Lucene search
K

319 matches found

BDU FSTEC
BDU FSTEC
added 2019/08/27 12:0 a.m.1 views

The vulnerability of the Pulse Connect Secure corporate network VPN server, related to permission processing errors, allows a hacker to gain read access to arbitrary files.

The vulnerability of the Pulse Connect Secure VPN server for corporate networks is related to permission processing errors. Exploiting this vulnerability could allow a malicious actor to gain read access to arbitrary files by using specially created URIs...

8.6CVSS7.9AI score0.94462EPSS
Exploits22References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/25 12:0 a.m.0 views

The vulnerability of the splwow64.exe process in the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the splwow64.exe process in Windows operating systems is related to call processing errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

7CVSS5.5AI score0.04079EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.0 views

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK allows unauthorized access, enabling attackers to enhance their privileges.

The vulnerability of the installation mechanism for the software development tools for Intel Data Center Manager SDK is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.2CVSS5.5AI score0.00177EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/18 12:0 a.m.1 views

The vulnerability of the Microsoft Internet Information Services network services for Windows operating systems, related to data processing errors, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Internet Information Services IIS Server lies in data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.5CVSS5.9AI score0.02839EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/14 12:0 a.m.0 views

The vulnerability of the ASP.NET Core software platform, related to errors in request processing, allows a hacker to cause a service failure.

The vulnerability of the ASP.NET Core software platform is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending specially crafted requests to the ASP.NET Core application...

7.8CVSS5.5AI score0.07927EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.0 views

The vulnerability of the Access Connectivity Engine component in the Microsoft Office software allows a hacker to execute arbitrary code.

The vulnerability of the Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object processing in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.6AI score0.24224EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/06/06 12:0 a.m.1 views

The vulnerability of the Access Connectivity Engine component in the Microsoft Office software allows a hacker to execute arbitrary code.

The vulnerability of the Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object processing in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.6AI score0.24224EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.0 views

The vulnerability of the Analysis Services service of the Microsoft SQL Server database management system allows a perpetrator to gain access to protected information.

The vulnerability of the Analysis Services service in the Microsoft SQL Server database management system is related to errors in processing SQL queries. Exploiting this vulnerability may allow an attacker, operating remotely, to gain access to protected information...

6.5CVSS6.7AI score0.03214EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.2 views

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to errors in object processing in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.19127EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.1 views

The vulnerability of the cdrom_ioctl_drive_status() function in Linux operating systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the cdromioctldrivestatus function in Linux operating systems is related to data processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.1CVSS6.4AI score0.00015EPSS
Exploits0References14Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.2 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in processing service data, allows attackers to compromise the confidentiality of protected information.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information through a specially crafted website...

5CVSS6.5AI score0.27849EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:0 a.m.2 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

4.3CVSS5.8AI score0.14171EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/07 12:0 a.m.2 views

The vulnerability of the Microsoft Team Foundation Server project management and version control system, related to errors in the data protection mechanism, allows a hacker to disclose protected information.

The vulnerability of the Microsoft Team Foundation Server project management and version control system is related to errors in processing protected variables. Exploiting this vulnerability can allow an attacker, operating remotely, to expose protected information by creating a task that contains...

6.8CVSS6.5AI score0.13582EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:0 a.m.1 views

The vulnerability of the Ruby library for handling web resources, Sprockets, related to request processing errors, allows a hacker to gain unauthorized access to information.

The vulnerability of the Ruby library for handling web resources, Sprockets, is related to request processing errors. Exploiting this vulnerability allows an attacker to remotely access files located outside of the application’s root directory and gain unauthorized access to protected information...

7.5CVSS7.1AI score0.93887EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:0 a.m.1 views

The vulnerability of the get_cookies function in the HTTP library libsoup, which allows a hacker to execute arbitrary code.

The vulnerability of the getcookies function in the HTTP library libsoup is related to errors in input processing. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a null hostname...

9.8CVSS7.4AI score0.04538EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.2 views

The vulnerability of Excel spreadsheet editors, related to data processing errors, allows attackers to execute arbitrary code.

The vulnerability of Excel spreadsheet editors is related to data processing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS8AI score0.2387EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.1 views

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software, related to data processing errors, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software is related to data processing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.3CVSS8AI score0.29929EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.2 views

The vulnerability of the Microsoft RemoteFX Virtual GPU driver in the Windows operating system allows a hacker to execute arbitrary code with elevated privileges.

The vulnerability of the Microsoft RemoteFX Virtual GPU driver for the Windows operating system is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...

7CVSS8.3AI score0.00763EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.1 views

The vulnerability of the Windows Audio service on the Windows operating system allows a perpetrator to gain access to protected information.

The vulnerability of the Windows Audio service in the Windows operating system is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to gain access to protected information stored in the memory of a privileged process...

2.5CVSS7.1AI score0.08EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/10 12:0 a.m.3 views

The vulnerability of the FreeRDP remote desktop protocol lies in errors in processing specially crafted request packets, which allows attackers to trigger service failures or perform “man-in-the-middle” attacks.

The vulnerability of the FreeRDP remote desktop protocol is related to errors in processing specially crafted request packets. Exploiting this vulnerability allows a malicious actor to cause an application to terminate abnormally or carry out “man-in-the-middle” attacks...

7.5CVSS7AI score0.00622EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder