Lucene search
+L

421 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/11 12:00 a.m.11 views

The vulnerability in the implementation of the SCTP protocol in Linux kernel allows a attacker to cause a service failure (to disconnect the connection).

The vulnerability in the implementation of the SCTP protocol net/sctp/smstatefuns.c in the Linux kernel is related to the lack of checking VTAG in the blocks received from the user, and the incorrect ABORT flag used to process these blocks. Exploiting this vulnerability allows a remote attacker t...

6.5CVSS6.7AI score0.0124EPSS
SaveExploits0References21Affected Software8
Vulnrichment
Vulnrichment
added 2023/04/28 5:35 p.m.9 views

CVE-2023-25930 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally. IBM X-Force ID: 247862...

5.9CVSS5.5AI score0.00963EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/04/28 5:35 p.m.32 views

CVE-2023-25930 IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a special register may cause the Db2 server to terminate abnormally. IBM X-Force ID: 247862...

5.9CVSS5.6AI score0.00963EPSS
SaveExploits0References3
Veracode
Veracode
added 2023/04/17 6:12 a.m.37 views

Sandbox Bypass

org.javadelight: delight-nashorn-sandbox is vulnerable to Sandbox Bypass. The vulnerability exists due to improper validation in allowExitFunctions which allows an attacker to bypass sandbox protection and terminate the running process, possibly leading to Denial Of Service DoS...

7.2CVSS6.8AI score0.00608EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2023/03/27 12:00 a.m.11 views

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura, which originates from the handling of maliciously crafted files that could result in the unexpected termination of an application or arbitrary code...

7.8CVSS7.8AI score0.00224EPSS
SaveExploits0References4
F5 Networks
F5 Networks
added 2023/03/21 4:41 p.m.57 views

K000133092: cURL vulnerability CVE-2022-43552

Security Advisory Description A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET,...

5.9CVSS6.7AI score0.02511EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2023/03/10 12:00 a.m.5 views

PT-2023-35688 · Git +1 · Libavc

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: isvce cabac flush, isvce cabac encode terminate, and...

6.8AI score
SaveExploits0References2
The Hacker News
The Hacker News
added 2023/03/02 11:39 a.m.39 views

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open source command-line file transfer service to implement its attack. "Underpinning this campaign was the use of transfer.sh," Cado Security said in a report shared with The...

7.7AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 4:43 a.m.6 views

SUSE CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

6.5CVSS6.9AI score0.01424EPSS
SaveExploits0References8
Microsoft CVE
Microsoft CVE
added 2023/02/07 8:00 a.m.6 views

named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

...

7.5CVSS7.8AI score0.16115EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/02/07 12:02 a.m.27 views

CVE-2023-24808

PDFio is a C library for reading and writing PDF files. In versions prior to 1.1.0 a denial of service DOS vulnerability exists in the pdfio parser. Crafted pdf files can cause the program to run at 100% utilization and never terminate. The pdf which causes this crash found in testing is about 28...

6.5CVSS5.3AI score0.00719EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/02/01 5:54 p.m.35 views

CVE-2023-22340 BIG-IP SIP profile vulnerability

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technic...

7.5CVSS7.7AI score0.00626EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/01/25 9:39 p.m.76 views

CVE-2022-3924 named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

This issue can affect BIND 9 resolvers with stale-answer-enable yes; that also make use of the option stale-answer-client-timeout, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a corresponding increase in the number of clien...

7.5CVSS7.6AI score0.16115EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/17 7:29 p.m.22 views

GSD-2023-1001542 pnode: terminate at peers of source

pnode: terminate at peers of source This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit cad0d17fb2b0540180ab59e2cd48ad348cc1ee4c,...

7.2AI score
SaveExploits0
OSV
OSV
added 2023/01/03 3:15 a.m.10 views

CVE-2022-43438

The Administrator function of EasyTest has an Incorrect Authorization vulnerability. A remote attacker authenticated as a general user can exploit this vulnerability to bypass the intended access restrictions, to make API functions calls, manipulate system and terminate service...

8.8CVSS5.8AI score0.00794EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/01/03 12:00 a.m.13 views

PT-2023-14202 · Easytest · Easytest

Name of the Vulnerable Software and Affected Versions: EasyTest affected versions not specified Description: The Administrator function of EasyTest has an Incorrect Authorization issue. A remote attacker authenticated as a general user can exploit this to bypass intended access restrictions, make...

8.8CVSS8.5AI score0.00794EPSS
SaveExploits0References4
OSV
OSV
added 2022/11/02 12:15 p.m.14 views

CVE-2022-39949

An improper control of a resource through its lifetime vulnerability CWE-664 in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection...

5.5CVSS5.6AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
added 2022/10/24 2:15 p.m.30 views

CVE-2021-44467

A broken access control vulnerability in the KillDupUsrfunc function of spxrestservice allows an attacker to arbitrarily terminate active sessions of other users, causing a Denial-of-Service DoS condition, if an input parameter is correctly guessed. This issue affects: Lanner Inc IAC-AST2500A...

7.5CVSS0.00689EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/19 10:15 p.m.33 views

CVE-2022-41833

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel TMM to terminate...

7.5CVSS0.00657EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/10/19 9:24 p.m.41 views

CVE-2022-41833 BIG-IP iRule vulnerability CVE-2022-41833

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel TMM to terminate...

7.5CVSS7.8AI score0.00657EPSS
SaveExploits0References1
Rows per page
Query Builder