Lucene search
K

1963 matches found

Positive Technologies
Positive Technologies
added 2021/09/26 12:0 a.m.2 views

PT-2021-6167 · NetGear · Netgear Rbk352 +1

Name of the Vulnerable Software and Affected Versions: NETGEAR RBK352 versions prior to 4.4.0.10 NETGEAR RBR350 versions prior to 4.4.0.10 NETGEAR RBS350 versions prior to 4.4.0.10 Description: The issue is related to the lack of protection for service data in the embedded software of NETGEAR...

7.8CVSS7.4AI score0.01365EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.3 views

The vulnerability in the implementation of the Net::FTP class in the Ruby interpreter allows a hacker to gain unauthorized access to protected information.

The vulnerability in the implementation of the Net::FTP class in Ruby is related to deficiencies in protecting service data using the PASV command. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS6.3AI score0.0305EPSS
Exploits1References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/09/17 12:0 a.m.3 views

The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System allows an attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the index.php/appointment/todos component of the Chikitsa Patient Management System exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected...

5.4CVSS5.9AI score0.00618EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:0 a.m.3 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to memory management after it is released. These vulnerabilities allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is released. Exploiting the...

7.3CVSS7.2AI score0.52299EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/09/14 12:0 a.m.3 views

PT-2021-6282 · Microsoft · Windows Redirected Drive Buffering Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Redirected Drive Buffering SubSystem RDBSS affected versions not specified Description: The issue is related to information disclosure in the Windows Redirected Drive Buffering SubSystem RDBSS of the Microsoft Windows operating system...

5.5CVSS5.5AI score0.0074EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.3 views

The vulnerability of the Expression Engine content management system exists due to insufficient verification of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Expression Engine content management system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.01361EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.2 views

The vulnerability of the SegmentAssignmentController.php component of the data management and customer interaction software in the Pimcore Customer Data Framework allows a malicious actor to disclose protected information.

The vulnerability of the SegmentAssignmentController.php component of the data management and customer interaction software in the Pimcore Customer Data Framework is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...

7.5CVSS7.5AI score0.01225EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/07 12:0 a.m.2 views

Microsoft Edge browser vulnerability, related to the disclosure of information, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5CVSS5.8AI score0.05618EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2021/09/03 12:0 a.m.1 views

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2017/Adobe Acrobat Reader 2017 arises due to an operation that goes beyond the buffer in memory, allowing attackers to disclose protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 arises due to an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious...

7.8CVSS7.6AI score0.03207EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/09/02 12:0 a.m.1 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

7.8CVSS7.4AI score0.03252EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/09/01 12:0 a.m.5 views

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software lies in its ability to read data beyond the buffer boundaries, allowing an attacker to disclose protected information.

The vulnerability of the Adobe DNG Software Development Kit’s file reading and writing software relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

7.5CVSS7.4AI score0.03474EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/01 12:0 a.m.2 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer limit in memory. Exploiting these vulnerabilities can allow an attacker to gain...

7.5CVSS7.7AI score0.03207EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/09/01 12:0 a.m.2 views

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer limit in memory. Exploiting these vulnerabilities can allow an attacker to gain...

7.5CVSS7.7AI score0.03207EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/09/01 12:0 a.m.3 views

The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.3AI score0.97502EPSS
Exploits2References4
BDU FSTEC
BDU FSTEC
added 2021/08/26 12:0 a.m.2 views

The vulnerability of the ColdFusion software platform, related to the disclosure of information, allows attackers to gain unauthorized access to protected data.

The vulnerability of the ColdFusion software platform is related to the exposure of information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.07352EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.2 views

The vulnerability of the FortiMail IBE (Identity-Based Encryption) service of the FortiMail email protection system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of FortiMail IBE’s Identity-Based Encryption service in the email protection system is related to errors in the code of the pseudorandom number generator. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected informatio...

7.8CVSS5.5AI score0.00284EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/19 12:0 a.m.2 views

The vulnerability of the S/MIME protocol implementation in the Thunderbird email client allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the S/MIME protocol implementation in Thunderbird’s email client is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.4AI score0.01798EPSS
Exploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/08/19 12:0 a.m.1 views

The vulnerability of the Thunderbird email client, related to the disclosure of information, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Thunderbird email client is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through the src attribute...

7.8CVSS7.4AI score0.0198EPSS
Exploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/08/19 12:0 a.m.2 views

The vulnerability of the Thunderbird email client, related to the lack of encryption measures for protected data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Thunderbird email client is related to the lack of encryption measures for protected data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.1AI score0.01558EPSS
Exploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is released. These vulnerabilities allow attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to gain...

7.5CVSS7.5AI score0.04477EPSS
Exploits0References4
Rows per page
Query Builder