPSS
Exploits0References2Affected Software11
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.8 views

The vulnerability of the Mac OS X operating system arises from insufficient checks on the data entered by users in the kernel subsystem of the operating system. This allows attackers to trigger a service failure.

The vulnerability of the Mac OS X operating system arises from insufficient checks on the data entered by users in the kernel subsystem of the operating system. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS6.8AI score0.01706EPSS
Exploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.5 views

The vulnerability of the SSL/TLS module of the microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.

The vulnerability of the SSL/TLS microprogramming software used in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD lies in the execution of operations outside of the buffer in memory. Exploitation of this vulnerability could allow a malicious actor to cause service...

8.6CVSS7.5AI score0.0155EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:0 a.m.7 views

The vulnerability of the Squid proxy server, related to insufficient validation of input data, allows attackers to trigger a service failure.

The vulnerability of the Squid proxy server is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS6.8AI score0.79583EPSS
Exploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.4 views

The vulnerability in the `os/unix/ngx_files.c` component of the NGINX application monitoring and management platform allows a attacker to cause a service failure.

The vulnerability in the os/unix/ngxfiles.c component of the NGINX application monitoring and management platform is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS7.2AI score0.16376EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/22 12:0 a.m.6 views

Vulnerability of the Server component: The MySQL Server database management system for Windows, which is vulnerable due to insufficient validation of input data, allows attackers to trigger service failures.

Vulnerability of the MySQL Server component: The MySQL Server component of Windows database management systems has vulnerabilities due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

7.8CVSS6.7AI score0.0297EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:0 a.m.6 views

The vulnerability of the TCP/IP protocol implementation in the Windows operating system allows a hacker to cause a service failure.

The vulnerability of the TCP/IP protocol implementation in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS7.2AI score0.03556EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.7 views

The vulnerability of the show-status function of the CGI proxy HTTP Privoxy handler, related to improper memory release before deleting last links, allows a hacker to trigger a service failure.

The vulnerability of the show-status function in the CGI proxy HTTP Privoxy handler is related to improper memory release before deleting last links. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.5CVSS7.2AI score0.01897EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.6 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the allocation of unlimited memory, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ignoring of a request parameter when working through the API. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

5.3CVSS6AI score0.0115EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.6 views

The vulnerabilities of the `cdf_read_sat`, `cdf_read_long_sector_chain`, and `cdf_read_ssat` functions, which are utilities for determining the type of specified files in a File object. These vulnerabilities are related to buffer overflows in memory, allowing attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerabilities of the cdfreadsat, cdfreadlongsectorchain, and cdfreadssat functions, which are used to determine the type of the specified files, are related to buffer overflows in memory. Exploiting these vulnerabilities can allow an attacker to gain access to confidential data, compromise...

9.8CVSS8.1AI score0.01134EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the ability to create recursive pipeline connections. Exploiting this vulnerability allows a malicious actor to trigger service interruptions remotely...

6.5CVSS6.9AI score0.01058EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:0 a.m.6 views

The vulnerabilities of JunOS Evolved and Junos operating systems are caused by deficiencies in authentication procedures, which allow attackers to gain unauthorized access to protected information or cause partial service interruptions.

The vulnerabilities of JunOS Evolved and Junos are due to deficiencies in the authentication process. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or cause partial service interruptions...

6.5CVSS6.6AI score0.01008EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/27 12:0 a.m.6 views

The vulnerability of the DVMRP (Distance Vector Multicast Routing Protocol) implementation in Juniper Networks’ Junos OS-based QFX10K routers allows a attacker to cause service interruptions.

The vulnerability of the DVMRP Distance Vector Multicast Routing Protocol implementation in Juniper Networks’ Junos OS-based QFX10K routers stems from packet looping due to incorrect comparison of Ethernet segment identifiers. Exploiting this vulnerability can allow a malicious actor to cause...

6.1CVSS6.3AI score0.01097EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/20 12:0 a.m.11 views

The vulnerability of the Scripting Engine component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Scripting Engine component in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.1CVSS7.3AI score0.31825EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/09 12:0 a.m.9 views

The vulnerability of the sevenz archive software package from Apache Commons Compress allows a hacker to trigger a service failure.

The vulnerability of the sevenz archive software package from Apache Commons Compress is related to errors in processing parameter values related to the length of input data. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS6.6AI score0.12365EPSS
Exploits0References11Affected Software5
Rows per page
Query Builder