Lucene search
+L

980 matches found

Positive Technologies
Positive Technologies
added 2024/05/01 12:0 a.m.8 views

PT-2024-25290 · Unknown · Radio Frequency Manager Service

Name of the Vulnerable Software and Affected Versions: Radio Frequency Manager service affected versions not specified Description: An unauthenticated Denial-of-Service DoS vulnerability exists in the Radio Frequency Manager service accessed via the PAPI protocol. Successful exploitation of this...

7.5CVSS6.9AI score0.00617EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/04/25 12:0 a.m.9 views

The vulnerability of the JpegEncoder::Encode function in the file format decoders and encoders of the libheif library allows a attacker to cause a service failure.

The vulnerability of the JpegEncoder::Encode function in file format decoders and encoders of the libheif library is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS6.9AI score0.00687EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/04/25 12:0 a.m.10 views

The vulnerability of the h.265 Libde265 implementation lies in buffer overflow attacks, which allow attackers to cause service failures.

The vulnerability of the h.265 Libde265 implementation is related to the amount of memory allocated, which exceeds the maximum supported size of 0x10000000000. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

9.4CVSS5.4AI score0.00232EPSS
SaveExploits0References9Affected Software3
CNVD
CNVD
added 2024/04/24 12:0 a.m.9 views

FreeRDP Stack Buffer Overflow Vulnerability

FreeRDP is a freeware program that implements the Remote Desktop Protocol, which is mainly used to connect and manage Windows servers remotely. FreeRDP prior to version 3.5.1 suffers from a stack buffer overflow vulnerability that arises because the program fails to properly handle image copy...

9.8CVSS7.4AI score0.01193EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/04/24 12:0 a.m.34 views

Memory out-of-bounds read vulnerability in FreeRDP ExtractRunLengthRegular* function

FreeRDP is a freeware program that implements the Remote Desktop Protocol, which is mainly used to connect and manage Windows servers remotely. A memory out-of-bounds read vulnerability exists in FreeRDP versions prior to 3.5.1. The vulnerability arises because the program fails to properly handl...

9.8CVSS6.4AI score0.0137EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:0 a.m.5 views

The vulnerability of the Packet Forwarding Engine (PFE) in Juniper Networks’ Junos routers of the SRX300 series, which allows a attacker to cause a service failure.

The vulnerability of the packet forwarding mechanism PFE in Juniper Networks’ Junos routers of the SRX300 series relates to the disclosure of information in the error data field. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.5CVSS5.4AI score0.00295EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:0 a.m.9 views

The vulnerability of the IKE daemon (iked) in Juniper Networks’ Junos routers of the MX and SRX series allows a attacker to cause service interruptions.

The vulnerability of the IKE daemon iked in Juniper Networks’ Junos routers of the MX and SRX series involves improper memory release before deleting the last pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.5CVSS5.4AI score0.00295EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.9 views

The vulnerability of the jbig2_error function in the jbig2.c file of the JBIG2 image compression decompression decoder Jbig2dec, which allows a attacker to cause a service failure.

The vulnerability of the jbig2error function in the jbig2.c file of the JBIG2 image compression decompression decoder allows for incorrect initialization of resources. Exploiting this vulnerability can enable a remote attacker to cause service interruptions...

7.8CVSS6.6AI score0.00753EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.8 views

The vulnerability of the 5G Azure Private 5G Core (AP5GC) network management tool, related to errors in processing input data length parameters, allows a attacker to trigger a service failure.

The vulnerability of the 5G Azure Private 5G Core AP5GC network management tool is related to errors in processing the length parameter of incoming message InitialUEMessage. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.9CVSS6.8AI score0.05533EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/12 12:0 a.m.11 views

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to improper cleaning or freeing up of resources, allow a hacker to trigger a service failure.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network device drivers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.3CVSS5.5AI score0.00374EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/12 12:0 a.m.12 views

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices, related to lack of access control, allow attackers to trigger service interruptions.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service interruptions...

7.1CVSS7AI score0.00189EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/08 12:0 a.m.14 views

The vulnerability lies in the implementation of the HTTP/2 utility in the command-line tool cURL, which allows a attacker to cause a service failure.

The vulnerability of the HTTP/2 command-line utility implementation in CURL is related to memory leak errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5CVSS7AI score0.36081EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/04/06 12:0 a.m.12 views

The vulnerability of Cisco IOS network devices of the Cisco Catalyst 6000 series allows a intruder to trigger a service failure.

The vulnerability of Cisco IOS network devices from the Cisco Catalyst 6000 series relates to an error in handling exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.4CVSS5.4AI score0.00291EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/06 12:0 a.m.8 views

The vulnerability of Tempesta web applications’ firewalls, related to unlimited resource distribution, allows attackers to cause service interruptions.

The vulnerability of Tempesta web applications’ firewalls, particularly in terms of implementing HTTP/2 protocols, is related to an uncontrolled resource consumption due to incorrect determination of the end of headers during the processing of CONTINUATION frames. Exploiting this vulnerability...

5.3CVSS7.8AI score0.7275EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/06 12:0 a.m.11 views

The vulnerability of the software implementing the transport protocols QUIC and HTTP/3 in CloudFlare Quiche allows attackers to cause service interruptions due to uncontrolled resource consumption.

The vulnerability of the software implementing the transport protocols QUIC and HTTP/3 in CloudFlare Quiche is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

5.9CVSS6.2AI score0.01175EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/06 12:0 a.m.9 views

The vulnerability of the Elasticsearch search engine, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Elasticsearch search engine is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

6.1CVSS6.3AI score0.00951EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/05 12:0 a.m.7 views

The vulnerability of the mDNS gateway function in Cisco IOS XE wireless controller Catalyst Series 9800 allows a attacker to cause a service failure.

The vulnerability of the multicast DNS mDNS function in Cisco IOS XE wireless controller Catalyst Series 9800 devices is related to incomplete cleanup of temporary or auxiliary resources during the processing of mDNS requests. Exploiting this vulnerability allows a malicious actor to cause servic...

7.4CVSS5.4AI score0.00322EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/05 12:0 a.m.9 views

The vulnerability of the libtirpc package, related to an unreachable exit condition, allows a attacker to cause a service failure.

The vulnerability of the libtirpc package is related to the exhaustion of file descriptors of the process. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.02606EPSS
SaveExploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:0 a.m.7 views

The vulnerability of the software for remote management and monitoring of Intel Server Platform Services (SPS) allows a perpetrator to trigger a service failure due to uncontrolled resource consumption.

The vulnerability of the software for remote management and monitoring of Intel Server Platform Services is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS5.5AI score0.00516EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:0 a.m.13 views

The vulnerability of the `loadRepoIndex()` function in the declarative tool for continuous delivery of GitOps for Kubernetes Argo CD allows a malicious actor to trigger a service failure.

The vulnerability of the loadRepoIndex function in the declarative tool for continuous delivery of GitOps for Kubernetes Argo CD is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS6.5AI score0.00972EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder