Lucene search
+L

514 matches found

BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.9 views

The vulnerability of the Autofill function implementations in Google Chrome and Microsoft Edge browsers allows attackers to compromise the integrity, accessibility, and confidentiality of data.

The vulnerability of Autofill implementations in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to influence the integrity, accessibility, and confidentiality of data...

6.8CVSS7.1AI score0.0089EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/02/10 12:0 a.m.11 views

The vulnerability of the email verification function of the RPM package manager allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the check function in software with RPM support is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

7.5CVSS7.2AI score0.00794EPSS
SaveExploits0References10Affected Software7
CNVD
CNVD
added 2022/01/24 12:0 a.m.36 views

Oracle Java SE Input Validation Error Vulnerability (CNVD-2022-15481)

Oracle Java SE, an Oracle company, is used to develop and deploy Java applications on desktops, servers, and embedded devices and in real-time environments. Edition accessible data for unauthorized update, insert, or delete access...

5.3CVSS4.9AI score0.02755EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.14 views

The vulnerability of the IBM Tivoli Workload Scheduler software arises from buffer overflows in the stack, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IBM Tivoli Workload Scheduler software arises from buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

5.9CVSS6.2AI score0.00254EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.8 views

The vulnerability of the FilePath#listFiles component in the Jenkins automation server, related to the absence of authentication procedures, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FilePathlistFiles component in the Jenkins automation server is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

9.3CVSS7.6AI score0.02076EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:0 a.m.11 views

The vulnerability of the serviceattrreq and processrequest functions (sdpd-request.c) in the Bluetooth protocol stack for the Linux BlueZ operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the serviceattrreq and processrequest functions sdpd-request.c in the Bluetooth protocol stack for the Linux BlueZ operating system arises from writing beyond buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality,...

8.8CVSS6.7AI score0.0143EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/11/12 12:0 a.m.14 views

The vulnerability of Google Chrome’s browser permissions settings allows attackers to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s browser permissions setting relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS7.4AI score0.04125EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.9 views

The vulnerability of the Java-Script script handler in Google Chrome browsers allows attackers to influence privacy, integrity, and accessibility.

The vulnerability of the Java-Script script handler in Google Chrome browsers relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise privacy, integrity, and accessibility of data...

10CVSS7.3AI score0.04125EPSS
SaveExploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.7 views

The vulnerability in the kernel/bpf/hashtab.c component of the Linux operating system, related to writing beyond buffer boundaries in memory, allows an attacker to compromise the integrity, accessibility, and confidentiality of data.

The vulnerability in the kernel/bpf/hashtab.c component of the Linux operating system is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the integrity, accessibility, and confidentiality of data...

7.8CVSS6.8AI score0.00315EPSS
SaveExploits0References23Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/09/23 12:0 a.m.10 views

The vulnerability of the table_population.php file, a tool for monitoring Nagios XI Docker Wizard, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tablepopulation.php file of the Nagios XI Docker Wizard tool is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8AI score0.02943EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/24 12:0 a.m.7 views

The vulnerability of Eclipse Jetty servlet containers, related to inconsistent interpretation of HTTP requests, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Eclipse Jetty servlet containers is related to inconsistent interpretation of HTTP requests. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.9AI score0.16154EPSS
SaveExploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/08/10 12:0 a.m.7 views

The vulnerability of the CASAP Automated Enrollment System software lies in its lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the CASAP Automated Enrollment System lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through the parameter “id...

10CVSS7.9AI score0.01517EPSS
SaveExploits1References3Affected Software1
Malwarebytes
Malwarebytes
added 2021/06/11 3:26 p.m.63 views

Cloud vs on premises: 3 reasons the Cloud is winning

Thanks to the vast rollout of COVID-19 vaccines to millions of people in the US and Europe, some of us are finally seeing some semblance of a return to normalcy. And organizations, who have experienced first-hand the struggle to stay afloat during months of struggle, are expecting to transition...

7.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/06/04 12:0 a.m.10 views

The vulnerability of the oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS component in the Jackson-databind library of the FasterXML project allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

9.3CVSS7.1AI score0.20929EPSS
SaveExploits2References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/05/20 12:0 a.m.7 views

The vulnerability of the asynchronous input/output interface io_uring in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the asynchronous input/output interface iouring in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS7.2AI score0.00436EPSS
SaveExploits0References15Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.17 views

The software vulnerabilities of SonicWall Email Security and SonicWall Hosted Email Security, related to insecure privilege management, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to insecure privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8AI score0.83425EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/05/05 12:0 a.m.14 views

The vulnerability of Microprogramming-based Network Interface Software of Cisco Adaptive Security Appliance Software (ASA) and Cisco Firepower Threat Defense (FTD) lies in the copying of buffers without checking the size of the input data. This allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of Microprogramming Software for Cisco Adaptive Security Appliance Software ASA and Cisco Firepower Threat Defense FTD lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to compromise the...

8.5CVSS7AI score0.01197EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.9 views

The vulnerability of the LibreOffice office software package, related to security configuration errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the LibreOffice office software package is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

9CVSS7.8AI score0.0417EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.7 views

The vulnerability of the Audio component in the Google Chrome browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Audio component in the Google Chrome browser is related to its use after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially crafted web page...

8.8CVSS8.2AI score0.23847EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:0 a.m.15 views

The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR are related to insufficient warnings about dangerous actions. Exploiting these vulnerabilities can allow attackers to compromise the...

7.8CVSS7.2AI score0.01509EPSS
SaveExploits0References3Affected Software4
Rows per page
Query Builder