Lucene search
+L

365 matches found

BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.15 views

The vulnerability of the RPKI validator OctoRPKI, which stems from the lack of data validation during data transmission, allows a violator to trigger a service failure.

The vulnerability of the RPKI validator OctoRPKI is related to the lack of verification of returned data during the generation of Route Origin Authorisations. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.4CVSS6.5AI score0.00878EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/26 12:0 a.m.7 views

The vulnerability of implementations of data transmission specifications in industrial networks, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of implementations of data transmission specifications in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.0103EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/26 12:0 a.m.9 views

The vulnerability of implementations of data transmission specifications in industrial networks, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of implementations of data transmission specifications in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.01167EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/07/12 2:15 p.m.4 views

CVE-2021-40012

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS5.8AI score0.00798EPSS
SaveExploits0References3
NVD
NVD
added 2022/07/12 2:15 p.m.22 views

CVE-2021-40012

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...

7.5CVSS0.00798EPSS
SaveExploits0References3
Prion
Prion
added 2022/07/12 2:15 p.m.20 views

Design/Logic Flaw

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...

5CVSS7.5AI score0.00798EPSS
SaveExploits0References3Affected Software3
CVE
CVE
added 2022/07/11 1:53 p.m.70 views

CVE-2021-40012

CVE-2021-40012 affects Huawei EMUI (notably EMUI 12.x) via the video framework where pointers are improperly used during data transmission, exposing confidentiality. Root cause: incorrect handling of pointers in the data transfer path within the video framework. Impact: information disclosure pot...

7.5CVSS7.4AI score0.00798EPSS
SaveExploits0References3Affected Software3
Cvelist
Cvelist
added 2022/07/11 1:53 p.m.25 views

CVE-2021-40012

Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality...

7.7AI score0.00798EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/07/11 12:0 a.m.10 views

PT-2022-11134 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue concerns the incorrect use of pointers during data transmission in the video framework, which may impact confidentiality upon successful exploitation. Recommendations: At the...

7.5CVSS7.4AI score0.00798EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.16 views

The vulnerability of the OAS Engine SecureAddUser function in the platform for data transmission between devices and applications allows a perpetrator to gain unauthorized access to the system.

The vulnerability of the OAS Engine SecureAddUser function on the platform for data transfer between devices and applications is related to the lack of authentication checks for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...

7.8CVSS7.2AI score0.01234EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.11 views

The vulnerability of the OAS Engine SecureAddSecurity function in the platform for data transmission between devices and applications allows a perpetrator to gain unauthorized access to the system.

The vulnerability of the OAS Engine SecureAddSecurity function in the platform for data transfer between devices and applications in the OAS Platform is related to the lack of authentication for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to ga...

7.8CVSS7.2AI score0.01234EPSS
SaveExploits1References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/29 3:14 p.m.35 views

Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to unauthorized sensitive information access due to IBM Java (CVE-2021-35603)

Summary IBM Java is used by IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms in product configuration, management, and data transmission. IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms is impacted by an unauthorized sensitive information access...

4.3CVSS0.8AI score0.04104EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/06/29 3:10 p.m.50 views

Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to unauthorized data access due to IBM Java (CVE-2021-35550)

Summary IBM Java is used by IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms in product configuration, management, and data transmission. IBM Sterling Connect:Direct for UNIX on AIX, Linux, and Solaris platforms is impacted by an unauthorized data access issue in IBM Java...

7.1CVSS0.9AI score0.06868EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:0 a.m.7 views

The vulnerability of the implementation of the ROC protocol for microprogrammed logic controllers FloBoss allows a intruder to gain unauthorized access to protected information.

The vulnerability of the ROC protocol implementation in FloBoss microprogrammed logic controllers is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

7.8CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:0 a.m.19 views

The vulnerabilities of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as the DeltaV/Ovation SIS emergency protection system, allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of embedded images of microprogrammed control systems for DeltaV M-series/S-series/P-series controllers, as well as of the emergency protection system DeltaV/Ovation SIS, is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a maliciou...

7.8CVSS5.5AI score0.00149EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.12 views

The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet-controllers from DirectLOGIC, related to the transmission of data in an open manner, allows a intruder to gain unauthorized access to the device.

The vulnerability of the communication modules of H0-ECOM and H0-ECOM100 Ethernet controllers from DirectLOGIC lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to the device by receiving a password packet in ...

7.8CVSS8AI score0.00621EPSS
SaveExploits0References3Affected Software2
CVE
CVE
added 2022/05/25 8:15 a.m.106 views

CVE-2022-21951

The CVE-2022-21951 issue affects SUSE Rancher (Rancher) where a Cleartext Transmission of Sensitive Information vulnerability allows an attacker on the network to read and modify network data. The root cause is missing encryption of data transmitted over the network when a cluster is created from...

6.8CVSS6.4AI score0.00377EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/24 5:19 p.m.28 views

Missing permission check in Jenkins Project Inheritance Plugin

Jenkins Project Inheritance Plugin 21.04.03 and earlier does not redact encrypted secrets in the 'getConfigAsXML' API URL when transmitting job config.xml data to users without Job/Configure...

6.5CVSS6.1AI score0.00798EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/05/24 12:0 a.m.8 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. Google Chrome suffers from a security vulnerability that arises from insufficient validation of user-supplied input during data transmission. A remote attacker can trick a victim into visiting a specially...

6.5CVSS7.6AI score0.00833EPSS
SaveExploits0References12
CNVD
CNVD
added 2022/04/29 12:0 a.m.11 views

Cisco Adaptive Security Appliance和Firepower Threat Defense信息泄露漏洞

Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances Software are both products of Cisco, Inc. Cisco Adaptive Security Appliances Software is a firewall and network security platform. The platform provides highly secure access to data and network resources, among other...

7.4CVSS1.8AI score0.00438EPSS
SaveExploits0References1
Rows per page
Query Builder