Lucene search
+L

2006 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.17 views

The vulnerability of the order formatting module of the Magento Commerce software platform, which is used for developing and managing online stores, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the order processing module of the Magento Commerce software platform for developing and managing online stores is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

5.3CVSS6.3AI score0.03951EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:0 a.m.9 views

The vulnerability of Windows Mobile Device Management for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Windows Mobile Device Management for Windows operating systems lies in the lack of protection for mission-critical data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

6.2CVSS6.2AI score0.02745EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:0 a.m.8 views

The vulnerability in the implementation of the FILE_UPLOAD_DIRECTORY_PERMISSIONS mode of the Django software platform allows a perpetrator to disclose protected information.

The vulnerability of the Django web application development framework’s FILEUPLOADDIRECTORYPERMISSIONS implementation is related to incorrect default access rights settings. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

7.8CVSS7.1AI score0.03969EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:0 a.m.5 views

The vulnerability of Intel Ethernet E810 series network adapter drivers allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel Ethernet E810 series network adapter drivers is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS6.7AI score0.00345EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/19 12:0 a.m.9 views

The vulnerability of the web-socket technology implementation in Google Chrome’s web browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Google Chrome web browser’s web socket technology lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.3CVSS7.6AI score0.09458EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.6 views

The vulnerability of the Java Management Extensions (JMX) extension in the Apache Camel framework allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Java Management Extensions JMX in the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.8CVSS6.6AI score0.14331EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.9 views

The vulnerability of Java-Framework templates in the Apache Camel framework allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Java-Framework templates in the Apache Camel framework lies in insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

7.8CVSS7.4AI score0.04491EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.6 views

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process of software products allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker, operating remotely, t...

7.8CVSS7.3AI score0.08235EPSS
SaveExploits0References13Affected Software20
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.8 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.5AI score0.01296EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:0 a.m.9 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.8CVSS7.4AI score0.03474EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.7 views

The vulnerability of the Dialog Box component of the application’s technical maintenance, repair, and major equipment overhauls allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete data permissions.

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.2CVSS7.7AI score0.01255EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.9 views

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete privileges over that information.

The vulnerability of the Print Server component of the Oracle One-to-One Fulfillment application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or...

8.2CVSS7.7AI score0.01169EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.7 views

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system, which allows a perpetrator to gain unauthorized access to protected information or to read, add, or delete data.

The vulnerability of the Preferences component of the Oracle CRM Technical Foundation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or delet...

8.2CVSS7.7AI score0.01179EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.8 views

The vulnerability of the Web interface component of the Oracle iStore system, a system for creating, managing, and personalizing online stores, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web interface component of the Oracle iStore system for creating, managing, and personalizing e-commerce stores is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information using t...

5.3CVSS6.6AI score0.012EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.7 views

The vulnerability of the Dialog Box component of the application’s technical maintenance, repair, and major equipment overhauls allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete privileges over the data.

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.2CVSS7.7AI score0.01255EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.6 views

The vulnerability of the components of Oracle Retail Customer Management and Segmentation Foundation’s software for internal operations allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Internal Operations components of Oracle Retail Customer Management and Segmentation Foundation software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause servi...

6.5CVSS6.9AI score0.00871EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.7 views

The vulnerability of the VMware SD-WAN Orchestrator management platform, related to the failure to implement security measures for SQL query structures, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the VMware SD-WAN Orchestrator management platform is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS7AI score0.0114EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.8 views

The vulnerability of the Windows Docker application for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Docker application for Windows operating systems relates to the disclosure of information. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

5CVSS6.1AI score0.07274EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:0 a.m.7 views

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6CVSS6.6AI score0.00999EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.8 views

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface of Mozilla Firefox allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface in Mozilla Firefox’s browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

5.3CVSS6.8AI score0.01415EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder