Lucene search
+L

9563 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability of Firefox’s browser security policy, related to the lack of input data validation mechanisms, allows attackers to compromise data integrity.

The vulnerability of Firefox’s browser security policy is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows an attacker to compromise data integrity by using the HTTP protocol...

4.3CVSS6.4AI score0.00734EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.14 views

The vulnerability of the requestPointerLock() function in the Firefox web browser allows a intruder to compromise data integrity.

The vulnerability of the requestPointerLock function in the Firefox web browser exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

4.3CVSS6.2AI score0.00624EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability of the Omnibox address bar in Google Chrome, related to improper access control to critical resources, allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to improper control of access to critical resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity using a specially created domain name...

4.3CVSS6.6AI score0.00635EPSS
SaveExploits0References9Affected Software4
CNVD
CNVD
added 2020/04/22 12:00 a.m.51 views

Red Hat OpenShift Container Platform Log Information Disclosure Vulnerability

Red Hat OpenShift Container Platform is a suite of application platforms from Red Hat that enable organizations to develop, deploy and manage existing container-based applications across physical, virtual and public cloud infrastructures. A log information disclosure vulnerability exists in Red H...

8.2CVSS6.1AI score0.0097EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability of the “Click to Play” request in the Firefox web browser allows a perpetrator to compromise data integrity.

The vulnerability of the “Click to Play” request in the Firefox web browser is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.1CVSS7AI score0.00844EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.13 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...

4.3CVSS6.5AI score0.00604EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.12 views

The vulnerability of the navigation mechanism in the Google Chrome browser for Android, which allows a perpetrator to compromise data integrity

The vulnerability of the navigation mechanism in the Google Chrome browser for Android is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

4.3CVSS6.6AI score0.01229EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability of the user interface in Google Chrome’s Omnibox allows a perpetrator to compromise data integrity.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

4.3CVSS6.6AI score0.01166EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.5 views

The vulnerability of Firefox’s browser security policy allows a hacker to gain unauthorized access to confidential data and compromise data integrity.

The vulnerability of Firefox’s browser security policy is related to the lack of measures to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to confidential data and compromise data integrity using object tags...

6.1CVSS7.1AI score0.00802EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.13 views

The vulnerability of the “quick import-export-marks” option in the distributed Git version control system allows a attacker to trigger a service failure and compromise data integrity.

The vulnerability of the “quick import-export-marks” option in the distributed Git version control system is related to a lack of input validation mechanisms. Exploiting this vulnerability allows attackers to trigger service failures and compromise data integrity...

4.4CVSS6.7AI score0.00427EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.11 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information and compromise its integrity and availability through a specially created HTML page...

9.3CVSS7.3AI score0.00724EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability affects the security component of the WSL subsystem of the distributed Git version control system. It allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the security component of the WSL subsystem of the distributed Git version control system is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to confidential data, cause service...

10CVSS7.4AI score0.02244EPSS
SaveExploits0References10Affected Software4
Positive Technologies
Positive Technologies
added 2020/04/22 12:00 a.m.25 views

PT-2020-12293 · Red Hat · Openshift Container Platform

Name of the Vulnerable Software and Affected Versions: OpenShift Container Platform versions 4.1 and later Description: A flaw was found in the software where sensitive information was logged by the image registry operator. This allows an attacker who gains access to those logs to read and write ...

8.2CVSS7.7AI score0.0097EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.13 views

The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s user interface is related to the lack of a mechanism for checking entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by creating a malicious HTML page...

4.3CVSS6.6AI score0.01281EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.10 views

The vulnerability of the inheritance mechanism for Firefox’s security policy allows a perpetrator to gain unauthorized access to confidential data and compromise the integrity of those data.

The vulnerability of the Firefox browser’s security inheritance mechanism is related to the lack of measures to protect the structure of web pages. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to confidential data and compromise data integrity...

6.1CVSS6.8AI score0.00809EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.12 views

The vulnerability of the component responsible for checking the names of submodules in the Git version control system allows a hacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the component responsible for checking the names of sub-modules in the distributed version control system Git is related to a lack of input data validation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

9.3CVSS7.3AI score0.04426EPSS
SaveExploits0References11Affected Software6
RedhatCVE
RedhatCVE
added 2020/04/21 11:33 p.m.52 views

CVE-2020-10712

A flaw was found in OpenShift Container Platform versions from 4.1 to 4.4 inclusive. Sensitive information was found to be logged by the image registry operator allowing an attacker able to gain access to those logs, to read and write to the storage backing the internal image registry. The highes...

6.4CVSS2.7AI score0.0097EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/04/21 12:35 p.m.11 views

jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider

A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS7.1AI score0.03626EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/04/21 12:35 p.m.11 views

jackson-databind: Serialization gadgets in org.apache.commons.proxy.provider.remoting.RmiProvider

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

8.8CVSS7.1AI score0.03673EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.11 views

The vulnerability of Google Chrome browser developer tools allows a hacker to compromise data integrity.

The vulnerability of Google Chrome browser developer tools is related to improper control over access to critical resources. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

7.4CVSS7AI score0.00845EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder