Lucene search
+L

5759 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/20 12:00 a.m.20 views

The vulnerability of the Direct Memory Access (DMA) subsystem in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Direct Memory Access DMA subsystem in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.6AI score0.00462EPSS
SaveExploits1References20Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/20 12:00 a.m.15 views

The vulnerability in the `ext/standard/link_win32.c` component of the PHP interpreter allows a perpetrator to compromise data confidentiality.

The vulnerability of the ext/standard/linkwin32.c component of the PHP interpreter involves exposing protected information. Exploiting this vulnerability could allow a malicious actor to compromise data confidentiality remotely...

7.8CVSS7.2AI score0.04624EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/19 12:00 a.m.9 views

The vulnerability of the simplexml_load_file() function in the PHP interpreter allows a hacker to gain unauthorized access to protected information.

The vulnerability of the simplexmlloadfile function in the PHP interpreter is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

5.3CVSS6.8AI score0.25951EPSS
SaveExploits1References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/04/19 12:00 a.m.11 views

The vulnerability in the isolated environment of the iframe in Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a malicious actor to disclose protected information.

The vulnerability in the isolated environment of the Firefox web browser, Firefox ESR, and Thunderbird email client relates to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

5CVSS6.5AI score0.00561EPSS
SaveExploits1References13Affected Software10
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:00 a.m.10 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 involve reading data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in the reading of data beyond the buffer in memory. Exploiting thi...

3.3CVSS6.8AI score0.14701EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:00 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information using...

10CVSS8.1AI score0.13227EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.12 views

The vulnerability in the implementation of the “Google Chrome Tab Group” extension allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the “Google Chrome Tab Group” extension relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

7.8CVSS7AI score0.00888EPSS
SaveExploits1References9Affected Software5
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.6 views

PT-2022-2905 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to errors in information processing, which can allow a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment,...

6.8CVSS5.3AI score0.02362EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.7 views

PT-2022-2663 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to errors in information processing. It may allow a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment, there i...

5.5CVSS6.2AI score0.02101EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.8 views

PT-2022-2542 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows operating system, which can be exploited to gain unauthorized access to protected information. This can allow...

4.7CVSS9.3AI score0.00529EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.7 views

PT-2022-2865 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to insufficient access control to ports in the Windows DNS Server component, allowing a remote attacker to disclose protected information. This can lead to t...

6.8CVSS6.3AI score0.02348EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/04/12 12:00 a.m.4 views

PT-2022-2897 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in information processing within the Windows Hyper-V hardware virtualization system, part of the Windows operating system. This could allow a remote...

8.5CVSS8.3AI score0.03097EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/04/12 12:00 a.m.10 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to the use of a null pointer pointer, which allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of a null pointer. Exploiting these...

5.5CVSS6.6AI score0.02417EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.10 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.4AI score0.02419EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.14 views

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Unified Metadata Manager component of the Oracle Financial Services Analytical Applications Infrastructure software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

5.3CVSS6.6AI score0.01147EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.9 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.8AI score0.02362EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/08 12:00 a.m.10 views

The vulnerability of the On Premise Install component of the Oracle Communications Pricing Design Center software allows a perpetrator to disclose protected information.

The vulnerability of the On Premise Install component of the Oracle Communications Pricing Design Center exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to disclose protected information...

3.3CVSS6.6AI score0.00305EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.9 views

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7AI score0.00868EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.11 views

The vulnerability in the application programming interface for data exchange via Web Share browsers like Google Chrome and Microsoft Edge allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the application programming interface for data exchange via Web Share browsers in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...

7.6CVSS6.8AI score0.00687EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:00 a.m.10 views

The vulnerability of the Samples component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using network HTTP protocols...

7.5CVSS6.8AI score0.01731EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder