Lucene search
+L

541 matches found

BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.18 views

The vulnerability of the Microsoft Authenticator multi-factor authentication application lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.1CVSS7.7AI score0.01266EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:00 a.m.12 views

The vulnerability of the Microsoft Intune Linux access control agent allows a hacker to escalate their privileges. This feature of the Microsoft Intune Company Portal for Android enables attackers to gain more access to corporate applications and resources.

The vulnerability of the Microsoft Intune Linux access control agent, which manages access to corporate applications and resources, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.6CVSS6.9AI score0.00916EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:00 a.m.11 views

The vulnerability of the AuthenticatedVoter class in the Java framework for securing industrial applications with Spring Security allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the AuthenticatedVoter class in the Java framework for securing industrial applications under Spring Security is related to deficiencies in access control when processing the null parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

8.5CVSS6.6AI score0.00956EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:00 a.m.15 views

The vulnerability of the USB Print driver for Windows operating systems allows attackers to gain increased privileges.

The vulnerability of the USB Print driver for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7CVSS7.2AI score0.00541EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/18 12:00 a.m.13 views

The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure (OMI) extensions for managing virtual machines in Azure allows attackers to escalate their privileges due to lack of access control mechanisms.

The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure OMI extensions for managing virtual machines in Azure is related to deficiencies in access control. Exploitation of this vulnerability could allow attackers to increase their privileges...

7.8CVSS7.3AI score0.00988EPSS
SaveExploits0References4Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/03/14 12:00 a.m.11 views

The vulnerability of the Windows operating system’s kernel allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

7.8CVSS7.2AI score0.00894EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/11 12:00 a.m.12 views

The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems lies in the lack of authentication procedures, which allow attackers to gain full access to devices controlled by the vulnerable operating system.

The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full access to devices controlled by the vulnerable operating syste...

10CVSS7.7AI score0.24365EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:00 a.m.16 views

The vulnerability of the Java library for analyzing, extracting, and managing data in HTML documents, jsoup, arises from the lack of protection for website structure. This allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the Java library for analyzing, extracting, and managing data in HTML documents, known as jsoup, is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

6.4CVSS6.5AI score0.02195EPSS
SaveExploits0References4Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.16 views

The vulnerability of the Kibana data visualization service, related to deficiencies in access control, allows a perpetrator to compromise the confidentiality of the protected information.

The vulnerability of the Kibana data visualization service is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality of the protected information...

6.8CVSS6.5AI score0.005EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.14 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.7AI score0.20394EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/02/14 12:00 a.m.16 views

The vulnerability of the XWiki platform, caused by deficiencies in the authentication process, allows unauthorized users to gain access to protected information.

The vulnerability of the XWiki platform stems from deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.7282EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:00 a.m.12 views

The vulnerability of the system administration program Sudo, related to deficiencies in the authentication process, allows attackers to escalate their privileges.

The vulnerability of the system administration program Sudo is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS6.5AI score0.00541EPSS
SaveExploits1References12Affected Software19
BDU FSTEC
BDU FSTEC
added 2024/02/12 12:00 a.m.74 views

The vulnerability of MinIO object storage servers, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the MinIO object storage server is related to deficiencies in access control based on the UpdateServiceAccountAdminAction policy. Exploiting this vulnerability allows an attacker operating remotely to enhance their privileges...

9CVSS7.6AI score0.34086EPSS
SaveExploits4References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/02/07 12:00 a.m.17 views

The vulnerability of the network and application monitoring tool in VMware Aria Operations for Networks, due to deficiencies in access control, allows a malicious actor to elevate their privileges to the root user level.

The vulnerability of the network and application monitoring tool in VMware Aria Operations for Networks is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the level of a root user...

7.8CVSS7.4AI score0.00246EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/23 12:00 a.m.12 views

The vulnerability of the APFS component of the macOS operating system, which allows a hacker to disclose protected information

The vulnerability of the APFS component in the macOS operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.5AI score0.00196EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:00 a.m.14 views

Microsoft Edge’s vulnerability, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

5.2CVSS5.9AI score0.00382EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/01/11 12:00 a.m.26 views

The vulnerability of Microsoft Windows Defender operating systems, which allows attackers to increase their privileges

The vulnerability of Microsoft Windows Defender operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00812EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/21 12:00 a.m.15 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS6.3AI score0.00562EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/08 12:00 a.m.14 views

The vulnerability of the mod_webdav.so module of the Wi-Fi router software by ASUS RT-AX92U allows a hacker to gain access to protected information.

The vulnerability of the modwebdav.so module in the ASUS RT-AX92U Wi-Fi router software lies in the lack of protection for sensitive data. Exploiting this vulnerability could allow an attacker to gain access to protected information...

9CVSS6.5AI score0.00547EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:00 a.m.15 views

The vulnerability of the “Allow Subdomains” configuration in the OAuth2 authentication platform allows a hacker to bypass security restrictions and redirect users to any arbitrary URL address.

The vulnerability of the “Allow Subdomains” configuration in the OAuth2 authentication platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and redirect users to any arbitrary URL address...

8.7CVSS7.5AI score0.00562EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder