Lucene search
+L

206 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.8 views

The vulnerability of the `web.static(... show_index=True)` method in the HTTP client aiohttp allows a attacker to compromise the confidentiality and integrity of the system.

The vulnerability of the web.static..., showindex=True method in the aiohttp HTTP client is related to insufficient data cleaning provided by users on index pages for processing static files. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of...

6.4CVSS6.8AI score0.00666EPSS
SaveExploits0References10Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:00 a.m.13 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary code.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00698EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:00 a.m.10 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary code.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS5.9AI score0.01285EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:00 a.m.11 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

6.8CVSS5.8AI score0.00642EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:00 a.m.11 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

7.8CVSS5.8AI score0.00735EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:00 a.m.10 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to increase their privileges and execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...

7.8CVSS5.8AI score0.0083EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/24 12:00 a.m.12 views

The vulnerability of the Bitdefender BOX 1 device for protecting appliances and gadgets lies in the lack of measures taken at the control level to clean data. This allows a perpetrator to execute arbitrary commands.

The vulnerability of the Bitdefender BOX 1 device for protecting appliances and gadgets is related to the lack of measures taken to clean data at the control level during the processing of the final checkpoint /checkimageandtriggerrecovery. Exploiting this vulnerability allows a remote attacker t...

9.6CVSS8.3AI score0.00766EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.9 views

The vulnerability of the ASUS AiCloud cloud platform, related to the lack of measures taken to clean data at the management level, allows a perpetrator to execute arbitrary commands.

The vulnerability of the ASUS AiCloud cloud platform lies in the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

9CVSS8.3AI score0.00983EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.12 views

The vulnerability of the Azure Database for PostgreSQL Flexible Server’s database management system lies in the lack of measures taken at the control level to clean data. This allows attackers to execute arbitrary code and increase their privileges.

The vulnerability of the Azure Database for PostgreSQL Flexible Server database management system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code and increase their...

9CVSS6AI score0.01193EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.10 views

The vulnerability of the Azure Database for PostgreSQL Flexible Server’s database management system lies in the lack of measures taken at the control level to clean data. This allows attackers to execute arbitrary code and increase their privileges.

The vulnerability of the Azure Database for PostgreSQL Flexible Server database management system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code and increase their...

9CVSS6AI score0.01192EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:00 a.m.14 views

The vulnerability of Databricks JDBC driver, related to the lack of measures taken at the control level to clean data, allows attackers to execute arbitrary code.

The vulnerability of Databricks JDBC driver is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.5CVSS6.3AI score0.00711EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/03 12:00 a.m.27 views

The vulnerability of the ASUS AiCloud cloud platform, which stems from the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary codes.

The vulnerability of the ASUS AiCloud cloud platform lies in the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

9CVSS8.3AI score0.01238EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/02 12:00 a.m.7 views

PT-2025-1262 · Asus · Asus Router Aicloud

Name of the Vulnerable Software and Affected Versions: ASUS Router AiCloud affected versions not specified Description: An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. The vulnerability is related to the lack o...

9CVSS9.6AI score0.00983EPSS
SaveExploits0References23
BDU FSTEC
BDU FSTEC
added 2024/12/26 12:00 a.m.19 views

The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) and the FortiClient EMS Cloud cloud storage service lies in the lack of data cleaning measures at the management level. This allows attackers to execute arbitrary code.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS and the FortiClient EMS Cloud cloud storage service is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS5.9AI score0.01287EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:00 a.m.9 views

The vulnerability of the `ldap_search_dn` function in the `mainfunction.cgi` script of the DrayTek Vigor router’s web interface allows a hacker to execute arbitrary commands.

The vulnerability of the ldapsearchdn function in the mainfunction.cg script of the DrayTek Vigor router’s web interface is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.00614EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:00 a.m.14 views

The vulnerability of the built-in network firewall QuFirewall for protecting data on NAS devices from QNAP, related to the lack of measures taken at the management level to clean data, allows attackers to execute arbitrary commands.

The vulnerability of the built-in network firewall of QuFirewall, used for protecting data on NAS devices from QNAP, is related to the lack of measures taken at the management level to clean data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

5.5CVSS5.9AI score0.00711EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:00 a.m.10 views

The vulnerability of the NuPoint Unified Messaging component of the Mitel MiCollab collaboration platform allows a hacker to execute arbitrary commands.

The vulnerability of the NuPoint Unified Messaging component of the Mitel MiCollab collaboration platform is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially created data...

10CVSS8.4AI score0.01324EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:00 a.m.12 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code b...

10CVSS8.5AI score0.01966EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/09 12:00 a.m.10 views

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to escalate their privileges and execute arbitrary code.

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code b...

9CVSS8.5AI score0.01391EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/12/02 12:00 a.m.11 views

The vulnerability of the instance_create function in the monitoring and adaptive configuration of system devices allows a perpetrator to execute arbitrary code.

The vulnerability of the instancecreate function in the monitoring and adaptive configuration of system devices related to tuned systems lies in the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows an attacker to execute arbitrary code with root...

7.8CVSS7.7AI score0.00289EPSS
SaveExploits0References7Affected Software5
Rows per page
Query Builder