Lucene search
+L

5759 matches found

BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.14 views

The vulnerability of Microsoft Edge browsers, related to writing beyond the buffer, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Microsoft Edge relates to writing beyond the buffer. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

7.6CVSS5.8AI score0.01916EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.18 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is due to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00306EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.12 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that allows data to be written beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the execution of operations beyond the buffer in memory. Exploiting these...

7.5CVSS6.3AI score0.02812EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.9 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.8CVSS7.4AI score0.03474EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.15 views

The vulnerability of the Windows operating system’s DNS server, related to security flaws in its mechanisms, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Windows operating system’s DNS server is related to security flaws in its mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.01201EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.8 views

The vulnerability of the command-line interface of the programmatically defined Cisco SD-WAN network allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface of Cisco SD-WAN programs exists due to insufficient validation of input data in iperf. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.4AI score0.0032EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/05 12:00 a.m.9 views

The vulnerability of Adobe Premiere Rush’s video editing software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Premiere Rush’s video editing software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS5.7AI score0.02829EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.13 views

The vulnerability of the Letters component of the Oracle Argus Safety platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Letters component of the Oracle Argus Safety platform is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

5CVSS6.6AI score0.00912EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.14 views

The vulnerability of the Administration component of the Oracle BI Publisher software allows a malicious individual to gain unauthorized access to protected information. This access includes reading, modifying, adding, or deleting data, as well as causing service failures.

The vulnerability of the Administration component of the Oracle BI Publisher software for creating reports is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, to read, modify, add, or delete data...

8CVSS7.5AI score0.011EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.10 views

The vulnerability of the Push API interface on Mozilla Firefox’s browser allows a perpetrator to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the Push API interface of Mozilla Firefox’s browser is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

8.5CVSS7.7AI score0.01585EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.11 views

The vulnerability in the web interface of the CUPS printing server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the web interface of the CUPS printing server relates to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.1CVSS6.5AI score0.01841EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.8 views

The vulnerability of the C API component of the MySQL Database Management System client, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the C API component of the MySQL Database Management System client is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL protocol...

4.3CVSS6.3AI score0.02272EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.11 views

The vulnerability of the Dialog Box component of the application’s technical maintenance, repair, and major equipment overhauls allows a perpetrator to gain unauthorized access to protected information or to have read, add, or delete data permissions.

The vulnerability of the Dialog Box component in application maintenance, repair, and major equipment overhauls related to Oracle Complex Maintenance, Repair, and Overhaul lies in deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.2CVSS7.7AI score0.01255EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.6 views

The vulnerability of the exec_id function in the Linux operating system’s kernel allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the execid function include/linux/sched.h in the Linux operating system is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

5.3CVSS6.5AI score0.00706EPSS
SaveExploits1References30Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:00 a.m.8 views

The vulnerability of the Mozilla Firefox browser, related to the lack of a mechanism for checking input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Mozilla Firefox browser is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.4AI score0.01623EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:00 a.m.10 views

The vulnerability of the Cisco Connected Mobile Experiences software, related to authentication errors, allows a perpetrator to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the Cisco Connected Mobile Experiences software relates to authentication errors. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...

9CVSS7.6AI score0.01409EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:00 a.m.9 views

The vulnerability in the loading of Mozilla Firefox browser extensions allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Mozilla Firefox browser extensions relates to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by loading a specially created script...

7.8CVSS7.4AI score0.01658EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/28 12:00 a.m.10 views

The vulnerability in the implementation of the fetch() function for obtaining resources from the Fetch API interface of Mozilla Firefox and Firefox-ESR browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of the fetch function for obtaining resources through the Fetch API on Mozilla Firefox and Firefox-ESR browsers is related to an error in returning temporary local copies of resources. These resources were sent with a cache header indicating “no caching”...

7.1CVSS7AI score0.02293EPSS
SaveExploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:00 a.m.10 views

The vulnerability of the NTLM protocol implemented by the Windows operating system lies in the lack of protection for service data, which allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the NTLM protocol implemented by the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

7.8CVSS7.5AI score0.0938EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/01/26 12:00 a.m.10 views

The vulnerability of the Bot Framework SDK, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Bot Framework SDK is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.01057EPSS
SaveExploits0References2
Rows per page
Query Builder