Lucene search
+L

432 matches found

BDU FSTEC
BDU FSTEC
added 2025/08/08 12:00 a.m.11 views

The vulnerability of the SetDDNSSettings() function (/HNAP1/) of the DDNS Service component of the D-Link DIR-823G router’s software, which allows a hacker to circumvent security restrictions.

The vulnerability of the SetDDNSSettings function /HNAP1/ of the DDNS Service component of the D-Link DIR-823G router’s software stack is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a...

7.5CVSS7.2AI score0.15268EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:00 a.m.11 views

The vulnerability of the Single Sign-On component in macOS operating systems allows a perpetrator to gain unauthorized access to confidential data.

The vulnerability of the Single Sign-On component in macOS operating systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential data...

4CVSS5.5AI score0.00202EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/29 12:00 a.m.12 views

The vulnerability of the configuration of the Version Control System (VCS) of the Continuous Integration and Delivery Application Framework (CI/CD) tool JetBrains TeamCity allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the TeamCity VCS configuration in continuous integration and delivery systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information from a remote location...

4.3CVSS5.5AI score0.00216EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:00 a.m.14 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in the authentication process, which allows unauthorized users to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.6AI score0.00305EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/28 12:00 a.m.11 views

The vulnerability of the reboot() and restore() functions in the /cgi-bin/lighttpd.cgi microprogramming system of LB-LINK routers allows a attacker to execute arbitrary code.

The vulnerability of the reboot and restore functions in the /cgi-bin/lighttpd.cgi microprogramming system of LB-LINK routers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.00745EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:00 a.m.11 views

The vulnerability of the API interface of the boiler controller MyHeat GO allows a hacker to gain unauthorized access to the controller.

The vulnerability of the API interface of the MyHeat GO boiler controller is related to the use of default login credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the controller by using the standard login credentials...

7.5CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/21 12:00 a.m.10 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system’s optimizer is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

6.8CVSS7.1AI score0.00517EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/18 12:00 a.m.10 views

The vulnerability of the Web Container component of the Oracle WebLogic Server application allows a attacker to gain access to read, modify, or delete data.

The vulnerability of the Web Container server component of the Oracle WebLogic Server application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

6.4CVSS7.2AI score0.00238EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/17 12:00 a.m.17 views

The vulnerability of the Oracle Database component of the Oracle Database Server system allows a hacker to gain full control over the application.

The vulnerability of the Oracle Database component of the Oracle Database Server system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain full control over the application...

9CVSS7.5AI score0.00338EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:00 a.m.17 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of authentication mechanisms. This allows attackers to gain unauthorized access to protected information.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected informati...

4CVSS5.4AI score0.00301EPSS
SaveExploits0References2Affected Software3
CNNVD
CNNVD
added 2025/07/02 12:00 a.m.10 views

Nokia Single RAN 安全漏洞

Nokia Single RAN is a wireless network technology from Nokia, Finland. A security vulnerability exists in Nokia Single RAN 23R4-SR prior to version 3.0 MP, which stems from an insufficient authentication mechanism that could lead to elevated privileges...

7.1CVSS6.8AI score0.00179EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/07/02 12:00 a.m.13 views

The vulnerability of the Form_Login() function in the Totolink T6 router’s software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FormLogin function in the microprogramming software of the TOTOLink T6 system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

8.8CVSS7.6AI score0.00747EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/20 12:00 a.m.7 views

The vulnerability of the ServerConfig.PublicKeyCallback() function in the Go programming language library allows a hacker to bypass security restrictions.

The vulnerability of the ServerConfig.PublicKeyCallback function in the Go programming language library is related to deficiencies in the authentication process when handling keys. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions from a remote locati...

9.4CVSS6.7AI score0.03153EPSS
SaveExploits2References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/16 12:00 a.m.10 views

The vulnerability of the monitoring tool for Synthetics in the Kibana data visualization service allows a violator to increase their privileges.

The vulnerability of the monitoring tool for Synthetics in the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges by sending a specially crafted HTTP request...

8CVSS5.5AI score0.00382EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/16 12:00 a.m.11 views

The vulnerability of the graphics processor in microprogrammed software embedded in Qualcomm chips allows attackers to execute arbitrary commands.

The vulnerability of the graphics processor in embedded Qualcomm software systems is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

8.6CVSS8.4AI score0.00432EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/06/14 12:00 a.m.8 views

The vulnerability of the Enterprise Event Enablement component of the SAP S/4HANA software platform allows a malicious actor to elevate their privileges and execute arbitrary code.

The vulnerability of the Enterprise Event Enablement component of the SAP S/4HANA software platform is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

8.7CVSS5.8AI score0.00373EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/06/03 12:00 a.m.26 views

The vulnerability of the IBM Guardium Data Protection platform regarding data security protection, related to deficiencies in the authentication mechanism, allows attackers to disclose the protected information.

The vulnerability of the IBM Guardium Data Protection platform relates to deficiencies in its authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

4.3CVSS5.4AI score0.00272EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:00 a.m.16 views

The vulnerability of Microsoft Windows Defender for Identity allows a perpetrator to perform a substitution through the neighboring network.

The vulnerability of Microsoft Windows Defender operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to perform substitution attacks through the neighboring network...

6.5CVSS8.1AI score0.007EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:00 a.m.11 views

The vulnerability of the ColdFusion software platform, related to deficiencies in the authentication mechanism, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9.1CVSS5.5AI score0.15287EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:00 a.m.11 views

The vulnerability of MacOS operating systems, related to the lack of authentication, allows attackers to gain unauthorized access to protected information.

The vulnerability of MacOS operating systems is related to the lack of authentication. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

10CVSS5.4AI score0.00974EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder