Lucene search
K

262 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.2 views

The vulnerability of the vRealize Log Insight log management tool, related to authentication errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the vRealize Log Insight log management tool is related to authentication errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.2CVSS7.1AI score0.01438EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.1 views

The vulnerability of the PostgreSQL database management system, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of the PostgreSQL database management system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

7.5CVSS7.2AI score0.02241EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.3 views

The vulnerability of the control interface for Cisco NX-OS network operating system routers allows attackers to escalate their privileges.

The vulnerability of the control interface for Cisco NX-OS network operating system routers relates to authentication process errors. Exploiting this vulnerability can allow attackers to increase their privileges...

7.3CVSS7.2AI score0.00424EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.6 views

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software, related to authentication process errors, allows attackers to escalate their privileges.

The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using specially crafted HTTP requests...

9.1CVSS7.5AI score0.02362EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:0 a.m.7 views

Vulnerability of the .NET Core runtime and PowerShell Core automation framework, related to authentication process errors, allowing attackers to disclose sensitive information

The vulnerability of the .NET Core runtime and the PowerShell Core automation framework is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...

7.8CVSS7.1AI score0.15228EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2018/12/07 12:0 a.m.4 views

The vulnerability of the Microsoft Team Foundation Server software, related to errors in the authentication process, allows a violator to execute arbitrary commands.

The vulnerability of the Microsoft Team Foundation Server TFS exists due to the lack of basic authentication when exchanging data between the software platform and the search service. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

6.3CVSS8.1AI score0.13455EPSS
Exploits0References7
BDU FSTEC
BDU FSTEC
added 2018/11/01 12:0 a.m.3 views

The vulnerability of the FortiOS operating system, caused by errors in authentication mechanisms, allows a perpetrator to gain unauthorized access to the ZebOS shell.

The vulnerability of the FortiOS operating system is caused by errors in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the ZebOS shell...

9.8CVSS5.5AI score0.03401EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/16 12:0 a.m.3 views

The vulnerability of the web interface of the EMG12 Ethernet Modbus Gateway allows a intruder to execute arbitrary code.

The vulnerability of the web interface of the EMG12 Ethernet Modbus Gateway arises from errors in the authentication mechanism. Operating the system allows a malicious actor to bypass the authentication mechanism and execute arbitrary code using a specially crafted URI...

10CVSS6AI score0.07744EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/05 12:0 a.m.4 views

The vulnerability of the EAFS_BCA_BUSOPR_2 function in the SAP Enterprise Financial Services software platform, which allows attackers to enhance their privileges.

The vulnerability of the EAFSBCABUSOPR2 function in the SAP Enterprise Financial Services software platform is related to errors in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

4.3CVSS5.5AI score0.01333EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/05 12:0 a.m.3 views

The vulnerability of the EAFS_BCA_BUSOPR_SEPA function in the SAP Enterprise Financial Services software platform, which allows a perpetrator to enhance their privileges.

The vulnerability of the EAFSBCABUSOPRSEPA function in the SAP Enterprise Financial Services software platform is related to authentication process errors. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

4.3CVSS5.5AI score0.01333EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/03/02 12:0 a.m.5 views

The vulnerability of the iOS operating system, which allows a hacker to bypass existing authentication policies

The vulnerability of the Accounts component in the iOS operating system is related to authentication errors. Exploiting this vulnerability allows a malicious actor to circumvent existing authentication policies by exploiting errors in the application uninstallation process...

4.6CVSS6.6AI score0.00274EPSS
Exploits0References5Affected Software1
Microsoft KB
Microsoft KB
added 2016/09/13 7:0 a.m.51 views

MS16-110: Description of the security update for Windows: September 13, 2016

MS16-110: Description of the security update for Windows: September 13, 2016 Summary To learn more about the vulnerability, see Microsoft Security Bulletin MS16-110. More Information Important We recommend that you install this security update on all client and server operating systems listed in...

8.8CVSS9AI score0.20788EPSS
Exploits0
OSV
OSV
added 2016/08/03 8:0 a.m.7 views

CURL-CVE-2016-5420 Reusing connections with wrong client cert

libcurl did not consider client certificates when reusing TLS connections. libcurl supports reuse of established connections for subsequent requests. It does this by keeping a few previous connections "alive" in a connection pool so that a subsequent request that can use one of them instead of...

7.5CVSS7.6AI score0.14596EPSS
Exploits0
OSV
OSV
added 2016/07/15 4:59 p.m.2 views

CVE-2016-5797

Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts...

5.3CVSS5.8AI score0.01276EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2016/01/21 12:0 a.m.4 views

The vulnerability of the Mac OS X operating system, which allows a hacker to increase their privileges

The vulnerability of the Mac OS X operating system is caused by authentication errors during new sessions. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges...

7.2CVSS7.2AI score0.00355EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2014/07/18 12:0 a.m.18 views

Debian DSA-2979-1 : fail2ban - security update

Two vulnerabilities were discovered in Fail2ban, a solution to ban hosts that cause multiple authentication errors. When using Fail2ban to monitor Postfix or Cyrus IMAP logs, improper input validation in log parsing could enable a remote attacker to trigger an IP ban on arbitrary addresses,...

5CVSS5.4AI score0.03235EPSS
Exploits2References4
OSV
OSV
added 2014/07/17 12:0 a.m.17 views

DSA-2979-1 fail2ban - security update

Bulletin has no description...

5CVSS8AI score0.03235EPSS
Exploits2
OpenVAS
OpenVAS
added 2009/12/14 12:0 a.m.36 views

Telepark.wiki Multiple Vulnerabilities

This host is running Telepark wiki and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbteleparkwikimultvuln.nasl 4892 2016-12-30 15:39:07Z teissa $ Telepark.wiki Multiple Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone Networks GmbH,...

7.5CVSS0.3AI score0.06589EPSS
Exploits4References3
NVD
NVD
added 2006/06/12 10:2 p.m.10 views

CVE-2006-2976

Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...

7.5CVSS6.7AI score0.01382EPSS
Exploits0References5
CVE
CVE
added 2006/06/12 10:0 p.m.44 views

CVE-2006-2976

CVE-2006-2976 affects Coppermine Photo Gallery, specifically the file usermgr.php, with the vulnerability present in releases prior to 1.4.7. The available documents describe an unspecified vulnerability with unknown impact and remote attack vectors, potentially tied to authorization/authenticati...

7.5CVSS7.1AI score0.01382EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder