Lucene search
+L

969 matches found

BDU FSTEC
BDU FSTEC
added 2019/08/22 12:0 a.m.6 views

The vulnerability of the node_cache.find_node() function in the Ironic Inspector daemon, a hardware self-analysis tool for the OpenStack cloud service creation platform, allows a malicious actor to trigger a service failure.

The vulnerability of the nodecache.findnode function in the Ironic Inspector hardware self-analysis daemon of the OpenStack SDN platform is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to cause service...

9.4CVSS5.6AI score0.02464EPSS
Exploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/08/02 12:0 a.m.8 views

The vulnerability of Web servers Embedthis GoAhead and Embedthis Appweb, related to HTTP request processing errors, allows attackers to trigger service interruptions.

The vulnerability of Embedthis GoAhead and Embedthis Appweb web servers is related to HTTP request processing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS5.5AI score0.02766EPSS
Exploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:0 a.m.6 views

The vulnerability of the GetMagickProperty function in the console-based image editing tool ImageMagick on Oracle Solaris allows a hacker to induce a service failure.

The vulnerability of the GetMagickProperty function MagickCore/property.c in the ImageMagick graphical editor for Oracle Solaris operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...

5.3CVSS7.8AI score0.0228EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/07/25 12:0 a.m.4 views

The vulnerability of the Windows operating system’s DNS server, related to errors in processing DNS requests, allows a perpetrator to cause a service failure.

The vulnerability of the Windows operating system’s DNS server is related to errors in processing DNS requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted request...

7.8CVSS5.5AI score0.04502EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:0 a.m.6 views

The vulnerability of the IBM DB2 database management system (including the IBM DB2 Connect server) arises from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the IBM DB2 database management system including the IBM DB2 Connect server exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted SQL query with the TRUNCA...

6.8CVSS5.6AI score0.01859EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:0 a.m.9 views

The vulnerability of the krb_parse_authz_data function in the SnAuthRPC module of the Secret Net Studio security system allows a hacker to trigger a service failure.

The vulnerability of the krbparseauthzdata function in the SnAuthRPC module of the Secret Net Studio security system is related to errors in buffer offset calculations, which lead to the displacement of uninitialized memory areas. Exploiting this vulnerability could allow a remote attacker to cau...

2.2CVSS5.8AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/16 12:0 a.m.7 views

The vulnerability of the Cisco AsyncOS operating system proxy server allows attackers to cause service interruptions for Cisco Web Security Appliance web servers.

The vulnerability of the Cisco AsyncOS operating system’s proxy server for Cisco Web Security Appliance products exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending malicious HTTP/HTTPS requests...

7.7CVSS5.5AI score0.01513EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:0 a.m.3 views

The vulnerability of the g_markup_parse_context_end_parse function in the Glib library allows a hacker to trigger a service failure.

The vulnerability of the gmarkupparsecontextendparse function in the Glib library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9.8CVSS6.8AI score0.04693EPSS
Exploits1References10Affected Software7
CNVD
CNVD
added 2019/07/09 12:0 a.m.5 views

F5 BIG-IP Input Validation Error Vulnerability (CNVD-2019-32029)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. An input validation error vulnerability exists in F5 BIG-IP. An attacker could exploit this vulnerability to cause a service...

7.5CVSS6.8AI score0.02531EPSS
Exploits0References1
NVD
NVD
added 2019/07/03 6:15 p.m.31 views

CVE-2019-6631

On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs...

7.5CVSS7.5AI score0.02531EPSS
Exploits0References3
OSV
OSV
added 2019/07/03 6:15 p.m.8 views

CVE-2019-6631

On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated HTTP profile, in specific circumstances, when the requests do not strictly conform to RFCs...

7.5CVSS5.8AI score
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.9 views

The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems, related to data processing errors, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.5CVSS5.9AI score0.03041EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.13 views

The vulnerability of the thread_list_mutex function in the advanced TFTP server Atftpd, related to the assignment of the NULL pointer, allows a hacker to trigger a service failure.

The vulnerability of the threadlistmutex function in the advanced TFTP server Atftpd is related to the lack of mutex locking before assigning a data structure. Exploiting this vulnerability allows an attacker who operates remotely to cause service interruptions...

5.9CVSS7AI score0.02098EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.6 views

The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliances and Cisco Firepower Threat Defense allows attackers to induce service failure.

The vulnerability of the LDAP protocol implementation in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD is related to improper input validation. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted LDAP...

6.8CVSS6.8AI score0.02028EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.8 views

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Identity Services Engine’s web interface is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted requests...

7.8CVSS6.2AI score0.02516EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.5 views

The vulnerability of Siemens’ web server software lies in insufficient validation of input data, which allows attackers to trigger service failures.

The vulnerability of Siemens’ web server software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01401EPSS
Exploits0References4Affected Software11
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.7 views

The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco AsyncOS operating system’s proxy server for Cisco Web Security Appliance products exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending corrupted HTTP or HTTPS requests t...

8.6CVSS7.4AI score0.01772EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.5 views

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.01799EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:0 a.m.5 views

The vulnerability of the Server Message Block (SMB) microprogramming system used by Cisco Firepower Threat Defense allows a perpetrator to induce a service failure.

The vulnerability of the Server Message Block SMB microprogramming system used in Cisco Firepower Threat Defense is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.02236EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:0 a.m.4 views

Vulnerability of the Server component: The Replication feature of the Oracle MySQL Server database management system, which allows users to trigger a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

4.6CVSS6.3AI score0.018EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder