Lucene search
+L

29 matches found

OSV
OSV
added 2023/02/09 5:15 p.m.4 views

CVE-2022-48289

The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

7.5CVSS5.8AI score0.00417EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.10 views

The vulnerability of the Illumina Local Run Manager software lies in the absence of an authentication process, which allows attackers to infiltrate, replicate, modify, and/or intercept confidential data.

The vulnerability of the Illumina Local Run Manager software lies in the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to remotely infiltrate, replicate, modify, and/or intercept sensitive data...

9.1CVSS8AI score0.01031EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/10 12:0 a.m.19 views

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software lies in the lack of authentication mechanisms, which allows attackers to bypass the authentication process.

The vulnerability of IDEMIA’s biometric identification systems’ microprogramming software is related to the absence of authentication. Exploiting this vulnerability could allow a malicious actor to bypass authentication and cause service failures...

7.1CVSS5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.7 views

The vulnerability of the debug_post_set.cgi component in the D-Link DWR-932C E1 router microprogramming system allows a hacker to increase their privileges.

The vulnerability of the debugpostset.cgi component in the D-Link DWR-932C E1 router microprogramming system is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending a specially crafted HTTP request...

7.5CVSS7.7AI score0.03792EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/07 12:0 a.m.6 views

The vulnerability of the RTAS kernel component in the Linux operating system relates to the absence of a mechanism for authentication. This lack allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the RTAS component of the Linux operating system is related to improper handling of memory access. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.2CVSS6.4AI score0.00501EPSS
SaveExploits1References25Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.11 views

The vulnerability of the scan.c component in the X11vnc server allows attackers to gain access to confidential data, compromise its integrity, and cause service failures. This vulnerability is related to the absence of a authentication mechanism.

The vulnerability of the scan.c component in the X11vnc server relies on the absence of an authentication mechanism. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

8.8CVSS7.7AI score0.01756EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.32 views

The vulnerability in Simatic IT’s software lies in the lack of authentication mechanisms, which allows attackers to bypass identity verification at the application level.

The vulnerability in Simatic IT’s software is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to bypass identity verification at the application level...

7.7CVSS7.5AI score0.02656EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.6 views

The vulnerability of the Windows operating system allows a malicious individual to trigger a service failure or redirect network traffic.

Due to the absence of an ARP packet authentication mechanism in the Windows operating system, a malicious individual can send a false ARP response, thereby replacing the entry in the ARP table and, in turn, changing the routing of network packets to the device whose entry in the ARP table has bee...

10CVSS5.3AI score0.14703EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2008/10/15 8:7 p.m.29 views

CVE-2008-4576

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service OOPS via an INIT-ACK that states the peer does not support AUTH, which causes the sctpprocessinit function to clean up active transports and triggers the OOPS when the T1-Init timer expires...

7.8CVSS5.5AI score0.0368EPSS
SaveExploits0References26
Rows per page
Query Builder