Lucene search
+L

301 matches found

BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•16 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.3AI score0.00178EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•19 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00167EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•22 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

5.5CVSS5.9AI score0.00167EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/10 12:00 a.m.•16 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.3AI score0.00257EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/10/09 12:00 a.m.•23 views

The vulnerability of the restoreSettings function in the Comments Like Dislike plugin of the WordPress content management system allows a hacker to compromise the integrity of the data.

The vulnerability of the restoreSettings function in the WordPress content management system’s comments and dislikes module is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise data integrity...

4.3CVSS6.1AI score0.00931EPSS
SaveExploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/06 12:00 a.m.•17 views

The vulnerability of the HiviewTunner module of the HarmonyOS operating system allows a hacker to intercept legitimate traffic.

The vulnerability of the HiviewTunner module of the HarmonyOS operating system is related to authentication errors. Exploiting this vulnerability allows a remote attacker to intercept legitimate network traffic...

10CVSS7.8AI score0.00493EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/10/03 12:00 a.m.•15 views

The vulnerability of the kernel of the EMUI operating system of HarmonyOS allows attackers to compromise data privacy and integrity.

The vulnerability of the EMUI operating system of HarmonyOS is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to compromise data confidentiality and integrity...

9.4CVSS7.8AI score0.00382EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/09/28 12:00 a.m.•25 views

The vulnerability of the dumpHeap method in the Avalanche mobile device management system allows a hacker to escalate their privileges.

The vulnerability of the dumpHeap method in the Avalanche mobile device management system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

10CVSS7.4AI score0.02445EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/26 12:00 a.m.•18 views

The vulnerability of the software interface of the IBM Robotic Process Automation software, related to authentication errors, allows a perpetrator to disclose sensitive information about the vulnerable system.

The vulnerability of the software interface of the IBM Robotic Process Automation tooling lies in authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information about the vulnerable system...

6.8CVSS6.5AI score0.0049EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/26 12:00 a.m.•16 views

The vulnerability of the cacti_ldap_auth() function in the network monitoring software Cacti allows a hacker to bypass the authentication process.

The vulnerability of the cactildapauth function in the network monitoring software Cacti is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to bypass the authentication process...

5.3CVSS5.9AI score0.00776EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/25 12:00 a.m.•16 views

The vulnerability of the software for managing medical organizations, OpenEMR, related to authentication errors, allows a perpetrator to escalate their privileges.

The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

5.5CVSS5.8AI score0.0043EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/25 12:00 a.m.•19 views

The vulnerability of the OpenEMR software for managing medical organizations, related to authentication errors, allows a intruder to perform an HTML injection.

The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform HTML injection attacks...

8.5CVSS6.8AI score0.00559EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/19 12:00 a.m.•23 views

The vulnerability of the Apache Superset data visualization software lies in authentication errors, which allow an attacker to gain read access to the database.

The vulnerability of the Apache Superset data visualization software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to the database...

4.3CVSS5.5AI score0.01019EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/16 12:00 a.m.•54 views

The vulnerability of the application programming interface for the declarative delivery tool for GitOps for Kubernetes Argo CD lies in authentication errors, which allow a perpetrator to bypass established access controls.

The vulnerability of the application programming interface for the declarative delivery tool of GitOps for Kubernetes Argo CD is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass established access controls...

9CVSS7.7AI score0.00879EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/09/14 12:00 a.m.•35 views

The vulnerability of the Keycloak identity and access management software lies in errors during the certificate verification process, which allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Keycloak identity and access management software is related to errors in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

6.8CVSS6.5AI score0.00522EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/09/07 12:00 a.m.•22 views

The vulnerability of the XWiki platform for creating collaborative web applications lies in authentication errors, which allow a malicious user to execute arbitrary web scripts with elevated privileges.

The vulnerability of the XWiki Platform lies in authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary web scripts with elevated privileges...

6.5CVSS6.9AI score0.00546EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2023/08/30 6:15 p.m.•10 views

DEBIAN-CVE-2023-40184

xrdp is an open source remote desktop protocol RDP server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The authstartsession function can return non-zero 1 value on, e.g., PAM error which may result in in session...

6.5CVSS5.5AI score0.00853EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/08/24 12:00 a.m.•19 views

The vulnerability of the `process.mainModule.proto.require()` function in the Node.js software platform allows a attacker to compromise the integrity of the protected information.

The vulnerability of the process.mainModule.proto.require function in the Node.js software platform is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

7.8CVSS6.9AI score0.0105EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/07/25 12:00 a.m.•11 views

The vulnerability of the localstorage object in the Mozilla Firefox browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the localstorage storage mechanism in the Mozilla Firefox browser is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS6.8AI score0.00575EPSS
SaveExploits0References7Affected Software11
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•16 views

The vulnerability of the Perl programming language library HTTP::Tiny involves authentication process errors, which allow attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Perl programming language library HTTP::Tiny is related to errors in the TLS certificate authentication process. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.1CVSS6.9AI score0.01742EPSS
SaveExploits0References20Affected Software6
Rows per page
Query Builder