Lucene search
K

1960 matches found

BDU FSTEC
BDU FSTEC
added 2023/04/27 12:0 a.m.1 views

The vulnerability of the SpiceDB database, related to deficiencies in the error reporting mechanism, allows an intruder to gain unauthorized access to protected information.

The vulnerability of the SpiceDB database is related to deficiencies in the mechanism for generating error reports when processing the /debug/pprof/cmdline command with the --grpc-preshared-key parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

8.7CVSS7.2AI score0.00365EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/25 12:0 a.m.4 views

PT-2023-7462

Name of the Vulnerable Software and Affected Versions VMware Workstation and Fusion affected versions not specified Description The issue is related to an out-of-bounds read that exists in the functionality for sharing host Bluetooth devices with the virtual machine. This could allow an attacker ...

6CVSS6.8AI score0.00051EPSS
Exploits0References35
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.2 views

The vulnerability of Omron CS/CJ automation controllers, related to the lack of authentication for critical functions, allows attackers to gain access to protected information.

The vulnerability of Omron CS/CJ automation controllers lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

7.8CVSS7.2AI score0.00173EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.1 views

Vulnerabilities of operating systems iOS and iPadOS, related to lack of access control, allow attackers to gain unauthorized access to protected information.

The vulnerabilities of operating systems iOS and iPadOS are related to lack of access control. Exploiting these vulnerabilities can allow attackers to gain unauthorized access to protected information through special features...

4.9CVSS5.4AI score0.00165EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.1 views

The vulnerability of the CLFS log system driver for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CLFS log system driver in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.02281EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.2 views

The vulnerability of the Network File System (NFS) of Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Network File System NFS of Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

7.8CVSS7.3AI score0.13319EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.1 views

The vulnerability of Microsoft SharePoint Server software allows a perpetrator to compromise the integrity of protected information.

The vulnerability of Microsoft SharePoint Server packages is related to insufficient testing of requests on the server side. Exploiting this vulnerability allows a malicious actor to affect the integrity of protected information through a specially crafted HTTP request...

6.8CVSS7.2AI score0.09091EPSS
Exploits3References2
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.1 views

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in the incorrect restriction on the path to the restricted-access catalog, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.00272EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.1 views

The vulnerability of the Swarm Mode mode of the dockerd daemon in the software for creating containerized systems like Moby and the Mirantis Container Runtime environment allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Swarm Mode mode of the dockerd daemon, a software tool for creating containerized systems like Moby and the Mirantis Container Runtime environment, is related to the use of an unprotected alternative channel. Exploiting this vulnerability allows an attacker to compromise...

6.8CVSS6.9AI score0.00771EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.1 views

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in its report-generation mechanism’s deficiencies, which allows attackers to gain unauthorized access to protected information.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server relates to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS5.5AI score0.0024EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.1 views

The vulnerability of D-Link DIR-882 wireless router’s microprogramming software allows a hacker to disclose protected information.

The vulnerability of the Syslog component in D-Link DIR-882 wireless routers relates to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

3.5CVSS7.1AI score0.0094EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/10 12:0 a.m.1 views

The vulnerability in the built-in screenshot editor of Android operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the built-in screenshot editor in Android operating systems is related to an incorrect file saving procedure after editing and replacing the original file. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected...

9.7CVSS6.6AI score0.00266EPSS
Exploits2References6
BDU FSTEC
BDU FSTEC
added 2023/04/07 12:0 a.m.1 views

The vulnerability of the FedCM component in the Google Chrome browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the FedCM component in the Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through...

7.5CVSS6.7AI score0.00044EPSS
Exploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:0 a.m.1 views

The vulnerability of the Resource Timing application programming interface in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Resource Timing application programming interface in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS5.8AI score0.00177EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/04/03 12:0 a.m.1 views

The vulnerability of the Linux operating system’s NFS (Network File System) kernel allows a hacker to gain access to protected information or cause service failures.

The vulnerability of the Linux operating system’s Network File System kernel relates to the reutilization of previously released memory. Exploiting this vulnerability can allow an attacker to gain access to protected information or cause service failures...

7.1CVSS6.4AI score0.00017EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/04/02 12:0 a.m.1 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in errors in XML request processing, which allow attackers to gain unauthorized access to protected information.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to errors in processing XML requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.04774EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/02 12:0 a.m.1 views

The vulnerability of the `ib_copy_ah_attr_to_user()` function in Linux operating system-based connection managers allows a hacker to gain unauthorized access to protected information.

The vulnerability of the ibcopyahattrtouser function in Linux operating system-based networking managers is related to insufficient protection of sensitive data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

3.3CVSS6.6AI score0.00016EPSS
Exploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/26 12:0 a.m.2 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the use of a weak encryption mechanism, which allows attackers to disclose protected information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the use of a weak encryption mechanism. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

5.3CVSS5.8AI score0.00222EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/26 12:0 a.m.1 views

The vulnerability of the Mozilla Firefox browser, related to errors in processing hypertext links, allows a hacker to convert a URL address into a local path and gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to errors in processing hypertext links. Exploiting this vulnerability allows an attacker to convert a URL address into a local path and gain unauthorized access to protected information...

6.4CVSS6.7AI score0.00278EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:0 a.m.1 views

The vulnerability of the administration interface of the Fortinet FortiSOAR software for coordinating the operation of cybersecurity systems and for managing real-time incident responses allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the administration interface of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker,...

7.5CVSS7.1AI score0.00104EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder