Lucene search
K

7 matches found

BDU FSTEC
BDU FSTEC
added 2024/07/02 12:0 a.m.1 views

The vulnerability of the ejs template for web application development in Node.js, related to incorrect elimination of special elements in the output data used by the incoming component, allows a hacker to execute arbitrary code.

The vulnerability of the ejs template for web application development in Node.js is related to incorrect elimination of special elements in the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially craft...

10CVSS6.3AI score0.00614EPSS
Exploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.1 views

The vulnerability of Sysdig Event analyzer, a traffic analysis tool for computer networks used by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the Sysdig Event analyzer, a traffic analysis tool for computer networks, Wireshark, is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to cause service...

7.8CVSS7.2AI score0.03774EPSS
Exploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.4 views

The vulnerability of the Moxa MXView network control software lies in its failure to eliminate special elements, allowing a violator to execute arbitrary code.

The vulnerability of the Moxa MXView network control software lies in the lack of measures taken to neutralize special elements in the output data used by the incoming component. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted reques...

10CVSS8.5AI score0.01707EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/25 12:0 a.m.1 views

The vulnerability of the Dovecot mail server arises from incorrect neutralization of special elements in the output data used by the incoming component, allowing attackers to expose user credentials.

The vulnerability of the Dovecot mail server is related to incorrect neutralization of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a remote attacker to expose user credentials...

4.2CVSS6.8AI score0.02837EPSS
Exploits0References9Affected Software13
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.2 views

The vulnerability of the IBM DB2 database management system lies in the insufficient cleaning of special elements in the output data used by the incoming component, which allows a hacker to trigger a service failure.

The vulnerability of the IBM DB2 database management system is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created commands...

6.5CVSS6.9AI score0.01395EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.1 views

The vulnerability of the Adobe Download Manager’s download manager, related to incorrect elimination of special elements in the output data used by the incoming component, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Download Manager’s download manager is related to the incorrect elimination of certain elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

9.3CVSS7.9AI score0.04847EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.3 views

The vulnerability of Cisco Umbrella’s security cloud service stems from deficiencies in the process of neutralizing special elements in the output data used by the incoming component. This allows attackers to execute arbitrary code using a specially crafted URL.

The vulnerability of Cisco Umbrella security cloud service is related to deficiencies in the process of neutralizing special elements in the output data used by the incoming component. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted URL...

4.7CVSS6AI score0.009EPSS
Exploits0References2
Rows per page
Query Builder