Lucene search
+L

2006 matches found

BDU FSTEC
BDU FSTEC
added 2021/08/19 12:0 a.m.12 views

The vulnerability of the Thunderbird email client, related to the lack of encryption measures for protected data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Thunderbird email client is related to the lack of encryption measures for protected data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.1AI score0.01558EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/08/19 12:0 a.m.12 views

The vulnerability of the Thunderbird email client, related to the disclosure of information, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Thunderbird email client is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through the src attribute...

7.8CVSS7.4AI score0.0198EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:0 a.m.14 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is released. These vulnerabilities allow attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to gain...

7.5CVSS7.5AI score0.04477EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:0 a.m.9 views

The vulnerability of the FortiMail IBE (Identity-Based Encryption) service of the FortiMail email protection system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FortiMail IBE Identity-Based Encryption service of the FortiMail email protection system lies in the lack of encryption measures for protected data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected informati...

5.9CVSS7.2AI score0.00342EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2021/08/10 12:0 a.m.4 views

PT-2021-3830 · Microsoft · Windows Services For Nfs +1

Name of the Vulnerable Software and Affected Versions: Windows Services for NFS affected versions not specified Description: The issue is related to insufficient protection of service data, which can be exploited by a remote attacker to gain unauthorized access to protected information. This can...

7.8CVSS7.2AI score0.03241EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/08/09 12:0 a.m.9 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...

4.3CVSS7.1AI score0.03565EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/09 12:0 a.m.10 views

The vulnerability of the microprogrammed IP cameras from Bosch, models CPP6 UHD/MP, CPP7 UHD/MP, and CPP7.3 UHD/MP, is related to the absence of authentication procedures. This allows intruders to gain unauthorized access to protected information or alter settings.

The vulnerability of the microprogrammed IP cameras from Bosch, models CPP6 UHD/MP, CPP7 UHD/MP, and CPP7.3 UHD/MP, is related to the absence of authentication procedures for critical functions. Exploiting this vulnerability can allow an unauthorized person to gain unauthorized access to protecte...

10CVSS7.8AI score0.01433EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/08/06 12:0 a.m.7 views

The vulnerability of the DevTools set of tools for web development in the Google Chrome web browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the DevTools suite for web development in the Google Chrome web browser relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by opening a specially created malicious web...

7.8CVSS7.6AI score0.01233EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/08/03 12:0 a.m.11 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

7.8CVSS7.4AI score0.03252EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2021/07/13 12:0 a.m.2 views

PT-2021-5015 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a component of Microsoft Windows, specifically Media Foundation, and involves the disclosure of information. Exploitation of this issue could allow an...

5.5CVSS5.2AI score0.00849EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.9 views

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to execute arbitrary code and disclose protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and disclose sensitive information...

6.4CVSS5.8AI score0.00594EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.7 views

The vulnerability of the Keycloak identity and access management software lies in its authentication mechanism, which has flaws. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Keycloak identity and access management software is related to shortcomings in the WebAuthn authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.6CVSS7.2AI score0.0091EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.6 views

The vulnerability in the upload.php PHP form creator of Machform allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the upload.php PHP form builder of Machform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

6.1CVSS6.3AI score0.00685EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.6 views

The vulnerability of the portal/patient/_machine_config.php component of the software for managing medical organizations OpenEMR allows a intruder to gain unauthorized access to protected information.

The vulnerability of the portal/patient/machineconfig.php component of the software for managing medical organizations OpenEMR is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gai...

8.5CVSS7.5AI score0.01183EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.8 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores relates to access control errors, which allow unauthorized users to gain unauthorized access to protected data.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected data...

6.4CVSS5.5AI score0.01897EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:0 a.m.8 views

The vulnerability of the Symfony software platform for developing and managing web applications relates to information disclosure, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Symfony software platform for developing and managing web applications is related to the exposure of sensitive information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.01712EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.4 views

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel is related to errors in processing certain AMP packets. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

6.5CVSS6.7AI score0.01167EPSS
SaveExploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/16 12:0 a.m.7 views

The vulnerability of the do_hidp_sock_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the dohidpsockioctl function in the Linux kernel’s net/bluetooth/hidp/sock.c file is related to the lack of measures to sanitize input data. Exploiting this vulnerability could allow an attacker to disclose protected information using the HIDPCONNADD command...

3.3CVSS6.4AI score0.00495EPSS
SaveExploits0References51Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.6 views

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the secret key DH1024...

5.9CVSS6.3AI score0.13411EPSS
SaveExploits0References29Affected Software29
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.10 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by sending specially crafted requests...

4.3CVSS5.5AI score0.00367EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder