Lucene search
+L

5843 matches found

BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.12 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

4.6CVSS6.5AI score0.00346EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.16 views

The vulnerability of the Firefox browser, related to the use of open redirection, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Firefox browser is related to the use of open redirecting. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS6.7AI score0.01274EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.12 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

6.2CVSS6.5AI score0.00349EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2019/11/21 6:15 p.m.18 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2019/11/21 5:46 p.m.25 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.4AI score0.04338EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.7 views

The vulnerability of the Security component in Java SE and Java SE Embedded software platforms allows attackers to gain unauthorized access to protected information.

The vulnerability of the Security component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through various network...

4.3CVSS6.5AI score0.03159EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.10 views

The vulnerability of the Segment component in Oracle Retail Customer Management and Segmentation Foundation software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Segment component of the Oracle Retail Customer Management and Segmentation Foundation software lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.9CVSS6.8AI score0.01373EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.11 views

The vulnerability of the <FilesMatch> component in the Apache HTTP Server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the component in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.3CVSS6.5AI score0.8572EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.10 views

The vulnerability of the OAM component in Oracle JDeveloper and ADF allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OAM component in Oracle JDeveloper and ADF is related to lack of access control. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

3.5CVSS5.8AI score0.00882EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.12 views

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to remotely gain access, enabling them to modify, add, or delete...

6.8CVSS6.9AI score0.01341EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.9 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the...

5CVSS6.9AI score0.01129EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.10 views

Vulnerability of the Server component: Security: Encryption of the Oracle MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Oracle MySQL Server’s Security: Encryption component is related to access control deficiencies. Exploiting this vulnerability may allow attackers, operating remotely, to gain unauthorized access to protected information using the MySQL protocol...

5.3CVSS6.2AI score0.02211EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.14 views

The vulnerability of the Installation sub-component of the Oracle Business Intelligence Enterprise Edition software platform, Oracle Fusion Middleware, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Installation sub-component of the Oracle Business Intelligence Enterprise Edition software platform, Oracle Fusion Middleware, is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.6CVSS7AI score0.01976EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.10 views

The vulnerability of the Microsoft SQL Server Management Studio database management system, related to the improper assignment of permissions for files, allows a perpetrator to gain access to protected information.

The vulnerability of the Microsoft SQL Server Management Studio database management system is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

6.8CVSS5.6AI score0.05311EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.9 views

The vulnerability of the eProcurement sub-component of the PeopleSoft Enterprise SCM eProcurement package from the Oracle PeopleSoft products allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the eProcurement sub-component of the PeopleSoft Enterprise SCM eProcurement package from the Oracle PeopleSoft products is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

5.3CVSS5.5AI score0.01479EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.41 views

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

8.5CVSS5.5AI score0.01494EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:00 a.m.10 views

The vulnerability of the libmedia library in the Android operating system, which allows a hacker to disclose protected information

The vulnerability of the libmedia DRM library in Android operating systems is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

7.5CVSS5.4AI score0.00412EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:00 a.m.65 views

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch allows a attacker to gain access to protected information.

The vulnerability of the Microsoft Hyper-V Network Switch virtual programmable switch in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created application...

7.8CVSS5.5AI score0.05802EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:00 a.m.12 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

6CVSS5.5AI score0.00898EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:00 a.m.11 views

The vulnerability of the Integration Broker sub-component of the PeopleSoft Enterprise PeopleTools component of the Oracle PeopleSoft Enterprise business application suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Integration Broker component of the PeopleSoft Enterprise PeopleTools business application package of Oracle PeopleSoft Enterprise is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

4.3CVSS5.5AI score0.0098EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder