Lucene search
+L

9554 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/06 12:00 a.m.13 views

The vulnerability of the decoder for the MPEG-4 multimedia platform GPAC’s decoding function allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CSGP decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.0143EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.14 views

The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server, Mod_auth_openidc, allows a perpetrator to compromise data integrity.

The vulnerability of the authentication and authorization module for the Apache 2.x HTTP server, Modauthopenidc, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

6.1CVSS6.6AI score0.01523EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.15 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper session management, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper session management. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

6.8CVSS6.1AI score0.00844EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.13 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to incorrect authentication, allows a perpetrator to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the possibility of adding metadata during the creation of a task by an unauthorized user. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

4.3CVSS5.6AI score0.00592EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.14 views

The vulnerability of the Mermaid software tool, a git-based programming platform for collaborative code development on GitLab, allows a perpetrator to compromise data integrity.

The vulnerability of Mermaid, a software platform based on Git for collaborative code development on GitLab, is related to insufficient filtering of Markdown. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

5.4CVSS6.3AI score0.63555EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.21 views

The vulnerability of the decoder in the SIX functional decoding system for MPEG-4 multimedia platform GPAC allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the SSIX decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.02019EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.22 views

The vulnerability of the software for implementing the hypertext environment MediaWiki allows a perpetrator to compromise the integrity of the data.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise the integrity of the data...

7.8CVSS6.6AI score0.01943EPSS
SaveExploits1References7Affected Software4
Tenable Nessus
Tenable Nessus
added 2022/04/05 12:00 a.m.26 views

SUSE SLES12 Security Update : python36 (SUSE-SU-2022:1094-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:1094-1 advisory. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue...

5.7CVSS7.1AI score0.01687EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.10 views

The vulnerability of the hevc_parse_vps_extension function in the MP4Box component of the GPAC multimedia platform allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the hevcparsevpsextension function in the MP4Box component of the GPAC multimedia platform is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failure...

10CVSS7.4AI score0.01274EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of markdown filtering. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.4CVSS5.9AI score0.00555EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.8 views

The vulnerability of the net/http/httputil component in the Golang programming language allows a attacker to compromise data integrity.

The vulnerability of the net/http/httputil component in the Golang programming language is related to authentication errors. Exploiting this vulnerability allows an attacker to compromise data integrity...

5.3CVSS6.5AI score0.02279EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.14 views

The vulnerability of the DataTables table processing plugin, related to the lack of protection for website structure, allows attackers to compromise data integrity.

The vulnerability of the DataTables table processing plugin is related to incorrect handling of arrays in the input data. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

6.1CVSS5.9AI score0.01975EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.11 views

The vulnerability of the LoadObj function of the .obj Tinyobjloader loader allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the LoadObj function of the .obj Tinyobjloader loader is related to unvalidated array indexing. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through the use of a malicious file...

9.3CVSS7.8AI score0.0188EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.10 views

Vulnerability of the Server component: The Replication module of the MySQL database management system, which allows attackers to compromise data integrity and cause service interruptions.

The vulnerability of the Server: Replication component of the MySQL database management system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity and cause service failures...

7CVSS6.6AI score0.0187EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.14 views

The vulnerability of the Clipboard editing plugin for the CKEditor WYSIWYG editor allows a hacker to compromise data integrity.

The vulnerability of the Clipboard editing plugin of the CKEditor editor is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

5.4CVSS6.5AI score0.01188EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.12 views

The vulnerability of the isolated programming environment for the Racket language, related to errors in processing hypertext links, allows attackers to compromise the integrity of data.

The vulnerability of the isolated programming environment Racket is related to errors in processing hypertext links. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

7.8CVSS7.2AI score0.00869EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:00 a.m.12 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC function decoder allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CO64 decoder for the MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.01695EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:00 a.m.13 views

The vulnerability of the HTTPS protocol implementation in NETGEAR’s embedded software for routers such as NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR RS400, and NETGEAR CBR40 allows attackers to compromise data integrity.

The vulnerability of the HTTPS protocol implementation in NETGEAR’s embedded software for routers such as NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR RS400, and NETGEAR CBR40 stems from errors in the certificate validation process. Exploiting this...

5CVSS6.1AI score0.00339EPSS
SaveExploits1References4Affected Software7
Tenable Nessus
Tenable Nessus
added 2022/04/04 12:00 a.m.56 views

openSUSE 15 Security Update : python (openSUSE-SU-2022:1091-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:1091-1 advisory. - A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issu...

7.5CVSS7.3AI score0.08325EPSS
SaveExploits3References11
BDU FSTEC
BDU FSTEC
added 2022/04/01 12:00 a.m.12 views

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the kube-apiserver component, which is part of the Kubernetes cluster management software, is related to improper authentication. Exploiting this vulnerability allows a remote attacker to compromise data integrity and cause service failures...

8.5CVSS6.5AI score0.05524EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder