Lucene search
+L

301 matches found

BDU FSTEC
BDU FSTEC
•added 2020/06/10 12:00 a.m.•17 views

The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework allows a attacker to execute a “man-in-the-middle” attack.

The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

8.8CVSS7.1AI score0.01809EPSS
SaveExploits0References9Affected Software12
BDU FSTEC
BDU FSTEC
•added 2020/06/10 12:00 a.m.•19 views

The vulnerability of the Cisco Unified Contact Center Express automation software, related to authentication errors, allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco Unified Contact Center Express operator automation software is related to authentication errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

5.5CVSS6.2AI score0.00806EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/05/19 12:00 a.m.•22 views

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance (ASA) microprogramming software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance ASA microprogramming software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

9.3CVSS7.7AI score0.02417EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/04/10 12:00 a.m.•34 views

The vulnerability of the Grafana data representation web tool, related to authentication errors, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Grafana data presentation web tool is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.8AI score0.64284EPSS
SaveExploits1References3Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/10 12:00 a.m.•18 views

The vulnerability of the Open Build Service software platform, related to authentication errors, allows attackers to circumvent existing security restrictions and execute a type of “man-in-the-middle” attack.

The vulnerability of the Open Build Service software platform is related to errors in verifying the authenticity of certificates. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute a type of “man-in-the-middle” attack...

9CVSS7.2AI score0.00714EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/03/04 12:00 a.m.•19 views

The vulnerability of the STARTTLS component of the Keycloak identity and access management software lies in implementation errors related to authentication procedures. This allows attackers to escalate their privileges.

The vulnerability of the STARTTLS component of the Keycloak identity and access management software is related to implementation errors in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

9.3CVSS7.7AI score0.01054EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/03/04 12:00 a.m.•15 views

The vulnerability of the Keycloak identity and access management software lies in implementation errors related to authentication procedures, which allow attackers to escalate their privileges.

The vulnerability of the Keycloak identity and access management software is related to errors in the implementation of authentication procedures. Exploiting this vulnerability can allow unauthorized actors to gain increased privileges...

9.3CVSS7.7AI score0.01076EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/03/04 12:00 a.m.•15 views

The vulnerability of the SAP NetWeaver software integration platform’s keystore service allows attackers to disclose protected information.

The vulnerability of the SAP NetWeaver software integration platform’s keystore service is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

7.4CVSS7.2AI score0.00575EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/22 12:00 a.m.•10 views

The vulnerability of the Remote Desktop Web Access service in Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Remote Desktop Web Access service in Windows operating systems with authentication processing errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

6.8CVSS6.4AI score0.05027EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/01/13 12:00 a.m.•16 views

The vulnerability of software for integrating SAP NetWeaver Process Integration corporate applications, related to authentication errors, allows attackers to increase their privileges.

The vulnerability of the software for integrating SAP NetWeaver Process Integration corporate applications is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

4.3CVSS5.5AI score0.0055EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/08 12:00 a.m.•21 views

Huawei routers’ vulnerabilities related to authentication errors allow attackers to execute arbitrary code and increase their privileges.

The vulnerability of Huawei routers is related to authentication errors. Exploiting this vulnerability allows a hacker to execute arbitrary code and increase their privileges...

7.8CVSS7.6AI score0.00222EPSS
SaveExploits0References3Affected Software21
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•22 views

The vulnerability of the FortiOS operating system, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FortiOS operating system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, while pretending to be an LDAP server...

3.1CVSS7.5AI score0.18566EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/12/17 12:00 a.m.•23 views

The vulnerability of the wan.htm component in D-Link DIR-600M N 150 Wi-Fi routers allows a intruder to gain unauthorized access to protected information and alter the configuration settings.

The vulnerability of the wan.htm component in D-Link DIR-600M N 150 Wi-Fi routers is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and modify configuration settings...

10CVSS7.8AI score0.67091EPSS
SaveExploits4References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/12/03 12:00 a.m.•18 views

A vulnerability in the isolation function of websites arises when using Blob URLs and the Google Chrome browser. This allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the isolation functionality of websites, which arises when using Blob URLs and the Google Chrome browser, is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through...

7.8CVSS7.1AI score0.00846EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•16 views

The vulnerability of Microprogramming Software: Intel Converged Security and Manageability Engine (CSME), Intel Trusted Execution Engine (TXE), and Intel Dynamic Application Loader (DAL) is related to authentication errors, allowing attackers to escalate their privileges.

The vulnerabilities of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL are related to authentication errors. Exploiting these vulnerabilities can allow attackers to enhance their...

4.1CVSS7AI score0.00366EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/11/11 12:00 a.m.•15 views

The vulnerability of the software authentication module of the Cisco Content Security Management Appliance allows a hacker to gain access to spam messages from other users.

The vulnerability of the software authentication module of the Cisco Content Security Management Appliance is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to spam messages from other users...

4.3CVSS5.5AI score0.01021EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/10/16 12:00 a.m.•21 views

The vulnerability of the Junos OS router series in connection with authentication process errors allows attackers to gain access to the Junos Device Manager application and exercise full control over the system.

The vulnerability of the Junos OS router of the NFX Series is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to the Junos Device Manager JDM and gain full control over the system...

7.8CVSS5.5AI score0.00379EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/10/03 12:00 a.m.•14 views

The vulnerability of the Cisco IOS XE command-line interface allows a attacker to execute arbitrary commands on the underlying operating system.

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to authentication process errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the underlying operating system...

6.8CVSS5.9AI score0.00352EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/09/02 12:00 a.m.•12 views

The vulnerability in the web interface of the Cisco Integrated Management Controller, a software tool for remote administration of servers, allows a malicious individual to make unauthorized changes to the system configuration.

The vulnerability of the web interface for managing Cisco Integrated Management Controllers involves authentication errors. Exploiting this vulnerability allows an attacker to make unauthorized changes to the system configuration remotely...

6.8CVSS5.5AI score0.01703EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/08/20 12:00 a.m.•15 views

The vulnerability in the web-based administration interface of Cisco Adaptive Security Appliance (ASA) allows a attacker to increase their privileges.

The vulnerability of the Cisco Adaptive Security Appliance ASA network interface management web interface is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through specially crafted HTTP requests...

9CVSS5.5AI score0.01593EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder