Lucene search
+L

372 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/02 12:0 a.m.8 views

The vulnerability of Becton Dickinson’s Pyxis medication and supplies management solutions lies in the insufficient protection of registration data, allowing unauthorized access to electronic protected medical information (ePHI).

The vulnerability of Becton Dickinson’s Pyxis software for managing medications and related supplies is related to insufficient protection of registration data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to electronically protected medical information...

8.8CVSS7.6AI score0.00409EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/08/01 12:0 a.m.8 views

The vulnerability of the microprogrammed software of Modicon M241 and Modicon M251 control units lies in the insufficient protection of registration data, allowing attackers to intercept login credentials and access the web application.

The vulnerability of the microprogrammed logic controllers Modicon M241 and Modicon M251 is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to intercept login credentials and gain access to the web application...

7.8CVSS7.8AI score0.0225EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/18 12:0 a.m.8 views

The vulnerability of the network traffic analysis, network detection, and response mechanism of the Cortex XDR Agent lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Cortex XDR Agent’s network traffic analysis, network detection, and response capabilities is related to insufficient protection of password hashes. Exploiting this vulnerability could allow attackers to gain unauthorized access to protected information by loading speciall...

3.3CVSS5.5AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:0 a.m.8 views

The vulnerability of Schneider Electric Data Center Expert, a monitoring software for equipment information, stems from insufficient protection of registration data. This allows attackers to gain full control over the monitoring software.

The vulnerability of the Schneider Electric Data Center Expert software monitoring tool for equipment information is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain full control over the software...

9CVSS7.7AI score0.00532EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.7 views

The vulnerability of Schneider Electric Data Center Expert, a monitoring software for equipment information, stems from insufficient protection of registration data. This allows attackers to gain full control over the monitoring software.

The vulnerability of the Schneider Electric Data Center Expert software monitoring tool for equipment information is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain full control over the software...

9CVSS7.7AI score0.00532EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.11 views

The vulnerability of the SEPCOS Single Package software for the Secheron SEPCOS control and protection relays allows a intruder to disclose protected information.

The vulnerability of the SEPCOS Single Package control and protection relay system in Secheron SEPCOS is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

6.8CVSS6.5AI score0.00728EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/01 12:0 a.m.7 views

The vulnerability of the PingID software for multi-factor authentication of applications in Windows, related to insufficient protection of registration data, allows a perpetrator to access confidential information.

The vulnerability of the PingID software for multi-factor authentication of applications involves insufficient protection of registration data. Exploiting this vulnerability can allow attackers to access confidential information...

7.7CVSS5.9AI score0.00214EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/06/30 12:0 a.m.5 views

PT-2022-3285 · Ping Identity · Pingid Windows Login

Name of the Vulnerable Software and Affected Versions: PingID Windows Login versions prior to 2.8 Description: The issue is related to insufficient protection of registration data in the PingID Windows Login application, which can allow an attacker to access confidential data. The problem arises...

7.7CVSS5.3AI score0.00214EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.9 views

The vulnerability of the Intel Setup and Configuration Software (SCS) data collection tool, as well as the configuration tools for the Intel Management Engine BIOS Extension and the Intel Active Management Technology implementation, related to insufficient protection of registration data, allows a perpetrator to disclose protected information.

The vulnerability of the Intel Setup and Configuration Software SCS data collection tool, as well as the configuration tools for the Intel Management Engine BIOS Extension and the Intel Active Management Technology implementation, is related to insufficient protection of registration data...

7.6CVSS5.5AI score0.00251EPSS
Exploits0References2Affected Software12
BDU FSTEC
BDU FSTEC
added 2022/06/17 12:0 a.m.9 views

The vulnerability of the Azure SDK for .NET development software package lies in its insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the Azure SDK for .NET development software package lies in the insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

6.8CVSS6.6AI score0.02127EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2022/06/14 12:0 a.m.6 views

PT-2022-3484 · Unknown · Data Center Expert

Name of the Vulnerable Software and Affected Versions: Data Center Expert versions prior to 7.9.0 Description: The issue is related to insufficient protection of registration data in the Data Center Expert software. This could allow a remote attacker to gain full control over the software. The...

9.8CVSS9.3AI score0.00532EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2022/06/14 12:0 a.m.4 views

PT-2022-3520 · Unknown · Data Center Expert

Name of the Vulnerable Software and Affected Versions: Data Center Expert versions prior to 7.9.0 Description: The issue is related to insufficient protection of registration data, which could allow a remote attacker to gain full control over the software. This could result in unwanted access to ...

9.8CVSS9.3AI score0.00532EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2022/05/20 12:0 a.m.6 views

The vulnerability of the cURL command-line utility stems from insufficient protection of registration data, allowing an attacker to gain unauthorized access to the protected information.

The vulnerability of the cURL command-line utility is related to attempts by the application to perform redirections during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information by redirecting users to other URLs...

5.4CVSS6.6AI score0.01595EPSS
Exploits1References15Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/04/28 12:0 a.m.6 views

The vulnerability of the software for synchronizing and sharing files of Hitachi Content Platform Anywhere lies in the insufficient protection of registration data, allowing unauthorized access to protected information.

The vulnerability of the Hitachi Content Platform Anywhere synchronization and sharing software is related to insufficient protection for registration data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

7.8CVSS6.6AI score0.00792EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.7 views

The vulnerability of Puppet’s infrastructure automation tool, related to insufficient protection of registration data, allows a perpetrator to gain access to confidential information.

The vulnerability of the Puppet infrastructure automation tool is related to insufficient protection for registration data. Exploiting this vulnerability allows a remote attacker to gain access to confidential information...

6.8CVSS5.6AI score0.00909EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/14 12:0 a.m.10 views

The vulnerability of the PuppetDB database management system lies in the insufficient protection of registration data, allowing attackers to gain access to confidential information.

The vulnerability of the PuppetDB database management system is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to gain access to confidential information...

4.3CVSS5.4AI score0.00736EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.6 views

The vulnerability of the software for interacting with servers via CURL is related to insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the software for interacting with servers via CURL is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to gain access to confidential information...

5.4CVSS6.5AI score0.01843EPSS
Exploits1References10Affected Software6
Positive Technologies
Positive Technologies
added 2022/04/12 12:0 a.m.4 views

PT-2022-2900 · Microsoft · Azure Sdk For .Net

Name of the Vulnerable Software and Affected Versions: Azure SDK for .NET affected versions not specified Description: The issue is related to insufficient protection of registration data, which may allow a remote attacker to access confidential data. The vulnerability is associated with a lack o...

6.8CVSS5.9AI score0.02127EPSS
Exploits0References10
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.9 views

The vulnerability of the Azure Site Recovery disaster recovery tool lies in the insufficient protection of registration data, allowing attackers to escalate their privileges.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

8.5CVSS6.9AI score0.02631EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.6 views

The vulnerability of the Azure Site Recovery disaster recovery tool lies in the insufficient protection of registration data, allowing attackers to escalate their privileges.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

8.5CVSS6.9AI score0.02631EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder