Lucene search
+L

5759 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.9 views

The vulnerability of Google Chrome’s ServiceWorker component, which allows a hacker to disclose protected information

The vulnerability of Google Chrome’s ServiceWorker component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

7.1CVSS7.1AI score0.00787EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.10 views

The vulnerability in the implementation of the CORS mechanism for the Google Chrome browser allows a hacker to disclose protected information.

The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

6.5CVSS7.1AI score0.00867EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.10 views

The vulnerability of the Google Chrome browser, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of the Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a hacker to disclose the protected information...

5.5CVSS6.8AI score0.004EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.15 views

The vulnerability of the V8 component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the V8 component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using a specially created PDF file...

7.1CVSS7.3AI score0.00833EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.15 views

The vulnerability of the Open Enclave SDK, a software development tool, is related to an object processing error in memory, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Open Enclave SDK software development tools is related to an object processing error in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.01447EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.7 views

The vulnerability of the DefaultServlet component of the Jetty HTTP server allows a attacker to gain unauthorized access to protected information.

The vulnerability of the DefaultServlet component in the Jetty HTTP server is related to errors in error handling when incorrect requests are used. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by displaying the InvalidPathException message,...

5.3CVSS6.4AI score0.04328EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.13 views

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.02365EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.9 views

The vulnerability of the CLI component of Cisco Wireless LAN Controller (WLC) software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.6AI score0.0065EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the Windows Servicing Stack component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Servicing Stack component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.2AI score0.01452EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.10 views

The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.01659EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.9 views

The vulnerability of the Windows GDI component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

6.5CVSS6.1AI score0.75859EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.7 views

The vulnerability of the NSS libraries, related to errors in value generation during the processing of the ClientHello request, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NSS libraries is related to errors in value generation during the processing of the ClientHello request. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.9CVSS6.2AI score0.01496EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.15 views

The vulnerability of Google Chrome’s swiftshader library allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Swiftshader library arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.3AI score0.00902EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.7 views

The vulnerability of the libcurl library, related to insufficient protection of registration data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the libcurl library is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.5CVSS6.7AI score0.08031EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.12 views

The vulnerability of the ActiveX Installer component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ActiveX Installer component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.5AI score0.01151EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.11 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

4.6CVSS6.5AI score0.00346EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.7 views

The vulnerability in the security.http.utils component of the Symfony software development and web application management platform allows attackers to carry out phishing attacks and gain access to protected information.

The vulnerability of the security.http.utils component of the Symfony software development and management platform involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows attackers to conduct phishing attacks remotely and gain access to protected information using...

6.4CVSS6.8AI score0.01139EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.15 views

The vulnerability of the Firefox browser, related to the use of open redirection, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Firefox browser is related to the use of open redirecting. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS6.7AI score0.01274EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.11 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

6.2CVSS6.5AI score0.00349EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2019/11/21 6:15 p.m.16 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.5AI score
SaveExploits0References6
Rows per page
Query Builder