Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the usbhsc_notify_hotplug() function in the USB driver (drivers/usb/renesas_usbhs/common.c) in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the usbhscnotifyhotplug function in the USB driver drivers/usb/renesasusbhs/common.c in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00185EPSS
Exploits0References16Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the crypto/xilinx/zynqmp-aes-gcm.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the crypto/xilinx/zynqmp-aes-gcm.c component in the Linux operating system is related to incorrect locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

3.3CVSS5.7AI score0.00231EPSS
Exploits0References16Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the iso.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the iso.c component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS7.1AI score0.00252EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the Werkzeug library for developing web applications, related to the manipulation of cross-site requests, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Werkzeug library for developing web applications relates to the manipulation of cross-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

7.6CVSS6.3AI score0.03397EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows a hacker to elevate their privileges to a system-level level.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their system-level privileges...

7.8CVSS7.7AI score0.17982EPSS
Exploits4References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the receive.c component of WireGuard in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the wireguard/receive.c component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00176EPSS
Exploits0References16Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability in the events_base.c component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the eventsbase.c component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00228EPSS
Exploits0References15Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the stripTags component and unescapeHTML in the DOM and AJAX Prototype framework allows a hacker to cause a service failure.

The vulnerability of the stripTags and unescapeHTML components in the DOM and AJAX Prototype framework is related to insufficient processing of regular expressions. Exploiting this vulnerability can allow an attacker to cause service failures...

7.5CVSS6.8AI score0.02455EPSS
Exploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the Open vSwitch multi-level switch lies in the lack of a mechanism for verifying the source of the connection. This allows an attacker to trigger a service failure.

The vulnerability of the Open vSwitch multi-level switch lies in the lack of a mechanism for verifying the source of the connection. Exploiting this vulnerability allows an attacker to trigger a service failure using specially created BFD packets...

6.8CVSS6.5AI score0.00783EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the stb_vorbis component in the C/C++ Libstb library allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the stbvorbis component in the C/C++ Libstb library is related to the repeated release of memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially creat...

7.5CVSS7.2AI score0.00518EPSS
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the C/C++ Libstb library, related to writing beyond buffer boundaries, allows a hacker to trigger a service failure.

The vulnerability of the C/C++ Libstb library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially created file...

7.5CVSS7.4AI score0.00536EPSS
Exploits0References12Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of C/C++ Libstb libraries, related to writing beyond buffer boundaries, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the C/C++ Libstb library lies in the writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service failures through the use of a specially created file...

6.5CVSS7.1AI score0.0073EPSS
Exploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the ec_glob() function in the EditorConfig code library allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ecglob function in the EditorConfig code library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

7.8CVSS7.6AI score0.00965EPSS
Exploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the nfsd_file_put() function in the filecache.c component of the Linux kernel allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the nfsdfileput function in the filecache.c component of the Linux kernel lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.3AI score0.00246EPSS
Exploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the command-line tool of the Zstandard data compression library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the command-line tool of the Zstandard data compression library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.7AI score0.01588EPSS
Exploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.9AI score0.00268EPSS
Exploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the parse_tag() function in the libass/ass_parse.c component of the ASS/SSA subtitle renderer library in Libass allows a attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the parsetag function in the libass/assparse.c component of the ASS/SSA subtitle renderer library in Libass is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data, compromise its...

8.8CVSS7.2AI score0.02628EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the PLAY command in the Live555 multimedia streaming library, which allows a hacker to cause a service failure.

The vulnerability of the PLAY command in the Live555 multimedia streaming library group is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.5CVSS6.1AI score0.00865EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the AC3 File Handler component in the streaming multimedia processing library of Live555 allows a attacker to cause a service failure.

The vulnerability of the AC3 File Handler component in the Live555 multimedia streaming library is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

7.8CVSS6.4AI score0.01532EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the OpenSC smart card handling library, related to writing beyond the buffer boundary, allows a violator to trigger a service failure.

The vulnerability of the OpenSC smart card handling library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.6AI score0.01144EPSS
Exploits0References31Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of Google Chrome, related to errors in the implementation of security checks for standard elements, allows attackers to escalate their privileges.

The vulnerability of Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

10CVSS6.9AI score0.00313EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

Vulnerability of the destroy_unused_implicit_child_mr() function in the drivers/infiniband/hw/mlx5/odp.c module – This driver is part of the Linux operating system’s InfiniBand kernel support. It allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the destroyunusedimplicitchildmr function in the drivers/infiniband/hw/mlx5/odp.c module – The Linux kernel driver for InfiniBand is vulnerable due to the repeated use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

7.8CVSS6.8AI score0.00183EPSS
Exploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.2AI score0.07407EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the MetaSlider plugin in the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the MetaSlider plugin in the WordPress content management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.00604EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the Industrial Edge Device Kit’s software for data collection, processing, and analysis is related to deficiencies in authentication procedures, allowing attackers to circumvent security restrictions.

The vulnerability of the Industrial Edge Device Kit’s software for data collection, processing, and analysis is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...

10CVSS5.9AI score0.00675EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the `setUpgradeFW` function in TOTOLINK CP450 router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setUpgradeFW function in TOTOLINK CP450 router microprogramming software is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the FileName parameter...

10CVSS5.9AI score0.019EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The microprogrammed software for FortiSwitch Ethernet switches, which utilizes a rigidly encoded cryptographic key, allows a intruder to execute any arbitrary code.

The microprogrammed software of FortiSwitch Ethernet switches is related to the use of a rigidly encoded cryptographic key. Exploiting this vulnerability can allow a malicious actor, operating remotely, to execute arbitrary code...

10CVSS5.8AI score0.00966EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the remote access and replication server of Synology Replication Service, as well as the corporate-level server of Synology Unified Controller for operating systems such as Synology DiskStation Manager (DSM), is related to a single-shift error. This vulnerability allows attackers to execute arbitrary code or trigger a service failure.

The vulnerability of the remote access and replication server of Synology Replication Service, as well as the corporate-level servers of Synology Unified Controller and Synology DiskStation Manager DSM, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to...

10CVSS7.8AI score0.01321EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the formMapDelDevice function in the microprogramming software for TOTOLINK A3002R allows a intruder to execute arbitrary commands.

The vulnerability of the formMapDelDevice function in the microprogrammed software of TOTOLINK A3002R routers lies in the lack of measures to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS5.9AI score0.08527EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.5 views

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded software developed for Qualcomm chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

6.1CVSS5.7AI score0.00095EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.7AI score0.00334EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.1CVSS8.2AI score0.01345EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.7 views

The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00988EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its memory management after it is released. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.003EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform, related to deficiencies in the authentication process, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.1CVSS8.3AI score0.02596EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9.1CVSS8AI score0.13548EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the ColdFusion software platform arises from incorrect restrictions on the path to the restricted catalog, allowing attackers to bypass security restrictions.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

8.7CVSS7.9AI score0.12106EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the Data Manager component of Siemens SENTRON 7KT PAC1260, a multi-functional device for measuring parameters of electrical circuits, allows a hacker to gain unauthorized access to the device.

The vulnerability of the Data Manager component in the microprogramming software for multifunctional measurement devices for measuring electrical network parameters from Siemens SENTRON 7KT PAC1260 is related to the use of rigidly encrypted account data. Exploiting this vulnerability can allow an...

10CVSS5.9AI score0.00541EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of ESET’s command-line scanner for anti-virus protection allows a hacker to execute arbitrary code.

The vulnerability of ESET’s command-line scanner for anti-virus protection is related to an uncontrolled element in the loading process of the version.dll library. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

6.6CVSS8.3AI score0.01803EPSS
Exploits0References3Affected Software11
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

Vulnerability of the dw_i3c_common_remove() function in the drivers/i3c/master/dw-i3c-master.c module – The I3C support driver for the Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the dwi3ccommonremove function in the drivers/i3c/master/dw-i3c-master.c module – Linux’s I3C driver architecture is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

7.8CVSS7.2AI score0.00213EPSS
Exploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

Vulnerability of the dm9000_drv_remove() function in the drivers/net/ethernet/davicom/dm9000.c module – This driver provides support for Ethernet adapter devices in Linux operating systems. It can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the dm9000drvremove function in the drivers/net/ethernet/davicom/dm9000.c module – The Ethernet adapter driver from Davicom’s Linux kernel has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromi...

7.8CVSS6.7AI score0.00201EPSS
Exploits0References19Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the padata_free_shell() function in the kernel/padata.c module of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the padatafreeshell function in the kernel/padata.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

7.8CVSS6.7AI score0.00193EPSS
Exploits0References18Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the Samba networking communication package, related to authentication errors, allows a perpetrator to gain access to confidential data.

The vulnerability of the Samba networking communication package is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

4.3CVSS6.4AI score0.01178EPSS
Exploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability in the mm/usercopy.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the mm/usercopy.c component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.7AI score0.00272EPSS
Exploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the `py.path.svnwc` component, a development and testing utility for Python programs, allows a hacker to trigger a service failure.

The vulnerability of the py.path.svnwc component, a utility for Python program development and testing, is related to insufficient handling of regular expressions. Exploiting this vulnerability could allow an attacker to cause service failures...

7.5CVSS6.8AI score0.04607EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the imlib_load_image_with_error_return function in the Imlib image processing library allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the imlibloadimagewitherrorreturn function in the Imlib image processing library is related to out-of-buffer writing. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a...

10CVSS7.6AI score0.0069EPSS
Exploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the function LookupTable::SetLUT in the DICOM image processing tool Grassroots DiCoM is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, an...

7.7CVSS7.5AI score0.01394EPSS
Exploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.12 views

The vulnerability of the JPEG2000Codec::DecodeByStreamsCommon function in the DICOM image processing tool Grassroots DiCoM allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the JPEG2000Codec::DecodeByStreamsCommon function, a tool for working with DICOM images in Grassroots DiCoM, is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidenti...

8.1CVSS7.6AI score0.01474EPSS
Exploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the NFSD component in the Linux operating system’s kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NFSD component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS6.5AI score
Exploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the read_subimage_data function in the OpenImageIO image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the readsubimagedata function in the OpenImageIO image processing library is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

10CVSS7.7AI score0.01315EPSS
Exploits1References8Affected Software4
Total number of security vulnerabilities74701