Lucene search
+L

516 matches found

BDU FSTEC
BDU FSTEC
added 2023/05/29 12:0 a.m.8 views

The vulnerability of the multimedia player iTunes, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the multimedia player iTunes is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

4.9CVSS7.2AI score0.00272EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.7 views

The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 lies in the lack of authentication procedures. This allows attackers to circumvent existing security restrictions and download the configuration file.

The vulnerability of the microprogramming software of the D-Link DIR-809 A1 and D-Link DIR-809 A2 is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and download the configuration file remotely...

7.8CVSS7.2AI score0.01811EPSS
SaveExploits0References3Affected Software3
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.20 views

WordPress Plugin Booqable Rental 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.3AI score0.00369EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.13 views

The vulnerability of Backup Exec’s software for backup and data restoration lies in its lack of authentication procedures. This allows attackers to elevate their privileges and execute arbitrary commands.

The vulnerability of Backup Exec’s backup and recovery software is related to deficiencies in authentication procedures when using the SHA cryptographic algorithm. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands...

8.5CVSS8.3AI score0.13411EPSS
SaveExploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/04 12:0 a.m.9 views

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system, related to access control deficiencies, allows a intruder to bypass access restrictions.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to bypass access restrictio...

5.1CVSS5.5AI score0.00192EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/17 12:0 a.m.9 views

The vulnerability of the Device-Gateway service of the Delta Electronics InfraSuite Device Master software for real-time device monitoring allows a perpetrator to increase their privileges.

The vulnerability of the Device-Gateway service of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by utilizi...

9CVSS7.6AI score0.00645EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.10 views

The vulnerability of the Windows operating system’s kernel allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

7.1CVSS7.2AI score0.00678EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.7 views

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.0073EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.13 views

The vulnerability of the Windows operating system’s kernel allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

7.8CVSS7.3AI score0.0029EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/13 12:0 a.m.10 views

The vulnerability of the Microsoft Visual Studio software development tool lies in its lack of access control mechanisms, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00439EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/04/07 12:0 a.m.6 views

The vulnerability of the application software interface of Hitachi Energy System Data Manager SDM600 allows a malicious actor to read data from the data storage.

The vulnerability of the application software interface of Hitachi Energy System Data Manager SDM600 is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read data from the data storage...

7.7CVSS7.2AI score0.00484EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/07 12:0 a.m.9 views

The vulnerability of the software interface of the Hitachi Energy System Data Manager SDM600, which allows a perpetrator to compromise the confidentiality and integrity of information.

The vulnerability of the software interface of the Hitachi Energy System Data Manager SDM600 lies in deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of information...

9.4CVSS7.7AI score0.01442EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:0 a.m.10 views

The vulnerability of the Resource Timing application programming interface in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Resource Timing application programming interface in Google Chrome and Microsoft Edge browsers is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected informati...

5CVSS6.4AI score0.00476EPSS
SaveExploits0References11Affected Software6
OSV
OSV
added 2023/03/29 8:15 p.m.6 views

CVE-2020-14140

When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. This vulnerability is caused by the lack of access control policies on some API interfaces. Attackers can exploit this vulnerability to enter the background and execute...

7.5CVSS5.9AI score0.01031EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/28 12:0 a.m.6 views

PT-2023-2146 · Hitachi Energy · Sdm600

Name of the Vulnerable Software and Affected Versions: Hitachi Energy System Data Manager SDM600 versions prior to 1.2 FP3 HF4 Build Nr. 1.2.23000.291 Description: A vulnerability exists in the SDM600 endpoint, where an attacker could exploit this issue by running multiple parallel requests,...

9.4CVSS9.1AI score0.01442EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.9 views

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the slice.cc component in the h.265 Libde265 video codec implementation is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.1CVSS6.9AI score0.01321EPSS
SaveExploits1References10Affected Software5
OSV
OSV
added 2023/03/23 5:15 p.m.5 views

CVE-2023-20107

A vulnerability in the deterministic random bit generator DRBG, also known as pseudorandom number generator PRNG, in Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software for Cisco ASA 5506-X, ASA 5508-X, and ASA 5516-X Firewalls could allow an...

7.5CVSS6.1AI score0.00717EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:0 a.m.8 views

The vulnerabilities of the microprogramming software on Moxa’s computing platform series, UC-8100A-ME-T, UC-8200, UC-8410A, UC-2100, UC-2100-W, UC-3100, UC-5100, UC-8100, UC-8580, and UC-8540, allow attackers to gain increased privileges.

The vulnerability of the microprogramming software on Moxa’s computing platforms series UC-8100A-ME-T, UC-8200, UC-8410A, UC-2100, UC-2100-W, UC-3100, UC-5100, UC-8100, UC-8580, and UC-8540 is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance...

7.6CVSS6.7AI score0.00316EPSS
SaveExploits0References3Affected Software10
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:0 a.m.6 views

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.3AI score0.00596EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/17 12:0 a.m.9 views

The vulnerability of the SAP NetWeaver AS for Java software platform, related to deficiencies in authentication procedures, allows attackers to gain read, modify, or delete access to data, or to cause service interruptions.

The vulnerability of the SAP NetWeaver AS for Java software platform is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain read, modify, or delete access to data, or cause service interruptions...

9.9CVSS7.6AI score0.00544EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder