Lucene search
+L

482 matches found

BDU FSTEC
BDU FSTEC
added 2022/05/11 12:0 a.m.9 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using MySQL network protocols...

6.8CVSS6.3AI score0.0134EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/11 12:0 a.m.6 views

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the MySQL Server component of the database management system involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using MySQL network protocols...

6.8CVSS6.3AI score0.01252EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/06 12:0 a.m.13 views

Vulnerability of the Cluster component: The general database management system of Oracle MySQL Cluster allows a hacker to gain full control over the application.

Vulnerability of the Cluster component: The general system for managing databases in Oracle MySQL Cluster is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain full control over the application through various network protocols...

6.5CVSS6.6AI score0.03079EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2022/05/04 5:15 p.m.11 views

CVE-2022-20799

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to...

7.2CVSS6.1AI score0.01574EPSS
Exploits0References1
OSV
OSV
added 2022/05/03 8:15 p.m.5 views

CVE-2022-20099

In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06296442; Issue ID: ALPS06296442...

7.8CVSS7.2AI score0.00107EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:0 a.m.13 views

The vulnerability of the goform/formEMR30 component of the Symantec Messaging Gateway, which exists due to insufficient validation of input data, allows a perpetrator to execute arbitrary code or escalate their privileges.

The vulnerability of the goform/formEMR30 component of the Symantec Messaging Gateway exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges or execute arbitrary code...

9CVSS7.9AI score0.35341EPSS
Exploits7References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.8 views

The vulnerability of the VMware vCloud Director platform, a cloud storage management platform, allows a attacker to execute arbitrary code.

The vulnerability of the VMware vCloud Director platform for managing cloud storage repositories is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

9.1CVSS7.8AI score0.0639EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.8 views

The vulnerability of the Webservices Manager component of the Oracle Communications Billing and Revenue Management software lies in insufficient validation of input data. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Webservices Manager component of the Oracle Communications Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility o...

10CVSS7.7AI score0.0237EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/04/13 12:0 a.m.5 views

PT-2022-2712 · Cisco · Cisco Iox +1

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to insufficient input validation in the Cisco IOx platform, allowing an attacker to potentially cause a denial of service by sending specially crafted TCP traffic...

7.5CVSS7.6AI score0.01057EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.6 views

The vulnerability of the Samples component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Samples component of the Oracle WebLogic Server application server exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

6.1CVSS6.7AI score0.00946EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.9 views

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

4.3CVSS6.4AI score0.00688EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:0 a.m.6 views

The vulnerability of the Pipeline Manager component of Oracle Communications’ Billing and Revenue Management software allows a hacker to disclose protected information.

The vulnerability of the Pipeline Manager component of Oracle Communications’ Billing and Revenue Management software exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by the system...

3.3CVSS6.5AI score0.00316EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.9 views

Vulnerability of the MySQL Server component: This component of the database management system allows attackers to cause service failures or gain access to modify, add, or delete data.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or gain access to modify, add, or delete data using the MySQL network protocol...

6.5CVSS6.3AI score0.01148EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.7 views

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain privileged access

Vulnerability of the MySQL Cluster component: General database management system vulnerabilities in MySQL Cluster exist due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain privileged access remotely...

6.5CVSS6.7AI score0.02686EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:0 a.m.6 views

The vulnerability of the Apache HTTP Server web server, related to input validation flaws, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server is related to input validation flaws. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted data to the application...

7.8CVSS7.7AI score0.69803EPSS
Exploits0References17Affected Software7
CNNVD
CNNVD
added 2022/01/24 12:0 a.m.5 views

Dell Emc Data Protection Central 代码问题漏洞

Dell Emc Data Protection Central is a management console from Dell USA Inc. It is used for data protection. A server-side request forgery vulnerability exists in Dell EMC Data Protection Central 19.5 and prior versions, which stems from the product's failure to properly validate user input and ca...

4.3CVSS5.6AI score0.00554EPSS
Exploits0References2
OSV
OSV
added 2022/01/14 5:15 a.m.9 views

CVE-2022-20640

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS6.6AI score0.00759EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/13 12:0 a.m.6 views

CVE-2022-20641

Multiple vulnerabilities in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct cross-site scripting attacks against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the...

6.1CVSS6.6AI score0.00759EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.6 views

The vulnerabilities of the TwinCAT OPC UA Server and IPC Diagnostics UA Server stem from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the TwinCAT OPC UA Server and IPC Diagnostics UA Server exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS5.9AI score0.00955EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.6 views

The vulnerability of the JNDI component of the Apache Log4j2 logging library allows a perpetrator to execute arbitrary code.

The vulnerability of the JNDI component of the Apache Log4j2 logging library is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.99999EPSS
Exploits355References18Affected Software28
Rows per page
Query Builder