Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.3 views

The vulnerability of the Jenkins automation server, related to deficiencies in authentication procedures, allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

4.3CVSS6.5AI score0.00325EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.2 views

The vulnerability of the Jenkins Templating Engine (JTE) in the Jenkins automation server, related to improper code generation management, allows attackers to bypass security restrictions and execute arbitrary code.

The vulnerability of the Jenkins Templating Engine JTE in the Jenkins automation server is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary code...

9CVSS5.9AI score0.01044EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.3 views

The vulnerability of the MongoDB database management system server, related to the absence of authentication procedures, allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the MongoDB database management system server is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...

6.5CVSS5.5AI score0.00376EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.1 views

Vulnerability of functions SKB_HEAD_ALIGN(), __netdev_alloc_skb(), and napi_alloc_skb() (include/net/gro.h, net/core/gro.c, net/core/skbuff.c) in the Linux operating system, allowing a hacker to cause a service failure

The vulnerabilities of the functions SKBHEADALIGN, netdevallocskb, and napiallocskb located in include/net/gro.h, net/core/gro.c, and net.core/skbuff.c in the Linux kernel are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

5.5CVSS6.6AI score0.00168EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.3 views

Vulnerability of the function rt2x00lib_disable_radio() in the module drivers/net/wireless/ralink/rt2x00/rt2x00dev.c – A driver for supporting Ralink wireless adapter devices in the Linux operating system, which allows a hacker to cause a service failure.

Vulnerability of the function rt2x00libdisableradio in the module drivers/net/wireless/ralink/rt2x00/rt2x00dev.c – The driver for supporting Ralink wireless adapters in the Linux kernel is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability could allow ...

5.5CVSS6.3AI score0.00175EPSS
Exploits0References38Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.4 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.00296EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.4 views

Vulnerability of the mptcp_nlremove_subflow_and_signal_addr() function (net/mptcp/pm_netlink.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the mptcpnlremovesubflowandsignaladdr function net/mptcp/pmnetlink.c in the Linux kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.0017EPSS
Exploits0References24Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.4 views

The vulnerability of the fs/hfs.c file, a component of the hfs loader for operating system Grub2, allows a attacker to execute arbitrary code.

The vulnerability of the fs/hfs.c file, a component of the Grub2 operating system loader, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, using a specially created fil...

6.8CVSS7.5AI score0.00196EPSS
Exploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.4 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.00243EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.3 views

The vulnerability of the Anti-Malware module of the Trend Micro Deep Security Agent allows a hacker to increase their privileges.

The vulnerability of the Anti-Malware module of the Trend Micro Deep Security Agent is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.2AI score0.00153EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.1 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to buffer overflow in dynamic memory, allowing attackers to cause system failures.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created MODEL file...

7.8CVSS7.5AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.1 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to errors during initialization of variables, allowing attackers to trigger a service failure and gain unauthorized access to protected information.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to errors during initialization of variables. Exploiting this vulnerability can allow attackers to cause service failures and gain unauthorized access to protected information using a specially created...

7.8CVSS7.2AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

The vulnerability of Trend Micro Deep Security Agent lies in its improper handling of file access links, which allows attackers to escalate their privileges.

The vulnerability of the Trend Micro Deep Security Agent lies in the incorrect handling of the link before accessing a file. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00152EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to errors during initialization of variables, allowing a hacker to trigger a service failure

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to errors during initialization of variables. Exploiting this vulnerability can allow attackers to cause service failures and gain unauthorized access to protected information using a specially created...

7.8CVSS7.2AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.3 views

The vulnerability of the modTMSM component in the Trend Micro Apex Central security monitoring and management tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the modTMSM component in the Trend Micro Apex Central security management and monitoring tool is related to insufficient checking of incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.8CVSS6.5AI score0.00299EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

The vulnerability of the MOTW mechanism of the WinRAR file archiver allows a hacker to execute arbitrary code.

The vulnerability of the Mark of the Web MOTW file archiver WinRAR is related to the lack of a warning message for users regarding unsafe actions related to the user interface when processing symbolic links that point to executable files. Exploiting this vulnerability allows a malicious actor to...

9CVSS7.5AI score0.01213EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.3 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to errors during initialization of variables, allowing attackers to trigger a service failure and gain unauthorized access to protected information.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to errors during initialization of variables. Exploiting this vulnerability can allow attackers to cause service failures and gain unauthorized access to protected information using a specially created...

7.8CVSS7.2AI score0.0024EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.3 views

The vulnerability of software for modeling, design, and drawing in AutoCAD, related to reading data outside of the buffer in memory, allows a perpetrator to cause a service failure.

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created CATPART file...

7.8CVSS7.4AI score0.00378EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

Vulnerability of software for modeling, design, and drawing in AutoCAD, related to reading data outside the buffer in memory, allowing a perpetrator to cause service failures and gain unauthorized access to protected information

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures and gain unauthorized access to protected information using a specially create...

7.8CVSS7.4AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

The vulnerability of the modOSCE component of the Trend Micro Apex Central security monitoring and management tool allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the modOSCE component of the Trend Micro Apex Central security monitoring and management tool is related to insufficient checking of incoming requests. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected informatio...

7.8CVSS6.5AI score0.00299EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways’ network access control devices lies in buffer overflows in the stack, allowing attackers to execute arbitrary code.

The vulnerability of Ivanti Connect Secure, Ivanti Policy Secure, and ZTA Gateways lies in buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.7AI score0.99961EPSS
Exploits7References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.3 views

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels, which stems from the use of weak encryption algorithms, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels is related to the use of weak encryption algorithms. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...

6.5CVSS6.7AI score0.0015EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.1 views

The vulnerability of the microprogrammed software for ViewJet C-more Series and GC-A2 Series touch panels lies in their ability to bypass access control mechanisms, allowing intruders to compromise the integrity of the protected information.

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels lies in their ability to bypass access control mechanisms. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

5.8CVSS6.4AI score0.00376EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels, related to information representation errors in the user interface, allows a intruder to replace the user interface.

The vulnerability of the microprogrammed software for ViewJet C-more Series sensor panels is related to errors in information representation by the user interface. Exploiting this vulnerability can allow an attacker to remotely replace the user interface...

5CVSS5.8AI score0.0029EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.1 views

The vulnerability of the microprogrammed software of the ViewJet C-more Series and GC-A2 Series sensor panels, related to unlimited distribution of resources, allows a intruder to cause service failures.

The vulnerability of the microprogrammed software in the ViewJet C-more Series and GC-A2 Series sensor panels is related to unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.3CVSS6.2AI score0.00504EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

The vulnerability of Trend Micro Deep Security Agent lies in its improper handling of file access links, which allows attackers to trigger a service failure.

The vulnerability of the Trend Micro Deep Security Agent lies in the improper handling of the link before accessing a file. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS5.9AI score0.00136EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.1 views

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the insufficient processing of incoming requests, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the monitoring and security management tool Trend Micro Apex Central lies in the insufficient checking of incoming requests. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.5CVSS7AI score0.00241EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the operation of writing outside the buffer in memory, allowing a hacker to execute arbitrary code

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SLDPRT file...

7.8CVSS8AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to reading data outside the buffer in memory, allowing a perpetrator to execute arbitrary code

The vulnerability of the software for modeling, designing, and drawing in AutoCAD is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SLDPRT file...

7.8CVSS7.8AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.3 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to memory usage after it is released, allowing attackers to trigger a service failure and gain unauthorized access to protected information.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure and gain unauthorized access to protected information using a specially created 3DM fi...

7.8CVSS7.2AI score0.00273EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.1 views

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to buffer overflow in dynamic memory, allowing attackers to cause system failures and gain unauthorized access to protected information.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure and gain unauthorized access to protected information using a specially created MODEL file...

7.8CVSS7.5AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.2 views

The vulnerability of the Thunderbird email client, related to errors in information presentation by the user interface, allows attackers to disclose protected information.

The vulnerability of the Thunderbird email client is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

7.5CVSS6.3AI score0.0032EPSS
Exploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/04 12:0 a.m.1 views

Vulnerability of software for modeling, design, and drawing in AutoCAD, related to reading data outside the buffer in memory, allowing a perpetrator to cause service failures and gain unauthorized access to protected information

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures and gain unauthorized access to protected information using a specially create...

7.8CVSS7.4AI score0.00224EPSS
Exploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.11 views

The vulnerability of the ImageInput::read_image() function in the src/libOpenImageIO/imageinput.cpp module of the OpenImageIO library allows a hacker to cause a service failure.

The vulnerability of the ImageInput::readimage function in the src/libOpenImageIO/imageinput.cpp module of the OpenImageIO library is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.5CVSS5.5AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.3 views

The vulnerability of Juniper Networks Junos OS routers in the MX-SPC3 series arises from a improper release of memory before deleting the last link (“memory leak”), allowing an attacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS routers in the MX-SPC3 series is related to improper memory release before deleting the last link “memory leak”. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.5CVSS5.4AI score0.00327EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.3 views

The vulnerability of the nvme_stop_ctrl() function in the Linux kernel driver for NVME support allows a attacker to cause a service failure.

The vulnerability of the nvmestopctrl function in the Linux kernel driver for NVME storage devices is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00179EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.1 views

The vulnerability of the xhci_mem_cleanup() function in the Linux kernel USB driver allows a hacker to cause a service failure.

The vulnerability of the xhcimemcleanup function in the Linux kernel USB driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00204EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.2 views

The vulnerability of the simple_offsetdestroy() function in the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the simpleoffsetdestroy function in the Linux kernel file system is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00187EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.2 views

The vulnerability of the Routing Protocol Demon (rpd) in Juniper Networks’ Junos OS and Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Routing Protocol Data rpd in Juniper Networks’ Junos OS and Junos OS Evolved operating systems lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending...

6.5CVSS5.5AI score0.00332EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.1 views

Vulnerability of the ufshcd_rpm_put_sync() function (drivers/ufs/core/ufs_bsg.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the ufshcdrpmputsync function drivers/ufs/core/ufsbsg.c in the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00165EPSS
Exploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.2 views

The vulnerability of the `update_parent_effective_cpumask()` function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the updateparenteffectivecpumask function in the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.5CVSS6.4AI score0.00198EPSS
Exploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.2 views

The vulnerability of the nfs4_show_open() function in the network file system of Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nfs4showopen function in the network file system of Linux kernels is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00189EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.2 views

The vulnerability of the nfsd4_encode_fattr4() function in the network file system of Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nfsd4encodefattr4 function in the Network File System of Linux operating systems is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00188EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.3 views

The vulnerability of the xe_display_fini_noirq() function in the Linux kernel’s Direct Rendering Infrastructure Support driver allows a malicious actor to cause a service failure.

The vulnerability of the xedisplayfininoirq function in the Direct Rendering Infrastructure DRI driver of the Linux operating system is related to improper memory release before deleting the last pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00196EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.2 views

The vulnerability of the `create_elf_fdpic_tables()` function in the Linux kernel file system allows a attacker to cause a service failure.

The vulnerability of the createelffdpictables function in the Linux kernel file system is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00197EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.3 views

The vulnerability of the pmic_glink_send() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pmicglinksend function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00204EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.5 views

The vulnerability in the J-Web management web interface of Juniper Networks Junos OS allows a perpetrator to execute arbitrary commands.

The vulnerability in the J-Web management web interface of Juniper Networks Junos OS relates to the failure to neutralize data in XPath expressions. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS5.9AI score0.00487EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.2 views

The vulnerability of the BmpInput::read_native_scanline() function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library allows a hacker to cause a service failure.

The vulnerability of the BmpInput::readnativescanline function in the src/bmp.imageio/bmpinput.cpp module of the OpenImageIO library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.5CVSS5.6AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.2 views

The vulnerability of the print_info() function in the src/iinfo/iinfo.cpp module of the OpenImageIO library allows a attacker to cause a service failure.

The vulnerability of the printinfo function in the src/iinfo/iinfo.cpp module of the OpenImageIO library is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

5.3CVSS5.8AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:0 a.m.1 views

The vulnerability of the IBM Common Cryptographic Architecture (CCA) cryptographic platform, which arises from information disclosure due to incompatibilities, allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Common Cryptographic Architecture CCA lies in the ability to disclose information through incompatibility. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

3.7CVSS5.5AI score0.00241EPSS
Exploits0References3Affected Software2
Total number of security vulnerabilities74701