Lucene search
+L

2314 matches found

BDU FSTEC
BDU FSTEC
•added 2021/07/13 12:00 a.m.•12 views

The vulnerability in the upload.php PHP form creator of Machform allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability in the upload.php PHP form builder of Machform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

6.1CVSS6.3AI score0.00685EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•13 views

The vulnerability of the portal/patient/_machine_config.php component of the software for managing medical organizations OpenEMR allows a intruder to gain unauthorized access to protected information.

The vulnerability of the portal/patient/machineconfig.php component of the software for managing medical organizations OpenEMR is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gai...

8.5CVSS7.5AI score0.01183EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•11 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores relates to access control errors, which allow unauthorized users to gain unauthorized access to protected data.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected data...

6.4CVSS5.5AI score0.01897EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•16 views

The vulnerability of the Symfony software platform for developing and managing web applications relates to information disclosure, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Symfony software platform for developing and managing web applications is related to the exposure of sensitive information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.01712EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•9 views

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Bluetooth stack implementation in the Red Hat Enterprise Linux kernel is related to errors in processing certain AMP packets. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

6.5CVSS6.7AI score0.01182EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/16 12:00 a.m.•13 views

The vulnerability of the do_hidp_sock_ioctl function in the Linux operating system’s kernel allows a hacker to disclose protected information.

The vulnerability of the dohidpsockioctl function in the Linux kernel’s net/bluetooth/hidp/sock.c file is related to the lack of measures to sanitize input data. Exploiting this vulnerability could allow an attacker to disclose protected information using the HIDPCONNADD command...

3.3CVSS6.4AI score0.00495EPSS
SaveExploits0References51Affected Software5
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•14 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the vManage web interface of the Cisco SD-WAN software-defined network is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information by sending specially crafted requests...

4.3CVSS5.5AI score0.00367EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•11 views

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the secret key DH1024...

5.9CVSS6.3AI score0.13411EPSS
SaveExploits0References29Affected Software29
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•9 views

The vulnerability of Mac OS operating systems, related to deficiencies in data protection for system data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Mac OS operating systems is related to deficiencies in data protection. Exploiting this vulnerability can allow a malicious actor, acting remotely, to gain unauthorized access to protected information...

6.5CVSS6.9AI score0.02108EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
•added 2021/06/10 12:00 a.m.•11 views

The vulnerability of the Apache Derby database management system, related to resource management errors, allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Apache Derby database management system is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or cause service failures...

9.1CVSS7.7AI score0.12173EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
•added 2021/06/10 12:00 a.m.•15 views

The vulnerability of the IBM Security Verify Access access control system, related to the insecure storage of confidential information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the IBM Security Verify Access system is related to the insecure storage of confidential information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4CVSS6.5AI score0.00268EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•12 views

The vulnerability of the Apex One and OfficeScan anti-virus software relates to the disclosure of information, which allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.03245EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•10 views

The vulnerability of the Apex One and OfficeScan anti-virus software lies in the ability to disclose information, allowing a malicious actor to gain unauthorized access to protected data.

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.03245EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•13 views

The vulnerability of the Apex One and OfficeScan anti-virus software relates to the disclosure of information, which allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.03245EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/09 12:00 a.m.•10 views

The vulnerability of the Apex One and OfficeScan anti-virus software relates to the disclosure of information, which allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the Apex One and OfficeScan antivirus software relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.03245EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•8 views

PT-2021-3286 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows Event Tracing service and involves information disclosure. It may allow an attacker to gain unauthorized access to protected information. The vulnerabili...

5.5CVSS5.1AI score0.0076EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•11 views

PT-2021-3305 · Microsoft · Windows Bind Filter Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Bind Filter Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Bind Filter Driver. It may allow an attacker to obtain unauthorized access to protected...

5.5CVSS5.2AI score0.0076EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•5 views

PT-2021-3312 · Microsoft · Windows Server For Nfs +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server for NFS affected versions not specified Description: The vulnerability is related to insufficient protection of service data in Microsoft Windows NFS server, which can allow a remote attacker to gain unauthorized acce...

7.8CVSS7.3AI score0.03659EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2021/06/07 9:47 p.m.•56 views

Reflected cross-site scripting issue in Datasette

Impact The ?trace=1 debugging feature in Datasette does not correctly escape generated HTML, resulting in a reflected cross-site scripting vulnerability. This vulnerability is particularly relevant if your Datasette installation includes authenticated features using plugins such as...

7.2CVSS0.2AI score0.0096EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/02 12:00 a.m.•13 views

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

5.5CVSS7AI score0.19842EPSS
SaveExploits0References6
Rows per page
Query Builder