Lucene search
+L

875 matches found

BDU FSTEC
BDU FSTEC
added 2022/05/11 12:00 a.m.7 views

Vulnerability of the MySQL Server component: The MySQL Server database management system’s DDL functions allow attackers to compromise the integrity of protected information or cause service failures.

Vulnerability of the MySQL Server component: The MySQL Server database management system has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities allows an attacker to compromise the integrity of protected information or cause service failures...

7.5CVSS6.5AI score0.01257EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.12 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s function decoding process allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MPEG-4 multimedia platform GPAC decoder’s decoding function is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.0201EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.9 views

The vulnerability of the Samples component of the Oracle WebLogic Server application server allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Samples component of the Oracle WebLogic Server application server exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected information...

6.1CVSS6.7AI score0.00946EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/06 12:00 a.m.15 views

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder for MPEG-4 multimedia platform GPAC is related to the lack of verification for the result of the addition arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service...

9.3CVSS7.6AI score0.01656EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:00 a.m.16 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s encoding function allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.01601EPSS
SaveExploits1References7Affected Software3
zdt
zdt
added 2022/03/29 12:00 a.m.217 views

One Church Management System 1.0 SQL Injection Vulnerability

Exploit Title: One Church Management System 1.0 - attendancy.php search2 SQL Injection Exploit Author: Mr Empy Software Link: https://www.sourcecodester.com/php/15225/church-management-software-free-download-full-version.html Version: 1.0 Tested on: Linux Title: ================ One Church...

0.5AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/02/16 5:15 p.m.6 views

CVE-2020-6918

Potential security vulnerabilities including compromise of integrity, and allowed communication with untrusted clients has been identified in HP Support Assistant software...

7.8CVSS7.3AI score0.00865EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.12 views

The vulnerability of the Cisco AsyncOS operating system for Cisco Email Security Appliance systems allows attackers to compromise the integrity of protected information.

The vulnerability of the Cisco AsyncOS operating system for Cisco Email Security Appliance systems exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

5.8CVSS5.9AI score0.01067EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/02 12:00 a.m.8 views

The vulnerability of the Tab Strip component in the Google Chrome web browser, related to memory usage after it is freed, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Tab Strip component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...

8.8CVSS7.6AI score0.00881EPSS
SaveExploits1References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.9 views

The vulnerability of the Browser UI component in the Google Chrome web browser, related to memory usage after it is released, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Browser UI component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service interruptions...

6.8CVSS6.3AI score0.01254EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.10 views

The vulnerability of the WebAudio component in the Google Chrome web browser, related to the occurrence of operations beyond the buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebAudio component in the Google Chrome web browser is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptio...

8.8CVSS8AI score0.01181EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.11 views

The vulnerability of the TabStrip control element in Google Chrome web browsers, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TabStrip control element in Google Chrome browsers relates to writing beyond the buffer. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through the use of a speciall...

8.8CVSS7.6AI score0.00989EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:00 a.m.12 views

The vulnerability of the libdnf package manager library involves incorrect verification of the cryptographic signature of data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the package manager library libdnf is related to a bug in the signature verification function. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS6.8AI score0.01117EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:00 a.m.11 views

The vulnerability in the tce_select_mediafile.php function of the TCExam electronic examination system allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability in the tceselectmediafile.php file of the TCExam electronic examination system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the...

6.1CVSS6.3AI score0.00937EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:00 a.m.15 views

Vulnerability of reply_query() function (forward.c): The Dnsmasq DNS server has vulnerabilities related to errors in implementing security checks for standard elements. This allows attackers to compromise the integrity of protected information.

The vulnerability of the replyquery function forward.c: The Dnsmasq DNS server is vulnerable due to the use of a weak hash. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

4.3CVSS6.9AI score0.02181EPSS
SaveExploits2References9Affected Software4
RedHat Linux
RedHat Linux
added 2021/07/07 2:57 p.m.12 views

kernel: security bypass in certs/blacklist.c and certs/system_keyring.c

A flaw was found in the Linux kernel in certs/blacklist.c, When signature entries for EFICERTX509GUID are contained in the Secure Boot Forbidden Signature Database, the entries are skipped. This can cause a security threat and breach system integrity, confidentiality and even lead to a denial of...

6.9CVSS6.6AI score0.00528EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.10 views

The vulnerability of implementations of algorithms such as WEP, WPA, WPA2, and WPA3 for IEEE 802.11 communication standards allows attackers to inject arbitrary network packets and/or compromise the integrity of protected information.

The vulnerability of implementations of algorithms such as WEP, WPA, WPA2, and WPA3 for IEEE 802.11 communication standards exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary network packets and/or compromise the...

3.5CVSS6.9AI score0.05765EPSS
SaveExploits2References36Affected Software6
CNVD
CNVD
added 2021/04/21 12:00 a.m.11 views

Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30884)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Packaging component in Oracle MySQL Server 5.7.33, 8.0.23 and earlier versions. An attacker could exploit the vulnerability to compromise confidentiality and integrity...

6.1CVSS5.8AI score0.01013EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:00 a.m.11 views

The vulnerability of the configuration management system and remote execution of operations, related to the lack of measures to neutralize special elements, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of configuration management systems and remote execution of operations related to Salt is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cau...

9.8CVSS7.7AI score0.99585EPSS
SaveExploits4References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.11 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to writing beyond the buffer limit, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

7.3CVSS7.8AI score0.18935EPSS
SaveExploits6References8Affected Software3
Rows per page
Query Builder