Lucene search
+L

5760 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/14 12:00 a.m.9 views

The vulnerability in browser extensions for Safari on operating systems macOS, iOS, iPadOS, and visionOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Safari browser extensions on macOS, iOS, iPadOS, and VisionOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS5.5AI score0.00248EPSS
SaveExploits0References5Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/12 12:00 a.m.14 views

The vulnerability of the Adobe XMP-Toolkit-SDK software, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to circumvent the ASLR protection mechanism and gain unauthorized access to protected information.

The vulnerability of the Adobe XMP-Toolkit-SDK lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism and gain unauthorized access to protected information...

5.5CVSS5.8AI score0.00235EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/11 12:00 a.m.10 views

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from insufficient validation of input data. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS7.6AI score0.00632EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/11 12:00 a.m.15 views

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to insufficient access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

6.8CVSS7.6AI score0.0317EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.11 views

The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.

The vulnerability of Windows operating system’s Cryptographic Services is related to the use of a cryptographic primitive with a risky implementation. Exploiting this vulnerability could allow an attacker to disclose the protected information...

5.5CVSS7.5AI score0.00463EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.11 views

The vulnerability of the Rack::Static class in the module interface between web servers and Rack web applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Rack::Static module interface between web servers and Rack web applications is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.01131EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.9 views

The vulnerability of the Primo RPA Orchestrator module of the Primo RPA automation platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Primo RPA Orchestrator module of the Primo RPA automation platform lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.14 views

The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS7.9AI score0.00793EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.13 views

The vulnerability of the Microsoft Outlook for Android client, related to insufficient protection of administrative data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Outlook for Android client is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.6AI score0.01409EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.12 views

The vulnerability of the NTFS file system of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

6.8CVSS7.6AI score0.02947EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.15 views

The vulnerability of the Power Dependency Coordinator component in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the Power Dependency Coordinator component in the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

5.5CVSS7.5AI score0.00849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.17 views

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

10CVSS5.8AI score0.0029EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.11 views

The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS8AI score0.00308EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.17 views

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to incorrect authorization, allows a violator to disclose protected information.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to improper authorization. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

5.3CVSS5.8AI score0.00274EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.13 views

The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9.1CVSS8AI score0.20264EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.12 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity and accessibility of protected information...

8.5CVSS5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/04/08 12:00 a.m.10 views

The vulnerability of the driver_override_show() function in the Linux operating system’s kernel drivers (drivers/cdx/cdx.c) allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the driveroverrideshow function in the Linux operating system’s drivers/cdx/cdx.c file relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS7.1AI score0.00194EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.11 views

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthoriz...

7.8CVSS7.2AI score0.23442EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.12 views

The vulnerability of the Jenkins automation server plugin Asakusa Satellite lies in the lack of password masking, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server plugin Asakusa Satellite is related to the absence of password masking. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

6.5CVSS5.5AI score0.00276EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.12 views

The vulnerability of the IntelliJ IDEA integrated development environment, related to the disclosure of information in the log file, allows attackers to gain unauthorized access to protected information.

The vulnerability of the IntelliJ IDEA integrated development environment is related to the disclosure of information in the idea.log log file. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.00413EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder