Lucene search
+L

372 matches found

BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.9 views

The vulnerability of the Azure Site Recovery disaster recovery tool lies in the insufficient protection of registration data, allowing attackers to escalate their privileges.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

9.4CVSS7.5AI score0.02698EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.7 views

The vulnerability of the Azure Site Recovery disaster recovery tool lies in the insufficient protection of registration data, allowing attackers to escalate their privileges.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

8.5CVSS6.9AI score0.02631EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.8 views

The vulnerability of the Azure Site Recovery disaster recovery tool lies in the insufficient protection of registration data, allowing attackers to escalate their privileges.

The vulnerability of the Azure Site Recovery recovery tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

8.5CVSS6.9AI score0.02649EPSS
Exploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.2 views

PT-2022-1886 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

8.5CVSS6.4AI score0.02631EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.3 views

PT-2022-1884 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data in Azure Site Recovery, which can be exploited by a remote attacker to elevate their privileges...

8.5CVSS6.4AI score0.02649EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.4 views

PT-2022-1883 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

8.5CVSS6.4AI score0.02631EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.2 views

PT-2022-1885 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

9.4CVSS7.8AI score0.02698EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2022/03/08 12:0 a.m.9 views

PT-2022-1882 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient protection of registration data, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

8.5CVSS6.4AI score0.02631EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2022/03/04 12:0 a.m.7 views

The vulnerability of the Apache ShenYu software lies in the insufficient protection of registration data, allowing attackers to obtain user registration data.

The vulnerability of the Apache ShenYu software is related to insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain user registration data through a specially crafted HTTP request...

7.8CVSS7.2AI score0.04306EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/17 12:0 a.m.7 views

The vulnerability of the SDDC controller in the VMware Cloud Foundation virtualization platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SDDC controller of the VMware Cloud Foundation virtualization platform is related to insufficient protection of registration data. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.00778EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/25 12:0 a.m.4 views

PT-2022-1763 · Apache · Apache Shenyu

Name of the Vulnerable Software and Affected Versions: Apache ShenYu versions 2.4.0 through 2.4.1 Description: The issue is related to insufficient protection of registration data, allowing a remote attacker to obtain user registration data using a specially crafted HTTP request. This can lead to...

7.8CVSS7.3AI score0.04306EPSS
Exploits1References14
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.6 views

The vulnerability of the userinfo sub-component in the Lynx text-based web browser lies in the insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the userinfo sub-component in the Lynx text-based web browser is related to the disclosure of credentials via SNI. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to confidential data...

5.3CVSS6.2AI score0.04455EPSS
Exploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.7 views

The vulnerability of the IBM Spectrum Protect Plus data protection software lies in its insufficient protection for registration data, allowing attackers to disclose the protected information.

The vulnerability of the IBM Spectrum Protect Plus data protection software platform lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose the protected information...

6.2CVSS6.7AI score0.00266EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2022/01/11 12:0 a.m.6 views

Sysaid Technologies SysAid 访问控制错误漏洞

Sysaid Technologies SysAid is an IT service management solution from the Israeli company SysAid Technologies Sysaid Technologies. a security vulnerability in SysAid ITIL could be exploited by an attacker to publish registration data to create new accounts without prior authentication...

5.3CVSS5.6AI score0.01416EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2021/12/21 12:0 a.m.5 views

The vulnerability of the Ceph storage system, related to insufficient protection of registration data, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Ceph storage system lies in the rehydration of user data. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

7.1CVSS7.1AI score0.0031EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.5 views

The vulnerability of the emergency recovery function of the Cisco SD-WAN vManage centralized system allows a intruder to gain unauthorized access to the device.

The vulnerability of the emergency recovery function of the Cisco SD-WAN vManage centralized system management platform is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the...

6.5CVSS6.5AI score0.00975EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/17 12:0 a.m.10 views

The vulnerability of the software for remote monitoring and management of IT systems by Kaseya VSA, related to insufficient protection of registration data, allows a hacker to disclose sensitive information that should be protected.

The vulnerability of Kaseya VSA’s remote monitoring and management software lies in the insufficient protection of registration data. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

10CVSS7.8AI score0.85619EPSS
Exploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.6 views

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software lies in the insufficient protection of registration data, allowing attackers to elevate their privileges to the root level.

The vulnerability of the D-Link DIR-2640-US router’s microprogramming software is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

7.2CVSS6.7AI score0.01115EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.6 views

The vulnerability of the Android application Mahavitaran, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Android application “Mahavitaran” is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.00307EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:0 a.m.9 views

The vulnerability of the CLI component of the Cisco Prime Infrastructure monitoring and network management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, allows a malicious individual to gain unauthorized access to the device.

The vulnerability of the CLI component of the Cisco Prime Infrastructure monitoring and network management system, as well as the Cisco Evolved Programmable Network EPN Manager software, is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attack...

5.5CVSS5.9AI score0.00225EPSS
Exploits0References3Affected Software2
Rows per page
Query Builder