Lucene search
K

35 matches found

Redos
Redos
added 2026/02/09 12:0 a.m.4 views

ROS-20260209-73-0020

PowerDNS Recursor DNS server vulnerability is related to failure to take measures to neutralize special elements in the output data. Exploitation of the vulnerability could allow a remote attacker to affect the integrity and availability of protected information...

6.5CVSS5.7AI score0.00122EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/07/21 12:0 a.m.3 views

The vulnerability of the Endpoint Manager Mobile app for managing the lifecycle of mobile devices and mobile applications (formerly known as MobileIron Core) arises from the lack of measures taken to neutralize specific elements. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and mobile applications formerly known as MobileIron Core is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this...

9CVSS7.5AI score0.14809EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.2 views

The vulnerability of the Jinja HTML templating compiler lies in its failure to properly eliminate special elements during template creation. This allows attackers to trigger a service failure.

The vulnerability of the Jinja HTML template compiler relates to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can allow an attacker to cause service failures...

7.3CVSS7.2AI score0.00465EPSS
Exploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/02/25 12:0 a.m.2 views

The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize special elements, allowing violators to bypass security restrictions and execute arbitrary codes.

The vulnerability of UniFi Protect Camera surveillance systems lies in the lack of measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to bypass security restrictions and execute arbitrary code...

7.5CVSS7.8AI score0.00722EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/31 12:0 a.m.1 views

The vulnerability of the AutoGPT library, related to its failure to take measures to neutralize special elements, allows a violator to bypass the restrictions on shell commands.

The vulnerability of the AutoGPT library is related to the failure to take measures to neutralize certain elements. Exploiting this vulnerability allows a remote attacker to bypass the restrictions in the botnet’s command list...

10CVSS7.8AI score0.00789EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/21 12:0 a.m.4 views

The vulnerability of the Aviatrix Controller software, a cloud infrastructure management tool, arises from the lack of measures to neutralize specific elements, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Aviatrix Controller software for managing cloud infrastructure is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.98508EPSS
Exploits5References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/25 12:0 a.m.4 views

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the lack of measures taken to neutralize special elements used in the expression language operator. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the online business analytics service IBM Cognos Analytics lies in the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected informatio...

9CVSS8AI score0.00576EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.3 views

The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure, which are network access control tools, stems from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary code.

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary co...

9.1CVSS8.1AI score0.01652EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.2 views

The vulnerability of the MediaCMS content management system lies in its lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary operating system commands, gain control over resources, and penetrate the internal network.

The vulnerability of the MediaCMS content management system is related to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary operating system commands remotely, gain...

9.9CVSS5.9AI score0.00679EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/09/02 12:0 a.m.2 views

The vulnerability of the application server for managing Hitachi Tuning Manager storage resources lies in the lack of measures taken to neutralize special elements used in the expression language. This allows attackers to execute arbitrary code.

The vulnerability of the Hitachi Tuning Manager application server regarding resource management in data storage systems is related to the lack of measures taken to neutralize special elements used in the expression language. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS8AI score0.00365EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/08/07 12:0 a.m.2 views

The vulnerability of SysAid’s software for supporting and controlling hardware and software systems lies in the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.

The vulnerability of the software used for supporting and controlling hardware and software systems of SysAid is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrar...

9.1CVSS6.3AI score0.01101EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2024/08/06 12:0 a.m.3 views

DataGear 安全漏洞

DataGear is an open source, free data visualization and analysis platform from DataGear, Inc. A security vulnerability exists in DataGear version 5.0.0 and earlier versions, which originates in the function evaluationVariableExpression in the file ConversionSqlParamValueMapper.java that causes...

8.8CVSS6.5AI score0.0059EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2024/03/12 12:0 a.m.2 views

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices stems from the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

5.8CVSS7.5AI score0.01108EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.2 views

The vulnerability of the XWiki platform lies in its inability to eliminate special elements, allowing attackers to execute arbitrary code.

The vulnerability of the XWiki platform lies in its inability to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8AI score0.01945EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:0 a.m.3 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the failure to take measures to eliminate special elements within the platform, allowing attackers to inject arbitrary code.

The vulnerability of the XWiki platform lies in its lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

9.9CVSS7.8AI score0.0109EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/07 12:0 a.m.5 views

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices stems from the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.3CVSS7.5AI score0.01073EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:0 a.m.4 views

The vulnerability of the OpenCMS content management system, related to the failure to take measures to neutralize specific elements, allows attackers to influence the confidentiality, integrity, and accessibility of information.

The vulnerability of the OpenCMS content management system is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of information...

10CVSS5.4AI score0.00232EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/12 12:0 a.m.3 views

The vulnerability of the PostCSS library arises from the lack of measures taken to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of the PostCSS library exists because measures to neutralize special elements have not been taken. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.3CVSS6.6AI score0.00822EPSS
Exploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.3 views

The vulnerability of the FortiSIEM security management system arises from the failure to take measures to neutralize specific elements, allowing attackers to execute arbitrary commands.

The vulnerability of the FortiSIEM security management system exists due to the lack of measures to neutralize specific elements within it. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

10CVSS8.4AI score0.01877EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/15 12:0 a.m.2 views

The vulnerability of NagiosXI software, related to the failure to take measures to neutralize special elements, allows a violator to execute arbitrary commands.

The vulnerability of NagiosXI software is related to the failure to take measures to neutralize specific elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary commands...

9.1CVSS5.8AI score
Exploits0References1Affected Software1
Rows per page
Query Builder