Lucene search
+L

210 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/10 12:00 a.m.9 views

The vulnerability in the Cisco IOS XE operating system’s web interface, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, or accessibility of protected information.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, or accessibility of protected information...

9CVSS7.7AI score0.01812EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:00 a.m.20 views

The vulnerability of the systemd_run function on the vdsm control server of the virtual infrastructure management tool Ovirt allows a attacker to execute arbitrary code.

The vulnerability of the systemdrun function in the VDS management tool of the Ovirt virtual infrastructure involves a lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

9CVSS7.1AI score0.01029EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:00 a.m.10 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 are related to the lack of measures for cleaning incoming data. This vulnerability allows attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the lack of measures for cleaning incoming data. Exploiting these vulnerabilities...

6.4CVSS6.8AI score0.01216EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/04/20 12:00 a.m.72 views

WordPress Gtranslate Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress Gtranslate versions prior to 2.8.52, which stems from...

6.1CVSS6.5AI score0.04457EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:00 a.m.11 views

The vulnerability of the Nokogiri software library, related to the lack of data cleaning at the control level, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Nokogiri software library is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.4AI score0.05899EPSS
SaveExploits0References6Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:00 a.m.8 views

The vulnerability of the SAP Financial Consolidation web application, related to the lack of measures for cleaning incoming data, allows attackers to execute cross-site scripting attacks.

The vulnerability of the SAP Financial Consolidation web application is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00526EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/01/08 12:00 a.m.10 views

The vulnerability of the SAP Customer Relationship Management software lies in the lack of measures for cleaning incoming data, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the SAP Customer Relationship Management software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00526EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/01/08 12:00 a.m.12 views

The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform, related to the lack of measures for cleaning incoming data, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Web Intelligence HTML interface of the SAP BusinessObjects Business Intelligence platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00733EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.10 views

The vulnerability of TP-Link M7350 router’s microprogramming software, related to the lack of data cleaning measures at the control level, allows attackers to execute arbitrary commands.

The vulnerability of TP-Link M7350 router’s microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands until authentication is completed...

10CVSS8.2AI score0.03028EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:00 a.m.6 views

The vulnerability of Mutt and NeoMutt email clients, related to the lack of data cleaning at the management level, allows attackers to execute arbitrary commands.

The vulnerability of Mutt and NeoMutt email clients is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS8.1AI score0.06229EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:00 a.m.7 views

The vulnerability of Mutt and NeoMutt email clients, related to the lack of data cleaning at the management level, allows attackers to execute arbitrary commands.

The vulnerability of Mutt and NeoMutt email clients is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS7.8AI score0.04954EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:00 a.m.11 views

The vulnerability of the Cisco IOS XE operating system, related to the lack of measures for cleaning input data, allows attackers to perform domain-based scenario attacks.

The vulnerability of the Cisco IOS XE operating system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to perform domain-joining attacks...

5.5CVSS5.5AI score0.00804EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/08/02 12:00 a.m.9 views

The vulnerability of the McAfee Enterprise Security Manager system, related to the lack of measures for cleaning input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the McAfee Enterprise Security Manager system relates to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

9CVSS5.8AI score0.02009EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:00 a.m.12 views

The vulnerability of the microprogramming software of Cisco Small Business SPA500 Series IP phones, related to insufficient cleaning of input data, allows a hacker to execute arbitrary code with administrator privileges.

The vulnerability of the microprogramming software of Cisco Small Business SPA500 Series phones is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code with administrator privileges...

6.8CVSS6AI score0.00472EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:00 a.m.11 views

The vulnerability of Microsoft Exchange Server servers arises from insufficient cleaning of data provided by users. This allows attackers to execute cross-site scripting attacks and execute arbitrary code in the context of the current user.

The vulnerability of Microsoft Exchange Server lies in insufficient cleaning of data provided by users. Exploiting this vulnerability allows a malicious actor to remotely execute cross-site scripting attacks and execute arbitrary code in the context of the current user, by sending a specially...

4CVSS5.7AI score0.01581EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:00 a.m.13 views

The vulnerability of D-Link DIR-818LW router’s microprogramming software lies in the lack of measures to clean incoming data, allowing attackers to execute arbitrary commands.

The vulnerability of D-Link DIR-818LW router microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.02913EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server packages, related to the lack of measures for cleaning input data, allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server packages is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.7CVSS6AI score0.02511EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:00 a.m.12 views

The vulnerability of the software development tool Team Foundation Server lies in the lack of measures for cleaning input data, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the software development tool Team Foundation Server is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

5.4CVSS5.7AI score0.02171EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/03/29 12:00 a.m.11 views

The vulnerability of the Dasan GPON router’s microprogramming software, related to the lack of measures taken to clean data at the management level, allows attackers to perform arbitrary actions with administrator privileges.

The vulnerability of the microprogramming software of the Dasan GPON router is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform arbitrary actions with administrator privileges...

10CVSS8.2AI score0.99952EPSS
SaveExploits9References4
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:00 a.m.8 views

The vulnerability of the SetStaticRouteIPv6Settings() function in D-Link’s router software allows a hacker to execute arbitrary code.

The vulnerability of the SetStaticRouteIPv6Settings function in D-Link’s microprogrammed router software is related to insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8AI score0.06354EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder