Lucene search
+L

7017 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/19 12:00 a.m.10 views

The vulnerability of the implementation of the Open Shortest Path First (OSPF) protocol in Cisco Adaptive Security Appliance (ASA) and Configure Firepower Threat Defense (FTD) software allows a attacker to induce a service failure.

The vulnerability of the OSPF implementation in Cisco Adaptive Security Appliance ASA and Configure Firepower Threat Defense FTD software relates to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

8.6CVSS7.3AI score0.01873EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:00 a.m.14 views

The vulnerability of the Kubernetes cluster management software, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Kubernetes cluster management software is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS6.7AI score0.10416EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:00 a.m.8 views

The vulnerability of the libssh library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the libssh library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS6.5AI score0.03142EPSS
SaveExploits0References8Affected Software5
NVD
NVD
added 2020/05/14 4:15 p.m.40 views

CVE-2020-10626

In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code...

7.8CVSS7.8AI score0.005EPSS
SaveExploits0References1
Prion
Prion
added 2020/05/14 4:15 p.m.26 views

Path traversal

In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code...

6.9CVSS7.8AI score0.005EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/05/14 3:52 p.m.46 views

CVE-2020-10626

In Fazecast jSerialComm, Version 2.2.2 and prior, an uncontrolled search path element vulnerability could allow a malicious DLL file with the same name of any resident DLLs inside the software installation to execute arbitrary code...

7.8AI score0.005EPSS
SaveExploits0References1
PostrgeSql
PostrgeSql
added 2020/05/14 12:00 a.m.108 views

Vulnerability in packaging (CVE-2020-10733)

Windows installer runs executables from uncontrolled directories The Windows installer for PostgreSQL invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intend...

7.3CVSS7.3AI score0.0053EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/05/13 12:00 a.m.14 views

SAP Business Client Code Issue Vulnerability

SAP Business Client is a user interface client program from SAP Germany. The program supports access to multiple SAP applications from a single platform. A code issue vulnerability exists in SAP Business Client version 7.0, which arises from an uncontrolled search path element in the program. The...

7.8CVSS7.4AI score0.00337EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/05/12 5:54 p.m.42 views

CVE-2020-6244

SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the...

7CVSS7.6AI score0.00337EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2020/05/09 12:00 a.m.9 views

PT-2020-6929

Name of the Vulnerable Software and Affected Versions libcroco versions 0.6.13 and earlier Description The issue is related to the cr parser parse any core function in the cr-parser.c component of the libcroco library, which is used for working with cascading style sheets css2. It is associated...

8.5CVSS6.5AI score0.02319EPSS
SaveExploits1References58
BDU FSTEC
BDU FSTEC
added 2020/04/30 12:00 a.m.13 views

The vulnerability of the Tricon Communications Module, related to uncontrolled resource consumption, allows a intruder to trigger a service failure.

The vulnerability of the Tricon Communications Module is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

9.4CVSS7.2AI score0.01639EPSS
SaveExploits0References4Affected Software6
OSV
OSV
added 2020/04/29 2:15 p.m.11 views

AZL-7337 CVE-2018-21232 affecting package re2c for versions less than 2.0-1

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

5.5CVSS6AI score0.01432EPSS
SaveExploits1References1
NVD
NVD
added 2020/04/29 2:15 p.m.16 views

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

5.5CVSS5.4AI score0.01432EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2020/04/29 2:15 p.m.27 views

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

5.5CVSS6.1AI score0.01432EPSS
SaveExploits1References2
Snyk
Snyk
added 2020/04/29 2:15 p.m.1 views

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags. Remediation Upgrade re2c to version 2.0.3 or higher. References - GitHub Issue...

5.5CVSS7AI score0.01432EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2020/04/29 1:36 p.m.34 views

CVE-2018-21232

re2c before 2.0 has uncontrolled recursion that causes stack consumption in findfixedtags...

5.3AI score0.01432EPSS
SaveExploits1References3
CVE
CVE
added 2020/04/29 1:36 p.m.74 views

CVE-2018-21232

CVE-2018-21232 concerns the re2c tool (a C/C++ recognizer generator). Versions before 2.0 contain an uncontrolled recursion in find_fixed_tags that can cause stack consumption, leading to a potential denial of service. The impact described in the sources is stack exhaustion; no exploitation detai...

5.5CVSS5.2AI score0.01432EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2020/04/27 5:15 p.m.26 views

Design/Logic Flaw

SHAREit through 4.0.6.177 does not check the full message length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941...

7.8CVSS7.4AI score0.01572EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2020/04/27 4:08 p.m.33 views

CVE-2019-14941

SHAREit through 4.0.6.177 does not check the body length from the received packet header which is used to allocate memory for the next set of data. This could lead to a system denial of service due to uncontrolled memory allocation...

7.4AI score0.01572EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.18 views

The vulnerability of the crwimage_int.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the crwimageint.cpp component in the Exiv2 metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

4.3CVSS6.6AI score0.0235EPSS
SaveExploits1References12Affected Software5
Rows per page
Query Builder