Lucene search
+L

5761 matches found

BDU FSTEC
BDU FSTEC
added 2023/10/13 12:00 a.m.12 views

The vulnerability of Google Chrome’s Autofill function allows attackers to exploit it to disclose protected information.

The vulnerability of Google Chrome’s Autofill function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...

7.8CVSS5.4AI score0.00773EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:00 a.m.17 views

The vulnerability of the WordPad text editor on the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the WordPad text editor on the Windows operating system is related to the disclosure of NTLM passwords. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

7.8CVSS7.4AI score0.20719EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/10/11 12:00 a.m.13 views

The vulnerability in the fs/ntfs.c component of the Grub2 operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the fs/ntfs.c component of the Grub2 operating system’s loader is related to memory-walking attacks. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.3CVSS6.4AI score0.00496EPSS
SaveExploits1References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.14 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00157EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.11 views

The vulnerability of the Accessibility component in operating systems like iPadOS, iOS, and macOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Accessibility component in iPadOS, iOS, and macOS is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

3.3CVSS6.4AI score0.00209EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.11 views

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

5.5CVSS5.3AI score0.00168EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/10/10 12:00 a.m.5 views

PT-2023-6059 · Microsoft · Windows Power Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows Power Management Service affected versions not specified Description: The issue is related to a lack of protection for service data in the Windows Power Management Service, which can be exploited to disclose protected information. Thi...

5.5CVSS9AI score0.00549EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2023/10/10 12:00 a.m.10 views

The vulnerability of the SCADA system SCADA Data Gateway (SDG) arises from the use of pre-set account data, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the SCADA system SCADA Data Gateway SDG is related to the use of pre-set credentials. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.12 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing functionality lies in the issue of operations going beyond the buffer in memory during the processing of EMF files. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.00411EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.15 views

The vulnerability of the Jenkins Maven Artifact ChoiceListProvider plugin in Nexus, related to insufficient protection of registration data, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Jenkins Maven Artifact ChoiceListProvider plugin Nexus is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS6.5AI score0.00672EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/09 12:00 a.m.13 views

The vulnerability of the readFileIntoStream method in the PDF-XChange Editor software allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the readFileIntoStream method in the PDF-XChange Editor PDF document viewing and editing software is related to the use of a initially dangerous function. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.0038EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/04 12:00 a.m.8 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the disclosure of protected information, allows attackers to disclose such information.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to the disclosure of protected information. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

7.8CVSS6.8AI score0.01043EPSS
SaveExploits0References14Affected Software12
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:00 a.m.13 views

The vulnerability of component xrdp_painter.c in the XRDP server allows a attacker to access protected information.

The vulnerability of the xrdppainter.c component in the XRDP server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to gain access to protected information...

5.5CVSS6.6AI score0.00636EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:00 a.m.9 views

The vulnerability of Zoom’s video conferencing software lies in the insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Zoom’s video conferencing software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

8.5CVSS7.4AI score0.0096EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:00 a.m.11 views

The vulnerability of the DDMP module of the EMUI operating system of HarmonyOS allows a hacker to disclose protected information.

The vulnerability of the DDMP module of the EMUI operating system of HarmonyOS is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

7.8CVSS7.1AI score0.00337EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/27 12:00 a.m.15 views

The vulnerability of the Web page rendering module in WebKit browsers of Safari, as well as in iOS and iPadOS operating systems, allows attackers to compromise the privacy, integrity, and accessibility of protected information.

The vulnerability of the Web page rendering module in Safari browsers and iOS/iPadOS operating systems is related to insufficient checking of unusual or exceptional states during the processing of web content. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

10CVSS7.7AI score0.29179EPSS
SaveExploits3References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:00 a.m.11 views

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data, allowing attackers to gain access to protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

4.3CVSS5.5AI score0.00527EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:00 a.m.12 views

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data, which allows attackers to disclose protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

5.3CVSS5.9AI score0.00509EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:00 a.m.8 views

The vulnerability of the Docker Desktop platform for developing and delivering container applications relates to the exposure of protected information, which allows a malicious actor to obtain access tokens.

The vulnerability of the Docker Desktop platform for developing and delivering container applications is related to the exposure of protected information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain access tokens through a specially created URL addre...

10CVSS6.6AI score0.00683EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:00 a.m.10 views

The vulnerability of the OpenEMR software for managing medical organizations is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder to view, modify, and delete protected information.

The vulnerability of the software for managing medical organizations like OpenEMR is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to remotely view, modify, and delete protected information...

5.5CVSS6.5AI score0.00447EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder