Lucene search
+L

379 matches found

BDU FSTEC
BDU FSTEC
added 2023/02/17 12:00 a.m.20 views

The vulnerability of the LoginForm and RegisterForm data transmission forms in the Apex-VUZ automation system allows a perpetrator to gain access to user account information.

The vulnerability of the LoginForm and RegisterForm data transmission forms in the Apex-VUZ automation system is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials...

7.8CVSS5.5AI score
SaveExploits0Affected Software1
Packet Storm
Packet Storm
added 2023/02/10 12:00 a.m.302 views

WEBY 1.2.5 Cross Site Request Forgery

==================================================================================================================================== | Title : WEBY v.1.2.5 CSRF Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.0.132-bit | | Vendor :...

0.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:00 a.m.19 views

The vulnerability of the configuration of web applications using microprogramming software for Moxa SDS-3008 Ethernet switches allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configuration of web applications developed with Microprogramming Software for Moxa SDS-3008 Ethernet switches lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected informatio...

5.9CVSS6.5AI score0.00646EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/12/12 12:00 a.m.11 views

PT-2022-6300 · Апекс-Вуз · Апекс-Вуз

Name of the Vulnerable Software and Affected Versions: Апекс-ВУЗ affected versions not specified Description: The issue is related to the transmission of data in open form through the LoginForm and RegisterForm in the Апекс-ВУЗ education automation system. This could allow a remote attacker to ga...

7.8CVSS7.2AI score
SaveExploits0References1
NVD
NVD
added 2022/12/02 4:15 p.m.32 views

CVE-2022-45480

PC Keyboard WiFi & Bluetooth allows an attacker in a man-in-the-middle position between the server and a connected device to see all data including keypresses in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N...

5.9CVSS0.00372EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/11/30 12:00 a.m.79 views

Telos Alliance Omnia MPX Node Insecure Direct Object Reference Vulnerability

The Telos Alliance Omnia MPX Node is a specialized hardware codec from Telos Alliance, USA. Capable of transmitting or receiving full FM signals at data rates as low as 320 kbps using the Omnia μMPXTM algorithm, it is ideally suited for capacity-limited networks, including IP radios. An insecure...

7.5CVSS7.6AI score0.00671EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/11/09 12:00 a.m.13 views

The vulnerability of the cURL command-line utility, related to the transmission of data in an open manner, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the cURL command-line utility is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information while operating remotely...

7.8CVSS6.8AI score0.01809EPSS
SaveExploits0References13Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:00 a.m.13 views

The vulnerability of the Moxa MXView network control software, related to the transmission of data in an open manner, allows a violator to disclose protected information.

The vulnerability of the Moxa MXView network control software lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

7.8CVSS6.6AI score0.00597EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/19 9:26 p.m.10 views

CVE-2022-41983 BIG-IP TMM Vulnerability CVE-2022-41983

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT QuickAssist Technology and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send data unencrypted even...

3.7CVSS4.1AI score0.00265EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/14 12:00 a.m.56 views

Microsoft Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft Corporation that allows secure transmission of data from a remote client to a private enterprise server by creating a virtual private network VPN over a TCP/IP-based data network. A remote code execution...

3.1AI score0.01152EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/10/13 12:00 a.m.41 views

Microsoft Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Microsoft Windows Point-to-Point Tunneling Protocol PPTP is a network protocol from Microsoft Corporation that allows secure transmission of data from a remote client to a private enterprise server by creating a virtual private network VPN over a TCP/IP-based data network. A remote code execution...

3.5AI score0.01516EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/06 12:00 a.m.11 views

The vulnerability of the Diagnostics Agent tool of the SAP Solution Manager platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Diagnostics Agent tool of the SAP Solution Manager software platform relates to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

10CVSS7.8AI score0.01383EPSS
SaveExploits0References6Affected Software1
Hacker One
Hacker One
added 2022/09/22 2:19 p.m.29 views

Nextcloud: Vulnerable moment-timezone version shipped

An information exposure vulnerability was found in the moment-timezone package used by Nextcloud server. Attackers could sniff network traffic during data transmission, making exploitation easier. The vulnerability was patched in version 0.5.35 by changing the FTP endpoint with an HTTPS endpoint...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:00 a.m.22 views

The vulnerability of the RPKI validator OctoRPKI, which stems from the lack of data validation during data transmission, allows a violator to trigger a service failure.

The vulnerability of the RPKI validator OctoRPKI is related to the lack of verification of returned data during the generation of Route Origin Authorisations. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.4CVSS6.5AI score0.00907EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/26 12:00 a.m.12 views

The vulnerability of implementations of data transmission specifications in industrial networks, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of implementations of data transmission specifications in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.01577EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/26 12:00 a.m.15 views

The vulnerability of implementations of data transmission specifications in industrial networks, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of implementations of data transmission specifications in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.01292EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/07/12 2:15 p.m.6 views

CVE-2021-40012

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS5.8AI score0.00835EPSS
SaveExploits0References3
NVD
NVD
added 2022/07/12 2:15 p.m.25 views

CVE-2021-40012

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS0.00835EPSS
SaveExploits0References3
Prion
Prion
added 2022/07/12 2:15 p.m.23 views

Design/Logic Flaw

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...

5CVSS7.5AI score0.00835EPSS
SaveExploits0References3Affected Software3
CVE
CVE
added 2022/07/11 1:53 p.m.81 views

CVE-2021-40012

CVE-2021-40012 affects Huawei EMUI (notably EMUI 12.x) via the video framework where pointers are improperly used during data transmission, exposing confidentiality. Root cause: incorrect handling of pointers in the data transfer path within the video framework. Impact: information disclosure pot...

7.5CVSS7.4AI score0.00835EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder