Lucene search
+L

427 matches found

BDU FSTEC
BDU FSTEC
added 2019/07/04 12:00 a.m.8 views

The vulnerability of the installation mechanism for the software set for developing Intel Data Center Manager SDK allows unauthorized access, enabling attackers to enhance their privileges.

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00403EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/21 12:00 a.m.8 views

The vulnerability of the Open Cloud Integrity Technology, a tool for creating cloud services, stems from deficiencies in access control within the certification database. This allows attackers to disclose protected information.

The vulnerability of the Open Cloud Integrity Technology, which is used to create cloud services, is related to deficiencies in access control within the certification database. Exploiting this vulnerability could allow attackers to disclose protected information...

4.4CVSS5.5AI score0.00252EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:00 a.m.10 views

The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PostgreSQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

6.5CVSS5.5AI score0.00327EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2019/06/14 12:00 a.m.14 views

Intel Converged Security and Management Engine, Server Platform Services and Trusted Execution Engine HECI subsystem privilege permission and access control issue vulnerability

Intel Converged Security and Management Engine CSME, etc. are products of Intel Corporation.Intel Converged Security and Management Engine is a security management engine.Intel Server Platform Services SPS is a server platform service program.Intel Trusted Execution Engine is a trusted execution...

7.2CVSS7.9AI score0.00458EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in their lack of access control mechanisms. This allows attackers to carry out cross-site scripting attacks and increase their privileges.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the lack of access control mechanisms. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and increase their privileges by using a specially crafted...

9CVSS5.2AI score0.03313EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:00 a.m.9 views

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine allows attackers to enhance their privileges.

The vulnerability of the Dynamic Application Loader component of the Intel Converged Security and Manageability Engine and the Intel Trusted Execution Engine is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00358EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/16 12:00 a.m.12 views

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to root level.

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller information infrastructure is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

7.8CVSS7.3AI score0.00352EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/05/06 12:00 a.m.9 views

The vulnerability of the Agent component of the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, allows a hacker to gain access to protected information.

The vulnerability of the Agent component in the Dr.Web anti-virus protection software, Dr.Web Enterprise Security Suite, is related to deficiencies in access control to named communication channels. Exploiting this vulnerability can allow attackers to gain access to information about user...

3.4CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:00 a.m.6 views

The vulnerability of the InnoDB component of the MySQL Database Server management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS6.7AI score0.02799EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.17 views

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool (formerly XML Publisher) allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to modify, add, or delete data using...

7.2CVSS7.1AI score0.92183EPSS
SaveExploits4References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.7 views

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, which is used for automating business operations. This vulnerability allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the Message Display component of the Oracle Email Center messaging software in the Oracle E-Business Suite system, a business automation solution, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.5CVSS7.5AI score0.01287EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/25 12:00 a.m.10 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

7.8CVSS6.5AI score0.02191EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/23 12:00 a.m.20 views

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain access to modify, add, or delete data.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data using the HTTP protocol...

8.5CVSS7.5AI score0.01287EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.10 views

The vulnerability of the Kernel Mode Driver component of the Intel Graphics Driver allows a hacker to execute arbitrary code.

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

3.9CVSS7.8AI score0.00453EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2019/04/09 12:00 a.m.6 views

IBM API Connect Privileging Vulnerability (CNVD-2019-09479)

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. An elevation of privilege vulnerability exists in Developer Portal in IBM API Connect versions...

9.8CVSS7.1AI score0.02626EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/29 12:00 a.m.11 views

The vulnerability of the driver that enables the operation of RAID arrays in Matrix Storage Manager, due to deficiencies in access control, allows a hacker to increase their privileges.

The vulnerability of the driver that enables the operation of RAID arrays in Matrix Storage Manager is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

7.5CVSS7.2AI score0.00358EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:00 a.m.11 views

The vulnerability of the file system configuration settings in the Cisco NX-OSS device’s networking operating system allows a perpetrator to increase their privileges and gain access to protected information.

The vulnerability of the file system configuration settings in the Cisco NX-OSS network operating system devices relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to protected information...

7.8CVSS7.1AI score0.00383EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:00 a.m.12 views

The vulnerability in the implementation of the Bash shell of the Cisco NX-OS network operating system in Cisco devices allows a hacker to increase their privileges.

The vulnerability of the Bash shell implementation of the Cisco NX-OS network operating system in Cisco devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00386EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/15 12:00 a.m.12 views

The vulnerability of the Oracle Solaris operating system’s Zones component allows a attacker to gain access to protected information, modify file access rights, or cause service interruptions.

The vulnerability of the Oracle Solaris operating system’s Zones component is related to insufficient access control. Exploiting this vulnerability can allow an attacker to gain access to protected information, modify file access rights, or cause service interruptions...

4.9CVSS6AI score0.00417EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/15 12:00 a.m.7 views

Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.1CVSS6.4AI score0.02108EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder