Lucene search
+L

9555 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.13 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

6.1CVSS6.4AI score0.00949EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.11 views

Vulnerability of the API component: A software platform in Node.js that allows attackers to compromise data integrity

The vulnerability of the API component in the Node.js software platform is related to insufficient checking of the rejectUnauthorized value. Exploiting this vulnerability allows an attacker to compromise data integrity...

5.3CVSS6.5AI score0.1473EPSS
SaveExploits1References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.9 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

5.4CVSS6.4AI score0.71787EPSS
SaveExploits0References6Affected Software1
OpenVAS
OpenVAS
added 2022/04/13 12:00 a.m.25 views

Huawei EulerOS: Security Advisory for rpm (EulerOS-SA-2022-1386)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.7CVSS5.9AI score0.00321EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:00 a.m.14 views

The vulnerability of Google Chrome, related to improperly implemented security checks for standard elements, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data, compromise its integrity, and even cause service interruptions through a specially...

7.6CVSS6.3AI score0.00741EPSS
SaveExploits1References9Affected Software5
ATTACKERKB
ATTACKERKB
added 2022/04/11 8:15 p.m.12 views

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS7.1AI score0.00562EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2022/04/11 8:15 p.m.9 views

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS7.1AI score0.00562EPSS
SaveExploits0References2
NVD
NVD
added 2022/04/11 8:15 p.m.26 views

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

7.5CVSS0.00562EPSS
SaveExploits0References2
Prion
Prion
added 2022/04/11 8:15 p.m.22 views

Design/Logic Flaw

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

5CVSS7.5AI score0.00562EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2022/04/11 7:38 p.m.31 views

CVE-2022-22257

The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity...

7.7AI score0.00562EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/11 7:38 p.m.102 views

CVE-2022-22257

CVE-2022-22257 affects Huawei HarmonyOS through the customization framework, with root cause described as improper permission control/improper privilege restrictions. Multiple connected sources (NVD, Red Hat, CNVD and others) describe potential impact to data/system integrity but do not provide p...

7.5CVSS7.5AI score0.00562EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the mbedtls_ssl_read function in TLS and SSL implementations allows a attacker to compromise data integrity.

The vulnerability of the mbedtlssslread function in TLS and SSL protocols is related to the absence of buffer zeroing. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.8CVSS7.4AI score0.0155EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to incorrect authentication. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

4.3CVSS5.6AI score0.00662EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from insufficient neutralization of certain elements in the query, allowing an attacker to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the insufficient neutralization of certain elements in the request. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.4CVSS5.9AI score0.00747EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of protective measures for the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

6.1CVSS6.7AI score0.01144EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerabilities in the components reports_admin.php, data_queries.php, data_input.php, graph_templates.php, graphs.php, reports_admin.php, and data_input.php of the Cacti network monitoring software allow a attacker to compromise the integrity of the data.

The vulnerability of the components reportsadmin.php, dataqueries.php, datainput.php, graphtemplates.php, graphs.php, reportsadmin.php, and datainput.php of the Cacti network monitoring software is related to the lack of security measures for the website structure. Exploiting this vulnerability...

6.1CVSS6.8AI score0.02259EPSS
SaveExploits1References13Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.11 views

The vulnerability of TLS and SSL Mbed TLS implementations lies in errors in the certificate validation process, which allows attackers to compromise the integrity of data.

The vulnerability of TLS and SSL Mbed TLS implementations is related to the incorrect comparison of NULL with an empty array. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.8CVSS7.2AI score0.0118EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.15 views

The vulnerability of the HTTP library for Rust Hyper, related to integer overflow, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the HTTP library for Rust Hyper is related to integer overflow. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

9.4CVSS7.8AI score0.01133EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.10 views

The vulnerability of the avifDecoderDataFillImageGrid function in the Libavif encoding and decoding library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the avifDecoderDataFillImageGrid function in the Libavif library relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.8AI score0.01402EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:00 a.m.13 views

The vulnerability of TLS and SSL Mbed TLS implementations lies in errors in the certificate validation process, which allows attackers to compromise the integrity of data.

The vulnerability of TLS and SSL Mbed TLS implementations is related to the incorrect use of the revocationDate check. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...

5.3CVSS5.9AI score0.00907EPSS
SaveExploits1References6Affected Software2
Rows per page
Query Builder