Lucene search
+L

204 matches found

BDU FSTEC
BDU FSTEC
added 2025/06/20 12:0 a.m.10 views

The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to clean data at the management level, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to clean up data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.1CVSS7.6AI score0.06664EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.11 views

The vulnerability of the bs_setCmd() function in the libshare-0.0.26.so library of the LB-LINK microprogramming router software allows a attacker to execute arbitrary commands.

The vulnerability of the bssetCmd function in the libshare-0.0.26.so library of the LB-LINK router software lies in the failure to take data cleaning measures at the control level when processing the cmd parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary comman...

10CVSS5.9AI score0.1106EPSS
SaveExploits1References2Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.8 views

The vulnerability of the bs_SetMacBlack() function in the libshare-0.0.26.so library of the LB-LINK router software allows a attacker to execute arbitrary commands.

The vulnerability of the bsSetMacBlack function in the libshare-0.0.26.so library of the LB-LINK router software is related to the lack of data cleaning measures at the control level when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

10CVSS5.9AI score0.0179EPSS
SaveExploits1References2Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.9 views

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant, related to the lack of data cleaning at the management level, allows a perpetrator to disclose protected information.

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

9.3CVSS5.9AI score0.07961EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.9 views

The vulnerability of the sub_F3C8C function in the Tenda CP3 IP camera software allows a intruder to execute arbitrary code.

The vulnerability of the subF3C8C function in the Tenda CP3 IP camera software relates to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.5CVSS5.9AI score0.04475EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/05 12:0 a.m.17 views

The vulnerability of the getServerCertificate method in the HPE StoreOnce VSA storage virtualized system allows a attacker to execute arbitrary code.

The vulnerability of the getServerCertificate method in the HPE StoreOnce VSA storage virtualized environment is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS7.9AI score0.01335EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/02 12:0 a.m.8 views

The vulnerability of the CLI interface of HPE Aruba Networking Access Point software allows a perpetrator to execute arbitrary code.

The vulnerability of the CLI interface of HPE Aruba Networking Access Point software relates to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted packets to the UDP port...

10CVSS6AI score0.01419EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/06/01 12:0 a.m.9 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the lack of data cleaning at the management level, allowing attackers to execute arbitrary code.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the lack of measures taken to clean data at the management level. Exploiting these vulnerabilities allows a remote attacker to execute arbitrary code...

6.5CVSS7.3AI score0.00408EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/29 12:0 a.m.12 views

The vulnerability of the formSafeEmailFilter() function in the Tenda FH451 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSafeEmailFilter function in the Tenda FH451 router software lies in the lack of data cleaning measures at the management level when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

6.5CVSS6AI score0.07369EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.11 views

The vulnerability of the sub_16570 function in the /htdocs/ssdpcgi file of the D-Link DIR-880L router’s microprogramming system, related to the lack of data cleaning at the control level, allows a hacker to execute arbitrary commands.

The vulnerability of the sub16570 function in the /htdocs/ssdpcgi file of the D-Link DIR-880 router’s microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

6.5CVSS6.9AI score0.17961EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.8 views

The vulnerability of the wake_on_lan function in D-Link DIR-605L router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the wakeonlan function in D-Link DIR-605L router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

10CVSS7.2AI score0.06501EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.10 views

The vulnerability of the iControl REST component of the access control and remote authentication solution for BIG-IP allows a perpetrator to inject arbitrary commands.

The vulnerability of the iControl REST component of the access control and remote authentication solution for BIG-IP is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to inject arbitrary commands remotely...

8.7CVSS6.4AI score0.00753EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.9 views

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibili...

10CVSS7.7AI score0.01946EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.8 views

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the setNetworkDiag function in TOTOLINK CA300-PoE router microprogramming software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibili...

10CVSS7.7AI score0.01946EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.12 views

The vulnerability of the web interface of the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to elevate their privileges and execute arbitrary commands.

The vulnerability of the web interface of the microprogrammed software router EDIMAX BR-6478AC is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands...

6.5CVSS5.8AI score0.09162EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.11 views

The vulnerability of the setRebootScheCfg function in the microprogrammed routing software of TOTOLINK CA300-PoE allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setRebootScheCfg function in TOTOLINK CA300-PoE router microprogramming systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality,...

10CVSS7.7AI score0.01946EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/11 12:0 a.m.16 views

The vulnerability of the recvSlaveCloudCheckStatus() function in the microprogramming software for TOTOLINK T8 allows a hacker to execute arbitrary commands.

The vulnerability of the recvSlaveCloudCheckStatus function in the microprogramming software for TOTOLINK T8 routers is related to the lack of measures taken to clean data at the management level when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8.1AI score0.02109EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.6 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that stems from insufficient cleaning of sensitive...

5.5CVSS6.1AI score0.00262EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.7 views

The vulnerability of the `web.static(... show_index=True)` method in the HTTP client aiohttp allows a attacker to compromise the confidentiality and integrity of the system.

The vulnerability of the web.static..., showindex=True method in the aiohttp HTTP client is related to insufficient data cleaning provided by users on index pages for processing static files. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of...

6.4CVSS6.8AI score0.00666EPSS
SaveExploits0References10Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.8 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to increase their privileges and execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...

7.8CVSS5.8AI score0.00803EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder