Lucene search
K

4667 matches found

BDU FSTEC
BDU FSTEC
added 2024/04/03 12:0 a.m.2 views

The vulnerability of Intel microprogramming software relates to the breach of data protection mechanisms, allowing attackers to enhance their privileges.

The vulnerability of Intel microprogramming software is related to the breach of data protection mechanisms. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.1CVSS6.3AI score0.00247EPSS
Exploits0References9Affected Software5
CNVD
CNVD
added 2024/04/01 12:0 a.m.23 views

Dell PowerProtect Data Manager XML External Entity Injection Vulnerability

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. Dell PowerProtect Data Manager suffers from an XML external entity injection vulnerability that can be exploited by...

6.5CVSS6AI score0.00565EPSS
Exploits0References1
Redos
Redos
added 2024/03/29 12:0 a.m.39 views

ROS-20240329-14

Vulnerability of PostgreSQL database management system is related to the possibility of sending signals to superuser processes using the pgsignalbackend role. to superuser processes using the pgsignalbackend role. Exploitation of the vulnerability could allow a remote attacker to cause a denial o...

8.8CVSS9.2AI score0.04322EPSS
Exploits0
Redos
Redos
added 2024/03/29 12:0 a.m.36 views

ROS-20240329-13

Vulnerability of PostgreSQL database management system is related to the possibility of sending signals to superuser processes using the pgsignalbackend role. to superuser processes using the pgsignalbackend role. Exploitation of the vulnerability could allow a remote attacker to cause a denial o...

8.8CVSS9.1AI score0.04322EPSS
Exploits0
Redos
Redos
added 2024/03/29 12:0 a.m.36 views

ROS-20240329-11

Vulnerability of PostgreSQL database management system is related to the possibility of sending signals to superuser processes using the pgsignalbackend role. to superuser processes using the pgsignalbackend role. Exploitation of the vulnerability could allow a remote attacker to cause a denial o...

8.8CVSS9.5AI score0.04322EPSS
Exploits0
OSV
OSV
added 2024/03/28 4:15 p.m.1 views

CVE-2023-40390

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sonoma 14.2. An app may be able to access user-sensitive data...

5.5CVSS5.8AI score
Exploits0References2
Cvelist
Cvelist
added 2024/03/28 3:39 p.m.19 views

CVE-2023-40390

A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sonoma 14.2. An app may be able to access user-sensitive data...

6AI score0.00198EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:0 a.m.2 views

The vulnerability of the Microsoft .NET Framework software platform, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft .NET Framework software platform is related to insufficient protection of service data when processing ObjRef objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.6AI score0.98832EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2024/03/26 12:0 a.m.1 views

The vulnerability of the Apache Solr search server, related to the lack of protection for operational data, allows attackers to disclose protected information.

The vulnerability of the Apache Solr search server is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by using a fake server address in “zkHost”...

7.8CVSS7.1AI score0.01564EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/25 12:0 a.m.5 views

PT-2024-5774 · Trueconf · Trueconf Server

Name of the Vulnerable Software and Affected Versions: TrueConf Server affected versions not specified Description: The issue is related to insufficient protection of service data in TrueConf Server, which can be exploited by a remote attacker to gather user system information through API methods...

5CVSS7AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/25 12:0 a.m.2 views

The vulnerability of the software for HCL Sametime Chat and Meetings lies in the lack of protection for operational data, which allows attackers to disclose protected information.

The vulnerability of the HCL Sametime Chat and Meetings software lies in the lack of protection for mission-critical data. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by security measures...

4CVSS5.4AI score0.00443EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.2 views

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.01068EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.1 views

The vulnerability of the microprogramming software for UniLogic Studio programmable logic controllers of the UniStream series lies in the insufficient protection of operational data. This allows attackers to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the microprogramming software for UniLogic Studio series UniStream is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and enhance their...

10CVSS5.5AI score0.00711EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.2 views

The vulnerability of the doLogin() function in the EdgeLoginServiceImpl class of the wizardLogin component of the data protection software for ArcServe UDP allows a perpetrator to bypass the authentication process.

The vulnerability of the doLogin function in the EdgeLoginServiceImpl class of the wizardLogin component of the data protection software for ArcServe UDP is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to bypass the authentication...

10CVSS7.9AI score0.04342EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.3 views

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.00928EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.2 views

The vulnerabilities of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices involve a data protection mechanism that can be exploited, allowing an attacker to cause the device to fail.

The vulnerability of Intel PROSet/Wireless WiFi and Intel Killer Wi-Fi network devices is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

4.3CVSS5.5AI score0.00374EPSS
Exploits0References3Affected Software2
Microsoft KB
Microsoft KB
added 2024/03/19 12:0 a.m.5 views

Update Rollup 6 for System Center 2019 Data Protection Manager

Update Rollup 6 for System Center 2019 Data Protection Manager Applies to : System Center 2019 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center Data Protection Manager 2019. This article also contains the...

6.8AI score
Exploits0
Positive Technologies
Positive Technologies
added 2024/03/18 12:0 a.m.3 views

PT-2024-2272 · Unitronics · Unistream +1

Name of the Vulnerable Software and Affected Versions: Unitronics Unistream Unilogic versions prior to 1.35.227 Description: The issue is related to insufficient protection of service data in the UniLogic Studio software for UniStream series programmable logic controllers. Exploitation of this...

10CVSS7.3AI score0.00711EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2024/03/18 12:0 a.m.3 views

The vulnerability of the Libgcrypt cryptographic library lies in the insufficient protection of service data due to timing differences, allowing attackers to execute the Bleichenbacher attack or the Marvin attack.

The vulnerability of the Libgcrypt cryptographic library is related to insufficient protection of service data due to timing differences. Exploiting this vulnerability allows a remote attacker to execute a Bleichenbacher attack or a Marvin attack...

5.9CVSS6.7AI score0.01114EPSS
Exploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/03/18 12:0 a.m.2 views

The vulnerability of cloud-based data storage software for IBM Watson CP4D Data Stores lies in the lack of encryption measures for protected data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of cloud-based data storage software for IBM Watson CP4D Data Stores lies in the lack of encryption measures for protected data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.1CVSS5.5AI score0.00333EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder