Lucene search
+L

1994 matches found

BDU FSTEC
BDU FSTEC
added 2020/01/15 12:0 a.m.6 views

The vulnerability of the SAP Diagnostic Agent, related to the lack of protection for operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP Diagnostic Agent lies in the lack of protection for operational data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted query...

4.3CVSS5.5AI score0.00704EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/01/15 12:0 a.m.5 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow an attacker to...

7.5CVSS7.4AI score0.02893EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/01/13 12:0 a.m.7 views

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, is related to incorrect session duration settings, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware ESXi hypervisor, is related to incorrect session duration settings. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protecte...

6.4CVSS6.6AI score0.00967EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/01/08 12:0 a.m.7 views

The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system allows a intruder to disclose protected information.

The vulnerability of the Huawei Share file sharing function in the mobile phone Huawei P20’s microprogramming system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information throug...

7.8CVSS5.9AI score0.00526EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/26 12:0 a.m.8 views

The vulnerability of the XMLFileLookupService component in the Apache NiFi data processing platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the XMLFileLookupService component in the Apache NiFi data processing platform is related to an incorrect limitation on XML references to external objects. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...

6.8CVSS6.9AI score0.02258EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:0 a.m.6 views

The vulnerability of the file_copy_fallback() function in the Glib library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the filecopyfallback function in the Glib library is related to incorrect handling of permissions. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...

10CVSS6.5AI score0.02602EPSS
SaveExploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:0 a.m.7 views

The vulnerability of Microsoft Graphics Components in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.7AI score0.0645EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.10 views

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially create...

5CVSS7.1AI score0.00905EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.9 views

The vulnerability of the Blink component in Google Chrome browser allows a hacker to disclose protected information.

The vulnerability of the Blink component in Google Chrome relates to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

7.1CVSS7.1AI score0.01663EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.5 views

The vulnerability of Google Chrome’s WebAudio component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebAudio component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...

10CVSS7.7AI score0.72977EPSS
SaveExploits4References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.5 views

The vulnerability of Blink’s rendering module in Google Chrome browsers allows attackers to circumvent the no-clicking policy and disclose the protected information.

The vulnerability of Blink’s rendering module in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the no-click policy and disclose protected information through a specially created HTML page...

7.1CVSS7.1AI score0.0086EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.6 views

The vulnerability of Google Chrome’s WebRTC technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebRTC technology is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created video file...

9.3CVSS7.3AI score0.00825EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.6 views

The vulnerability of the String#unpack method in the Ruby programming language allows attackers to exploit it to disclose protected information.

The vulnerability of the Stringunpack method in the Ruby programming language is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information that is protected by this method...

7.8CVSS6.7AI score0.07825EPSS
SaveExploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of Microsoft Office packages, related to errors in information presentation by the user interface, allows an intruder to gain unauthorized access to protected information.

The vulnerability of Microsoft Office packages is related to errors in information representation by the user interface. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using a specially crafted file...

6.5CVSS5.9AI score0.02013EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.5 views

The vulnerability in the implementation of the FileSessionDataStore class for the Jetty HTTP server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FileSessionDataStore class implementation in the Jetty HTTP server is related to a configuration error in J2EE. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by managing sessions using the...

8.8CVSS7.6AI score0.02689EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially created fi...

5CVSS6.7AI score0.00868EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.8 views

The vulnerability of the Apache Thrift interface description language in Node.js allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Apache Thrift interface description language in Node.js lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.5CVSS6.7AI score0.04875EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.10 views

The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software lies in its ability to allow unlimited download of files of a dangerous type, enabling an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software is related to the unlimited download of sensitive files. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

6.5CVSS6.5AI score0.0537EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.8 views

The vulnerability of Google Chrome, related to the insecure processing of credit card data during autofilling, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome relates to the insecure processing of credit card data during automatic filling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.1AI score0.01848EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.6 views

The vulnerability of the Secure/Multipurpose Internet Mail Extentions (S/MIME) encryption function in the Thunderbird email client allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Secure/Multipurpose Internet Mail Extensions S/MIME function in the Thunderbird email client is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

7.8CVSS6.7AI score0.02396EPSS
SaveExploits0References12Affected Software6
Rows per page
Query Builder