Lucene search
+L

9318 matches found

BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.9 views

The vulnerability of Cisco Email Security Appliance’s security systems allows attackers to bypass the installed filters on the device and compromise the integrity of the protected information.

The vulnerability of Cisco Email Security Appliance exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass the installed filters on the device and compromise the integrity of the protected information through a specially crafted email...

5.8CVSS6.5AI score0.01378EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.7 views

The vulnerability of the lib/functions.php component in the Cacti network monitoring software allows a attacker to compromise data integrity or cause service failures.

The vulnerability of the lib/functions.php component of the Cacti network monitoring software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to compromise data integrity or cause service failures...

8.5CVSS6.3AI score0.03005EPSS
SaveExploits1References6Affected Software3
RedHat Linux
RedHat Linux
added 2020/03/03 4:13 p.m.10 views

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

9.1CVSS7.1AI score0.08914EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.12 views

The vulnerability of the Gem owner command in the RubyGems package management system, related to the output of API responses into the standard output stream, allows a hacker to compromise data integrity.

The vulnerability of the Gem owner command in the RubyGems package management system is related to the way API responses are printed to the standard output stream. Exploiting this vulnerability allows a remote attacker to compromise data integrity by using a specially crafted escape sequence...

7.8CVSS6.7AI score0.03372EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.8 views

The vulnerability of the Gem::GemcutterUtilities module in the RubyGems package management system, which relates to the issue of printing API responses into the standard output stream, allows a attacker to compromise data integrity.

The vulnerability of the Gem::GemcutterUtilities module in the RubyGems package management system relates to the way that API responses are printed into the standard output stream. Exploiting this vulnerability could allow a malicious actor to compromise data integrity by using a specially crafte...

7.8CVSS6.6AI score0.03372EPSS
SaveExploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.6 views

The vulnerability of the uriComposeQuery function in the Uriparser parser, related to writing beyond the buffer memory limit, allows an attacker to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the uriComposeQuery function in the UriParser parser is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and...

9.8CVSS7.7AI score0.02367EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.9 views

The vulnerability of the AdminURLFieldWidget function in the Django web development framework relates to the lack of protective measures for website structure, allowing attackers to compromise data integrity.

The vulnerability of the AdminURLFieldWidget function in the Django web development framework is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

4.7CVSS6.3AI score0.02382EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.10 views

The vulnerability of Samba software, related to access control errors, allows a perpetrator to compromise data integrity and cause service failures.

The vulnerability of Samba software is related to errors in access control. Exploiting this vulnerability can allow a perpetrator to compromise data integrity and cause service failures...

6.1CVSS6.6AI score0.00552EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.8 views

The vulnerability of the Gem::UserInteraction module in the RubyGems package management system allows a hacker to compromise data integrity.

The vulnerability of the Gem::UserInteraction module in the RubyGems package management system is related to insufficient protection. Exploiting this vulnerability could allow a malicious actor to compromise data integrity by using a specially crafted escape sequence...

5.9CVSS6.6AI score0.03372EPSS
SaveExploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.7 views

The vulnerability of the Gem::CommandManage module in the RubyGems package management system, due to insufficient protection, allows an attacker to compromise data integrity.

The vulnerability of the Gem::CommandManage module in the RubyGems package management system is related to insufficient protection. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise data integrity by using a specially crafted escape sequence...

7.5CVSS6.6AI score0.03372EPSS
SaveExploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.11 views

The vulnerability of the xenvif_set_hash_mapping function in Xen hypervisors allows a malicious actor to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the xenvifsethashmapping function in Xen hypervisors is related to integer overflow when processing requests to the netback driver. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and availability...

7.8CVSS6.9AI score0.00352EPSS
SaveExploits0References27Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.9 views

The vulnerability of Google Chrome’s browser, related to integer overflow, allows attackers to compromise data integrity.

The vulnerability of Google Chrome relates to a numerical overflow issue. Exploiting this vulnerability allows an attacker to compromise data integrity by using a specially crafted HTML page...

6.5CVSS7AI score0.0085EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.8 views

The vulnerability of Google Chrome browser, related to the insufficient implementation of content security policies, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to the insufficient implementation of content security policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

6.5CVSS6.6AI score0.01046EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.8 views

The vulnerability in the Google Chrome web browser relates to the excessive permissions granted during the installation of the extension, allowing a malicious actor to compromise data integrity.

The vulnerability in the Google Chrome web browser relates to the excessive permissions granted during the installation of the extension. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially created HTML page...

7.1CVSS7AI score0.01003EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.9 views

The vulnerability of the Samba package lies in the incorrect path limitation for the restricted access directory, allowing attackers to compromise the integrity and confidentiality of data.

The vulnerability of the Samba package is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and confidentiality of data...

5.5CVSS5.8AI score0.0333EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.6 views

The vulnerability of the SMIL animation controller in Thunderbird email clients and Firefox/Firefox ESR browsers allows a perpetrator to gain unauthorized access to information and compromise its integrity.

The vulnerability of the SMIL animation controller in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity...

9.8CVSS7.4AI score0.02043EPSS
SaveExploits0References9Affected Software5
The Hacker News
The Hacker News
added 2020/02/26 2:48 p.m.8 views

New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users

A group of academics from Ruhr University Bochum and New York University Abu Dhabi have uncovered security flaws in 4G LTE and 5G networks that could potentially allow hackers to impersonate users on the network and even sign up for paid subscriptions on their behalf. The impersonation attack —...

5.9AI score
SaveExploits0
CNVD
CNVD
added 2020/02/26 12:0 a.m.2 views

Web exhibition PHP foreign trade enterprise website exists arbitrary file deletion vulnerability

NetShow PHP Foreign Trade Enterprise Website is a premium enterprise website template for small and medium-sized enterprises. Nethub PHP foreign trade enterprise website exists arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files, the integrit...

7AI score
SaveExploits0
CNVD
CNVD
added 2020/02/26 12:0 a.m.4 views

Arbitrary File Deletion Vulnerability in eyoucms

Eyoucms is based on TP5.0 framework for the core development of free + open source enterprise content management system . Children's foreign trade responsive English website template comes with eyoucms core. eyoucms there is an arbitrary file deletion vulnerability , an attacker can exploit the...

7AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2020/02/25 5:35 p.m.7 views

netty: HTTP request smuggling

A HTTP smuggling flaw was found in HttpObjectDecoder.java in Netty in versions prior to version 4.1.44. HTTP headers with an invalid fold, in this case CRLF carriage return, line feed without being followed by SP space or HTAB horizontal tab, result in situations where headers can be misread. Dat...

9.1CVSS7.1AI score0.08914EPSS
SaveExploits1References5
Rows per page
Query Builder