Lucene search
+L

5843 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/10 12:00 a.m.10 views

The vulnerability of VMnetDHCP hypervisors in VMware Workstation and VMware Fusion allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of VMnetDHCP hypervisors in VMware Workstation and VMware Fusion lies in the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.7CVSS7.2AI score0.01152EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/10 12:00 a.m.12 views

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Cortana’s voice assistant in Windows 10 Mobile operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a locked screen...

6.8CVSS6.7AI score0.00926EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.9 views

The vulnerability of the Windows Modules Installer Service component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Modules Installer Service component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.4AI score0.01629EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.9 views

The vulnerability of Google Chrome’s ServiceWorker component, which allows a hacker to disclose protected information

The vulnerability of Google Chrome’s ServiceWorker component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

7.1CVSS7.1AI score0.00787EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.9 views

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Identity Services Engine ISE network policy management web interface is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by...

5CVSS5.5AI score0.01221EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.15 views

The vulnerability of the V8 component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the V8 component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using a specially created PDF file...

7.1CVSS7.3AI score0.00833EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.11 views

The vulnerability of the Google Chrome browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of the Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a hacker to disclose the protected information...

5.5CVSS6.8AI score0.004EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.10 views

The vulnerability in the implementation of the CORS mechanism for the Google Chrome browser allows a hacker to disclose protected information.

The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

6.5CVSS7.1AI score0.00867EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.16 views

The vulnerability of the Open Enclave SDK, a software development tool, is related to an object processing error in memory, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Open Enclave SDK software development tools is related to an object processing error in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.01447EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.11 views

The vulnerability of the Windows Servicing Stack component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Servicing Stack component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.2AI score0.01452EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.10 views

The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.01659EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.9 views

The vulnerability of the Windows GDI component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

6.5CVSS6.1AI score0.75859EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.9 views

The vulnerability of the CLI component of Cisco Wireless LAN Controller (WLC) software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.6AI score0.0065EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.7 views

The vulnerability of the DefaultServlet component of the Jetty HTTP server allows a attacker to gain unauthorized access to protected information.

The vulnerability of the DefaultServlet component in the Jetty HTTP server is related to errors in error handling when incorrect requests are used. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by displaying the InvalidPathException message,...

5.3CVSS6.4AI score0.04328EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.14 views

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.02365EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.7 views

The vulnerability of the NSS libraries, related to errors in value generation during the processing of the ClientHello request, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NSS libraries is related to errors in value generation during the processing of the ClientHello request. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.9CVSS6.2AI score0.01496EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.15 views

The vulnerability of Google Chrome’s swiftshader library allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Swiftshader library arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.3AI score0.00902EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.12 views

The vulnerability of the ActiveX Installer component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ActiveX Installer component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.5AI score0.01151EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the libcurl library, related to insufficient protection of registration data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the libcurl library is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.5CVSS6.7AI score0.08031EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.7 views

The vulnerability in the security.http.utils component of the Symfony software development and web application management platform allows attackers to carry out phishing attacks and gain access to protected information.

The vulnerability of the security.http.utils component of the Symfony software development and management platform involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows attackers to conduct phishing attacks remotely and gain access to protected information using...

6.4CVSS6.8AI score0.01139EPSS
SaveExploits0References8Affected Software3
Rows per page
Query Builder