Lucene search
+L

5843 matches found

BDU FSTEC
BDU FSTEC
added 2019/08/13 12:00 a.m.19 views

The vulnerability of Google Chrome’s browser-specific page extraction method allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Google Chrome web browser’s page extraction mechanism is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially...

10CVSS7.8AI score0.01009EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/08/06 12:00 a.m.18 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

6.5CVSS7.8AI score0.00463EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:00 a.m.11 views

The vulnerability of the application control tool: Windows Defender Application Control (WDAC), a PowerShell Core-based automation tool for application management, allows attackers to bypass the PowerShell Core Constrained Language Mode and compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core-based automation tool, is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass PowerShell Core’s Constrained Language Mode and compromis...

6.4CVSS5.5AI score0.011EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:00 a.m.10 views

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.01742EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:00 a.m.10 views

The vulnerabilities of Microsoft Exchange Server, Microsoft Lync and Skype for Business messaging programs, Microsoft Outlook and Outlook for iOS email clients, as well as Microsoft Office and Office 365 software packages, are related to the lack of protection for mission-critical data. This makes it possible for attackers to disclose protected information.

The vulnerabilities of Microsoft Exchange Server, Microsoft Lync and Skype for Business messaging applications, Microsoft Outlook and Outlook for iOS email clients, as well as Microsoft Office and Office 365 software packages are related to the lack of data protection measures. Exploiting these...

3.5CVSS5.5AI score0.05328EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/23 12:00 a.m.12 views

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows attackers to gain access to protected information.

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...

5.3CVSS5.5AI score0.41657EPSS
SaveExploits1References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:00 a.m.13 views

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS5.5AI score0.02646EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:00 a.m.8 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.06728EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:00 a.m.27 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.06728EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:00 a.m.13 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.06786EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/18 12:00 a.m.13 views

The vulnerability of RDP clients on Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of RDP clients on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information through a specially created application...

7.8CVSS5.5AI score0.10713EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2019/07/16 12:00 a.m.13 views

The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems is related to permission handling errors when copying files using GFILECOPYALLMETADATA from admin:// to file:// URIs. Exploiting this vulnerability allows an...

10CVSS5.5AI score0.01834EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:00 a.m.12 views

The vulnerability of Microsoft Edge’s Mark of the Web Tagging (MOTW) mechanism allows attackers to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mark of the Web Tagging MOTW mechanism in Microsoft Edge browser relates to bypassing security features. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and compromise the confidentiality, integrity, and accessibility of...

5.1CVSS5.5AI score0.01604EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:00 a.m.11 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially craft...

6.5CVSS5.5AI score0.05406EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:00 a.m.11 views

The vulnerability of the Slurm resource manager, related to deficiencies in access control, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Slurm resource manager is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS5.5AI score0.02332EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:00 a.m.11 views

The vulnerability of browsers Internet Explorer and Microsoft Edge, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to errors in memory object handling. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted web page...

6.5CVSS5.5AI score0.02335EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:00 a.m.8 views

The vulnerability of the Remote Logging component of the McAfee Agent antivirus software allows a hacker to disclose protected information.

The vulnerability of the Remote Logging component of the McAfee Agent antivirus software is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

7.8CVSS5.5AI score0.01822EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:00 a.m.11 views

The vulnerability of the HTTP API component of the Cisco Enterprise Chat and Email messaging service allows a perpetrator to disclose protected information.

The vulnerability of the HTTP API component of the Cisco Enterprise Chat and Email messaging service is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose protected information by sending a specially...

7.8CVSS5.5AI score0.01437EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:00 a.m.11 views

The vulnerability of the Intel Data Center Manager SDK, related to access control deficiencies, allows a perpetrator to disclose protected information.

The vulnerability of the Intel Data Center Manager SDK development tools is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these tools...

5.5CVSS5.4AI score0.00408EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:00 a.m.10 views

The vulnerability of the Intel Data Center Manager SDK software development tools, related to access control deficiencies, allows a perpetrator to disclose protected information.

The vulnerability of the Intel Data Center Manager SDK development tools is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by these tools...

3.3CVSS5.4AI score0.00408EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder