Lucene search
+L

9411 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.18 views

The vulnerability of the nested workers mechanism in browsers Firefox, Firefox ESR, and the email client Thunderbird lies in the use of memory areas after they are freed. This allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the nested worker mechanism in browsers Firefox, Firefox ESR, and the email client Thunderbird relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures...

9.3CVSS7.7AI score0.01877EPSS
SaveExploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.17 views

The vulnerability of the user interface in Google Chrome’s Omnibox allows a perpetrator to compromise data integrity.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

4.3CVSS6.6AI score0.01107EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.9 views

The vulnerability of Google Chrome’s payment security policy, related to the lack of a mechanism for verifying input data, allows attackers to compromise the integrity of data.

The vulnerability of Google Chrome’s payment security policy is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

7.1CVSS6.6AI score0.01219EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.10 views

The vulnerability of the physmap hardware virtualization concept in Xen hypervisors allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the physmap hardware virtualization concept in Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

7CVSS6.8AI score0.00279EPSS
SaveExploits0References8Affected Software11
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.11 views

The vulnerability of Firefox browser, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of data...

4.7CVSS6.8AI score0.00587EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.12 views

The vulnerability of Firefox browser, related to improper data initialization, allows attackers to compromise data integrity.

The vulnerability of the Firefox browser is related to improper data initialization. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.2AI score0.01195EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.14 views

The vulnerability of Google Chrome’s browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

4.3CVSS6.6AI score0.0092EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.13 views

The vulnerability of the utility for applying changes between different versions of the GNU patch text files (inp.c and util.c) arises from an incorrect definition of the reference before accessing the file. This allows a malicious actor to compromise the integrity of the data.

The vulnerability of the utility for applying changes between different versions of the GNU patch text files inp.c and util.c is related to an incorrect definition of the reference pointer before accessing the file. Exploiting this vulnerability could allow a remote attacker to compromise the...

7.1CVSS6.6AI score0.03895EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.10 views

The vulnerability of the typeization function in Google Chrome’s JavaScript browser allows a perpetrator to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the typecasting function in Google Chrome’s JavaScript browser is related to access to resources through incompatible data types. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data...

9.3CVSS7.3AI score0.06432EPSS
SaveExploits2References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.19 views

The vulnerability of Google Chrome browsers, related to memory usage after deallocation, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

9.3CVSS7.4AI score0.0108EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.14 views

The vulnerability of Google Chrome browsers, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome’s browser involves reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

9.3CVSS7.5AI score0.01171EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.17 views

The vulnerability of the Firefox Web browser’s session object recompilation component, related to the access to freed memory segments, allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Firefox Web browser’s session object recompilation component relates to the access to freed memory resources. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

9.3CVSS7.2AI score0.01501EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.13 views

The vulnerability of the XENMEM_exchange component in Xen hypervisors allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the XENMEMexchange component in Xen hypervisors is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and...

7CVSS6.9AI score0.00258EPSS
SaveExploits0References8Affected Software11
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.12 views

The vulnerability of Firefox browser, related to insufficient verification of data authenticity, allows attackers to compromise data integrity.

The vulnerability of the Firefox browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

5.3CVSS6.9AI score0.00546EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.22 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...

4.3CVSS6.5AI score0.00962EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.8 views

The vulnerability of Xen hypervisors relates to the lack of a mechanism for verifying input data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of Xen hypervisors is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity...

8.8CVSS6.8AI score0.00353EPSS
SaveExploits0References7Affected Software10
BDU FSTEC
BDU FSTEC
added 2020/04/27 12:0 a.m.15 views

The vulnerability of Google Chrome’s browser, related to bypassing authentication through spoofing, allows attackers to compromise data integrity.

The vulnerability of Google Chrome relates to bypassing authentication through spamming. Exploiting this vulnerability allows a malicious actor, operating remotely, to compromise data integrity by using a specially created HTML page...

4.3CVSS6.5AI score0.0092EPSS
SaveExploits0References8Affected Software4
ATTACKERKB
ATTACKERKB
added 2020/04/24 2:15 p.m.3 views

CVE-2020-5870

In BIG-IQ 5.2.0-7.0.0, high availability HA synchronization mechanisms do not use any form of authentication for connecting to the peer...

8.1CVSS7.8AI score0.00523EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2020/04/24 9:33 a.m.32 views

CVE-2019-12522

A flaw was found in squid. When Squid is run as root, it spawns its child processes as a lesser user, by default the user nobody. This is done via the leavesuid call. leavesuid leaves the Saved UID as 0. This makes it trivial for an attacker who has compromised the child process to escalate their...

4.4CVSS2.8AI score0.00344EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.18 views

The vulnerability of Google Chrome’s browser, related to insufficient data validation, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient data validation during downloads. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

4.3CVSS6.8AI score0.00621EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder