Lucene search
K

1963 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.2 views

The vulnerability of the Windows Push Notification Service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Push Notification Service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.2AI score0.01277EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/19 12:0 a.m.5 views

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.2AI score0.01294EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.2 views

The vulnerability of the Media Foundation component in Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Media Foundation component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created file or website...

5.5CVSS6.2AI score0.06488EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.2 views

The vulnerability of the Media Foundation component in Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Media Foundation component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created file or website...

5.5CVSS6.2AI score0.06488EPSS
Exploits0References3
NVD
NVD
added 2020/05/14 9:15 p.m.23 views

CVE-2020-0104

In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS5.1AI score0.00167EPSS
Exploits0References1
Prion
Prion
added 2020/05/14 9:15 p.m.12 views

Information disclosure

In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

2.1CVSS5.6AI score0.00167EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:0 a.m.2 views

Vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for enterprise automation, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the...

5.3CVSS6.3AI score0.01197EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.3 views

The vulnerability of Google Chrome, related to writing beyond the buffer of memory, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the writing beyond the buffer of the memory buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.5AI score0.0184EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.2 views

The vulnerability of Google Chrome, related to writing beyond the buffer of memory, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the writing beyond the buffer of the memory buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.5AI score0.0157EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.3 views

The vulnerability of Google Chrome’s browser, related to memory usage after deallocation, allows attackers to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.4AI score0.0197EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.4 views

The vulnerability of Google Chrome’s browser, related to access to resources using incompatible types, allows attackers to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to access to a resource using an incompatible type. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HT...

9.3CVSS7.3AI score0.01947EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:0 a.m.2 views

The vulnerability of the RADIUS server FreeRADIUS, related to incorrect authentication, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the RADIUS-server FreeRADIUS is related to incorrect authentication processes. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

10CVSS7.1AI score0.07624EPSS
Exploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.3 views

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.3CVSS5.9AI score0.01106EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.4 views

The vulnerability of Huawei’s microprogrammed router software arises from insufficient validation of input data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Huawei’s microprogrammed router software exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.00764EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.2 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created document or a...

5.5CVSS6.1AI score0.06136EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.1 views

The vulnerability of the Network Connections Service in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Network Connections Service in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS5.9AI score0.01396EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.4 views

The vulnerability of the Windows Common Log File System (CLFS) driver in the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows Common Log File System CLFS driver in the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.6AI score0.01454EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.1 views

The vulnerability of the xsltNumberFormatDecimal function in the libxslt library allows a hacker to gain unauthorized access to protected information.

The vulnerability of the xsltNumberFormatDecimal function in the libxslt library exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS6.5AI score0.05147EPSS
Exploits0References19Affected Software13
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.3 views

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS6.2AI score0.01614EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.2 views

The vulnerability of the i2c_ddc functions in the QEMU hardware emulation software allows a hacker to disclose protected information.

The vulnerability of the i2cddc function hw/i2c/i2c-ddc.c in the QEMU hardware emulation software is related to reading data beyond the buffer limit 128 bytes of stack memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security...

5.5CVSS6.6AI score0.00433EPSS
Exploits0References9Affected Software5
Rows per page
Query Builder