Lucene search
K

1963 matches found

BDU FSTEC
BDU FSTEC
added 2018/08/10 12:0 a.m.4 views

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Monitoring and Diagnostics component of the JD Edwards EnterpriseOne Tools system is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

7.5CVSS7.8AI score0.02766EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/10 12:0 a.m.4 views

The vulnerability of the Print Server component in the business application for managing and distributing information to customers, known as One-to-One Fulfillment, allows a malicious actor to gain unauthorized access to protected data.

The vulnerability of the Print Server component in the business application for managing and distributing information to customers, known as One-to-One Fulfillment, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to ga...

8.2CVSS7.8AI score0.02024EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/03 12:0 a.m.5 views

The vulnerability of Oracle Marketing’s User Interface component allows a hacker to gain unauthorized access to protected data.

The vulnerability of Oracle Marketing’s User Interface component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

8.2CVSS7.8AI score0.02024EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/03 12:0 a.m.4 views

The vulnerability of the User Interface component of the Trade Management business platform allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the User Interface component of the Trade Management business platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected data using the HTTP protocol...

8.2CVSS7.8AI score0.02024EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/07/19 12:0 a.m.3 views

The vulnerability of Qualcomm Audio component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm Audio component in the Android operating system arises from insufficient validation of input data during the playback of WMA files. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

10CVSS5.5AI score0.01252EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/07/19 12:0 a.m.3 views

The vulnerability of the tz_assign() function in the Qualcomm Trusted Execution Environment component of the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tzassign function in the Qualcomm Trusted Execution Environment for Android operating systems arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, an...

10CVSS5.8AI score0.01323EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/07/12 12:0 a.m.3 views

The vulnerability of Mozilla Firefox’s toolbars allows a hacker to gain unauthorized access to protected information.

The vulnerability of Mozilla Firefox’s developer tools is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.5CVSS7.7AI score0.02012EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2018/07/05 12:0 a.m.4 views

The vulnerability of the Qualcomm Radio Interface Layer component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm Radio Interface Layer component in the Android operating system is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of protected...

10CVSS5.5AI score0.01323EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/07/05 12:0 a.m.5 views

The vulnerability of the Qualcomm Trusted Execution Environment component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Qualcomm Trusted Execution Environment in the Android operating system is related to improper verification of the ECDSA cryptographic signature. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

10CVSS5.6AI score0.00953EPSS
Exploits0References3
OSV
OSV
added 2018/06/11 9:29 p.m.3 views

CVE-2018-5132

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox 59...

6.5CVSS7.3AI score
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.3 views

The vulnerability of the Qualcomm QTEE API in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Qualcomm QTEE API in the Android operating system is related to errors in handling array indexes. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.5AI score0.01269EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.4 views

The vulnerability of the Qualcomm Video Parser component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm Video Parser component in the Android operating system arises due to buffer overflow. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6AI score0.01372EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.4 views

The vulnerability of the Qualcomm operating system Android allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.8AI score0.01269EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.4 views

The vulnerability of the Qualcomm VT Call Handler component in the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm VT Call Handler component in the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information during VT calls...

10CVSS5.6AI score0.01439EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/04/12 12:0 a.m.3 views

The vulnerability of the Linux operating system’s kernel (fs/userfaultfd.c), related to memory usage after it is freed, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel fs/userfaultfd.c is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information through the use of the...

9.3CVSS7.2AI score0.04102EPSS
Exploits0References14Affected Software1
OSV
OSV
added 2018/03/14 12:0 a.m.1 views

UBUNTU-CVE-2018-5132

The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a malicious WebExtension to search for otherwise protected data if a user has it open. This vulnerability affects Firefox 59...

6.5CVSS7AI score0.01489EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2018/02/08 12:0 a.m.3 views

The vulnerability of the Media Framework component of the Android operating system, which allows for the disclosure of protected information

The vulnerability of the Media Framework component decoder/impeg2ddechdr.c in the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

9.1CVSS7.7AI score0.00483EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/12/21 12:0 a.m.4 views

The vulnerability in the component of libsvn_fs_fs/fs_fs.c of the Subversion version control system allows a attacker to disclose protected information or cause service failures.

The vulnerability in the libsvnfsfs/fsfs.c component of the Subversion version control system exists due to improper access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to damaged repositories of FSFS FileSystem atop the FileSystem or caus...

8.8CVSS7.6AI score0.02824EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/11/23 12:0 a.m.5 views

The vulnerability of the Redmine.pm web application for managing projects and tasks allows a perpetrator to gain access to protected information or exert other effects.

The vulnerability of the Redmine.pm web application for managing projects and tasks in Redmine is related to the lack of verification of the “Repository” module in project settings. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain access to protected...

7.5CVSS7.2AI score0.01288EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.2 views

The vulnerability of PlayReady DRM component in the Android operating system from the CAF repository, which allows a violator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of PlayReady DRM on the Android operating system, identified from the CAF repository, is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.2AI score0.00904EPSS
Exploits0References3
Rows per page
Query Builder