Lucene search
+L

9413 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.9 views

The vulnerability of the pamk5_prompter_krb5 function in the prompt.c library of the libpam-krb5 library, related to a lack of mechanism for checking the size of copied data, allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the pamk5prompterkrb5 function in the prompt.c library of the libpam-krb5 library is related to a lack of mechanism for checking the size of copied data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to confidential data, cause service...

9.8CVSS7.7AI score0.04784EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.11 views

The vulnerability of the Media Foundation component in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

9.3CVSS7.3AI score0.05037EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.15 views

The vulnerability of the wp_kses_bad_protocol_once function in the WordPress content management system allows a hacker to compromise data integrity.

The vulnerability of the wpksesbadprotocolonce function in the WordPress content management system is related to improper cleaning of URL addresses, which could lead to the reproduction of XSS attacks. Exploiting this vulnerability could allow an attacker to compromise data integrity...

6.1CVSS6.9AI score0.02198EPSS
SaveExploits2References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.13 views

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress content management system is related to an error in the reproduction of XSS attacks when previewing draft posts for authorized users. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

5.4CVSS6.7AI score0.05181EPSS
SaveExploits3References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.9 views

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress website content management system is related to a configuration error. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

5.4CVSS6.7AI score0.01611EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.12 views

The vulnerability of many elements of the DAViCal calendar exchange server, related to deficiencies in mechanisms for combating cross-site fraud, allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of many components of the DAViCal calendar exchange server is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to confidential data, cause service failures, and compromise...

9.3CVSS7.5AI score0.00983EPSS
SaveExploits4References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.8 views

The vulnerability of the Apache SpamAssassin spam filtering software lies in the lack of measures to neutralize special elements. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Apache SpamAssassin spam filtering software lies in the lack of measures to neutralize special elements used in the operating system command line. Exploiting this vulnerability can allow a hacker to gain unauthorized access to confidential data, cause service failures, an...

7.2CVSS6.9AI score0.00871EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.15 views

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress content management system is related to an XSS attack during block editing, when certain useful loads are used, which are accessible to authorized users. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

5.4CVSS6.6AI score0.01718EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.20 views

The vulnerability of the library for cleaning HTML-based text using python-bleach allows a attacker to compromise data integrity.

The vulnerability of the Python-bleach library for cleaning HTML blacklists is related to an error in adding the same word to a blacklist. Exploiting this vulnerability could allow an attacker to compromise data integrity...

4.7CVSS7.1AI score0.01329EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.9 views

The vulnerability of the WebAudio component in the Google Chrome browser allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the WebAudio component in the Google Chrome browser involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or impact data integrity through a specially created...

9.3CVSS6.8AI score0.01677EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.13 views

The vulnerability of program elements for implementing the MediaWiki hypertext environment involves redirecting URLs to an unreliable website. This allows a malicious user to gain unauthorized access to confidential data and compromise the integrity of those data.

The vulnerability of the software components used to implement the MediaWiki hypertext environment is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to confidential data and...

6.1CVSS6.3AI score0.01564EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.11 views

The vulnerability of many elements of the Debian-eu distribution lies in the lack of security measures for privilege management. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of many components of the Debian-eu distribution is related to a lack of security measures in privilege management. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

7.8CVSS7.2AI score0.00503EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.11 views

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress content management system is related to an error in the XSS attack reproduction process when editing blocks in the dashboard, which is only accessible to authorized users. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

5.4CVSS6.7AI score0.01396EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.9 views

The vulnerability of the WordPress website content management system, related to insufficient validation of input data, allows attackers to compromise the integrity of the data.

The vulnerability of the WordPress website content management system is related to a JSON GET cache infection error. Exploiting this vulnerability allows an attacker to compromise data integrity...

7.8CVSS7.3AI score0.03154EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.10 views

The vulnerability of Google Chrome, related to the use of memory areas after they are freed, allows a malicious actor to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

Vulnerability of Google Chrome browser when using memory regions after their release. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or impact data integrity through a specially created HTML page...

9.3CVSS6.9AI score0.01697EPSS
SaveExploits1References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.6 views

The vulnerability of the Apache Tomcat application server’s authentication mechanism lies in the lack of session fixation mechanisms. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Apache Tomcat application server’s authentication mechanism is related to the lack of session fixation mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

10CVSS7.1AI score0.10687EPSS
SaveExploits0References14Affected Software14
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.8 views

The vulnerability of the Google Chrome audio browser component, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Google Chrome audio browser component is related to a memory management issue after deallocation. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.3AI score0.02314EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.8 views

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to gain access to confidential information and compromise its integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

5.8CVSS6.7AI score0.0118EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.7 views

The vulnerability of the NIO-infrastructure client/server architecture for Java Netty, related to the inconsistent interpretation of http requests, allows attackers to compromise data integrity.

The vulnerability of the NIO-server/client infrastructure for Java Netty is related to improper handling of double colon gaps in HTTP headers. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.8CVSS6.9AI score0.08415EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.16 views

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress content management system’s functions is related to an error in the XSS attack reproduction process in the tool panel. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

6.1CVSS6.9AI score0.01767EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder