Lucene search
+L

9509 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.12 views

The vulnerability of the UpdateGateways method in the software for managing and monitoring remote devices in telemetering and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the UpdateGateways method in the software for managing and monitoring remote devices in telemetering and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the...

9CVSS6.7AI score0.00751EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.11 views

The vulnerability of the UpdateUsers method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the UpdateUsers method in software for managing and monitoring removed objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

9CVSS6.7AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.12 views

The vulnerability of the CreateTrace method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CreateTrace method in software for managing and monitoring deleted objects in telemetry and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

10CVSS7.8AI score0.0099EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.14 views

The vulnerability of the CreateProject method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CreateProject method in the software for managing and monitoring removed objects in telemetry and telemechanics systems, such as the TeleControl Server Basic, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a...

9CVSS6.7AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.9 views

The vulnerability of ConneXium Network Manager software, related to insufficient validation of input data, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of ConneXium Network Manager software relates to insufficient verification of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS5.5AI score0.00175EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.12 views

The vulnerability of the ICOInput::readimg() function in the src/ico.imageio/icoinput.cpp module of the OpenImageIO library may affect the integrity of protected information or cause service failures.

The vulnerability of the ICOInput::readimg function in the src/ico.imageio/icoinput.cpp module of the OpenImageIO library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information or cause...

8.5CVSS5.7AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.31 views

The vulnerability of the PSDInput::decompress_zip_prediction() function in the src/psd.imageio/psdinput.cpp module of the OpenImageIO library allows a attacker to compromise the integrity of the protected information or cause service failures.

The vulnerability of the PSDInput::decompresszipprediction function in the src/psd.imageio/psdinput.cpp module of the OpenImageIO library is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information or cause service...

8.5CVSS5.6AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.9 views

The vulnerability of the Authenticate method in software for managing and monitoring remote objects in telemetry and telemechanics systems, allowing a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Authenticate method in software for managing and monitoring remote objects in telemetry and telemechanics systems related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the...

10CVSS7.9AI score0.00956EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.16 views

The vulnerability of the ImportDatabase method in software for managing and monitoring deleted objects in telemetry and telemechanics systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ImportDatabase method in software for managing and monitoring removed objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

9CVSS6.7AI score0.00806EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:00 a.m.15 views

The vulnerability of the TIFFInput::bit_convert() function in the src/tiff.imageio/tiffinput.cpp module of the OpenImageIO library may affect the integrity of protected information or cause service failures.

The vulnerability of the TIFFInput::bitconvert function in the src/tiff.imageio/tiffinput.cpp module of the OpenImageIO library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information or cau...

9.1CVSS5.7AI score
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/22 6:25 p.m.3 views

CVE-2025-31327 OData meta-data property entity tampering in SAP Field Logistics

SAP Field Logistics Manage Logistics application OData meta-data property is vulnerable to data tampering, due to which certain fields could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability are not impacted...

4.3CVSS7AI score0.00256EPSS
SaveExploits0References2
NVD
NVD
added 2025/04/21 4:15 p.m.47 views

CVE-2024-12543

User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes...

5.9CVSS0.00321EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/21 3:14 p.m.16 views

CVE-2024-12543 A user enumeration and subsequent data integrity vulnerability affecting barcode functionality

User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes...

5.9CVSS6.4AI score0.00321EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/21 3:14 p.m.46 views

CVE-2024-12543 A user enumeration and subsequent data integrity vulnerability affecting barcode functionality

User Enumeration and Data Integrity in Barcode functionality in OpenText Content Management versions 24.3-25.1on Windows and Linux allows a malicous authenticated attacker to potentially alter barcode attributes...

5.9CVSS0.00321EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/21 3:14 p.m.66 views

CVE-2024-12543

OpenText Content Management 24.3–25.1 on Windows and Linux is affected by CVE-2024-12543, a user-enumeration and data-integrity issue in the barcode functionality that could allow a malicious authenticated attacker to alter barcode attributes. Affected component is the barcode handling path; root...

5.9CVSS6.4AI score0.00321EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/21 12:00 a.m.6 views

PT-2025-17442 · Opentext · Opentext Content Management

Name of the Vulnerable Software and Affected Versions: OpenText Content Management versions 24.3 through 25.1 Description: The issue concerns User Enumeration and Data Integrity in the Barcode functionality, allowing a malicious authenticated attacker to potentially alter barcode attributes...

5.9CVSS6.4AI score0.00321EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/04/21 12:00 a.m.6 views

OpenText Content Management 安全漏洞

OpenText Content Management is an enterprise content management software from OpenText Canada. A security vulnerability exists in OpenText Content Management versions 24.3 through 25.1, which stems from a user enumeration and data integrity issue in the barcode functionality, which could lead to ...

5.9CVSS6.5AI score0.00321EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2025/04/20 10:18 p.m.1267 views

Dust: UI flaw allows unauthorized users to add documents to restricted folders

The UI flaw allowed unauthorized users to add documents to restricted folders. The vulnerability constituted an Insecure Direct Object Reference IDOR issue, where users could manipulate the client-side behavior to perform actions they were not supposed to have access to, such as uploading documen...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/04/18 12:00 a.m.12 views

PT-2025-29484 · Tecnick.Com · Tcpdf

Уязвимость PHP-библиотеки TCPDF связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на целостность и доступность защищаемой информации...

9.7CVSS7.3AI score
SaveExploits0References2
CNVD
CNVD
added 2025/04/18 12:00 a.m.7 views

Zoom Workplace Cross-Site Scripting Vulnerability

Zoom Workplace is an AI-first collaboration platform from Zoom that integrates core features such as team communication, meetings, document collaboration, and a built-in AI Companion smart assistant to boost productivity. A cross-site scripting vulnerability exists in Zoom Workplace. The...

5.2CVSS6.2AI score0.00246EPSS
SaveExploits0References1
Rows per page
Query Builder