Lucene search
K

265 matches found

BDU FSTEC
BDU FSTEC
added 2023/01/31 12:0 a.m.6 views

The vulnerability of the mobile application for collaborative work with documents, IBM Navigator Mobile for Android operating systems, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IBM Navigator Mobile mobile application for collaborative document work on Android operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.00165EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/16 12:0 a.m.4 views

The vulnerability of the SAP Disclosure Management tool in terms of authentication errors allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Disclosure Management reporting tool is related to authentication errors. Exploiting this vulnerability can allow unauthorized actors, operating remotely, to gain unauthorized access to protected information...

6.8CVSS6.5AI score0.00555EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/01/13 12:0 a.m.3 views

The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) server, related to certificate validation errors, allows attackers to carry out “man-in-the-middle” attacks and expose the protected information.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server is related to authentication errors. Exploiting this vulnerability allows a malicious actor to carry out “man-in-the-middle” attacks and expose the protected information...

8.2CVSS7.2AI score0.00213EPSS
Exploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/12/28 12:0 a.m.6 views

The vulnerability of Huawei’s mobile phone software, related to authentication errors, allows attackers to bypass the digital balance limit.

The vulnerability of Huawei’s mobile phone software relates to authentication errors. Exploiting this vulnerability could allow a hacker to bypass the digital balance limit...

7.1CVSS5.5AI score0.00159EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.7 views

The vulnerability of the Azure Network Watcher Agent’s performance monitoring service, related to authentication errors, allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Azure Network Watcher Agent’s performance monitoring service is related to authentication errors. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...

5.5CVSS6.8AI score0.00449EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.8 views

The vulnerability of the Linux operating system’s Bluetooth Low Energy driver allows attackers to gain increased privileges.

The vulnerability of the Linux operating system’s Bluetooth Low Energy driver is related to errors during authentication processes. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

7.5CVSS7.2AI score0.00353EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/14 12:0 a.m.4 views

The vulnerability of the Controller File System Handler component in the Jenkins OpenShift Deployer Plugin allows a hacker to bypass established security restrictions and escalate their privileges.

The vulnerability of the Controller File System Handler component in the Jenkins OpenShift Deployer Plugin is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions and escalate their privileges...

4.3CVSS5.6AI score0.0055EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:0 a.m.5 views

The vulnerability in the web interface for managing the Cisco AsyncOS operating system of the Cisco Email Security Appliance (ESA) security email system, the Cisco Secure Email and Web Manager content protection device, and the Cisco Secure Web Appliance (formerly Cisco Web Security Appliance (WSA)) web gateway allows a perpetrator to expose protected information.

The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of the Cisco Email Security Appliance ESA, the Cisco Secure Email and Web Manager, and the Cisco Secure Web Appliance formerly Cisco Web Security Appliance WSA relates to authentication errors. Exploiting th...

6.8CVSS6.5AI score0.00891EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.6 views

The vulnerability of the Jenkins OpenShift Deployer Plugin, related to authentication errors, allows attackers to circumvent existing security restrictions and increase their privileges.

The vulnerability of the Jenkins OpenShift Deployer Plugin is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions and gain increased privileges...

5.5CVSS6.5AI score0.00675EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:0 a.m.6 views

The vulnerability of the Node.js software platform, related to errors in the implementation of authentication procedures, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Node.js software platform is related to errors in the implementation of authentication procedures. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that is protected by the system...

6.8CVSS7.4AI score0.00583EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/04 12:0 a.m.4 views

The vulnerability of the MIFF component of the cross-platform library for working with GraphicsMagick allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the MIFF component in the cross-platform library for working with GraphicsMagick is related to authentication errors. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

7.3CVSS6.4AI score0.01856EPSS
Exploits1References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:0 a.m.5 views

The vulnerability of the Microsoft Endpoint Configuration Manager software for managing network devices allows a hacker to execute a spear-phishing attack and gain access to sensitive information, due to errors during the authentication process using Kerberos with NTLM.

The vulnerability of the Microsoft Endpoint Configuration Manager software for managing network devices is related to errors that occur during the authentication process using Kerberos and NTLM. Exploiting this vulnerability allows an attacker to execute a spear-phishing attack and gain access to...

7.8CVSS7.2AI score0.01412EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:0 a.m.4 views

The vulnerability of the busybox wget component in the UNIX command-line utilities of BusyBox allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the busybox wget component in the UNIX command-line utilities package is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS6.6AI score0.02462EPSS
Exploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/12 12:0 a.m.4 views

The vulnerability of the Application Business Partner Extension component of the SAP S/4HANA software platform allows attackers to enhance their privileges.

The vulnerability of the Application Business Partner Extension component of the SAP S/4HANA software platform is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

5.5CVSS5.9AI score0.00373EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/09/09 12:0 a.m.4 views

The vulnerability of the Build Handler component of the Jenkins Git plugin, related to authentication errors, allows a hacker to circumvent established security restrictions and gain increased privileges.

The vulnerability of the Build Handler component in the Jenkins Git plugin is related to authentication errors. Exploiting this vulnerability allows a malicious actor to bypass established security restrictions and gain increased privileges...

5.5CVSS7.2AI score0.05454EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.5 views

The vulnerability of SAP Enterprise Extension Defense Forces & Public Security software, related to authentication errors, allows a perpetrator to increase their privileges.

The vulnerability of SAP Enterprise Extension Defense Forces & Public Security software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

6.5CVSS5.5AI score0.00444EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:0 a.m.3 views

The vulnerability of the Rsync file transfer and synchronization utility, related to authentication errors, allows a perpetrator to write arbitrary files.

The vulnerability of the Rsync file transfer and synchronization utility is related to authentication errors. Exploiting this vulnerability allows a remote attacker to write arbitrary files...

7.6CVSS7.4AI score0.0165EPSS
Exploits1References16Affected Software10
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:0 a.m.5 views

The vulnerability of the monitoring tool for VMware vRealize Operations, related to authentication errors, allows a perpetrator to create a user with administrative privileges.

The vulnerability of the monitoring tool for VMware vRealize Operations is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to create a user with administrative privileges...

5.6CVSS7.5AI score0.00718EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:0 a.m.4 views

The vulnerability of the HPE OneView IT infrastructure management system, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the HPE OneView IT infrastructure management system is related to authentication errors. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00277EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/02 12:0 a.m.5 views

The vulnerability of the client’s HTTP library, OKHttp Square, related to authentication process errors allows attackers to circumvent existing security restrictions and execute “man-in-the-middle” attacks.

The vulnerability of the client’s HTTP library, OKHttp Square, is related to errors in the certificate authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute a type of “man-in-the-middle” attack...

7.1CVSS7AI score0.02249EPSS
Exploits0References8Affected Software2
Rows per page
Query Builder