Lucene search
+L

541 matches found

BDU FSTEC
BDU FSTEC
added 2019/09/10 12:00 a.m.13 views

The vulnerability of Cisco Enterprise NFV Infrastructure Software (NFVIS) arises from insufficient validation of input data, allowing attackers to disclose sensitive information that should be protected.

The vulnerability of Cisco Enterprise NFV Infrastructure Software NFVIS exists due to insufficient testing of input data. Exploiting this vulnerability could allow a attacker to disclose protected information...

4.9CVSS5.5AI score0.00351EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/30 12:00 a.m.9 views

Vulnerability of the software complex: Regional electronic budget. An integration platform related to deficiencies in the authentication mechanism, allowing a violator to determine whether a user with a specific login exists.

Vulnerability of the software complex: Regional electronic budget. The integration platform is linked to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to determine whether a user with a specific login exists...

5.3CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/25 12:00 a.m.12 views

The vulnerability of the Territory Administration sub-component of the Oracle Territory Management component of the Oracle E-Business Suite allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Territory Administration sub-component of the Oracle Territory Management component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add...

8.5CVSS5.5AI score0.01238EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/11 12:00 a.m.10 views

The vulnerability of the Windows Shell component in operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Shell component in operating systems is related to deficiencies in the checking of folder shortcuts. Exploiting this vulnerability can allow an attacker to increase their privileges...

8.8CVSS5.5AI score0.01265EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:00 a.m.10 views

The vulnerability of the CxUtilSvc component of the Synaptics Sound Device driver, which allows a hacker to increase their privileges in the Windows registry.

The vulnerability of the CxUtilSvc component of the Synaptics Sound Device driver is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges in the Windows registry by using the API...

8.8CVSS5.5AI score0.00998EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/24 12:00 a.m.11 views

The vulnerability of the Intel Media SDK library’s library collection is related to deficiencies in access control, allowing attackers to enhance their privileges.

The vulnerability of the Intel Media SDK library collection is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.2AI score0.00329EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/05/24 12:00 a.m.11 views

The vulnerability of the Platform Sample/Silicon Reference processor components of Intel Core processors allows a hacker to execute arbitrary code.

The vulnerability of the Platform Sample/Silicon Reference processors of Intel Core relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

2.3CVSS7AI score0.0045EPSS
SaveExploits0References3
OSV
OSV
added 2019/05/03 3:29 p.m.9 views

CVE-2018-15462

A vulnerability in the TCP ingress handler for the data interfaces that are configured with management access to Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an increase in CPU and memory usage, resulting in a denial of service DoS condition...

7.5CVSS5.8AI score0.02056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:00 a.m.18 views

The vulnerability of the sub-component of the Core RDBMS system for database management, Oracle Database Server, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the Oracle Net...

5.3CVSS6.2AI score0.01227EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/30 12:00 a.m.9 views

Vulnerability of the Server component: The Replication feature of the Oracle MySQL Server database management system, which allows users to trigger a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

5.1CVSS6.5AI score0.00431EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/23 12:00 a.m.23 views

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization tool, which allows a hacker to gain full control over the application

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization tool is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.8CVSS7.6AI score0.00514EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:00 a.m.10 views

The vulnerability of Windows Admin Center’s server management tool, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Windows Admin Center server management tool is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

9.8CVSS7.7AI score0.03537EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:00 a.m.10 views

The vulnerability of the function implementing the ACL mechanism in the Gigabit Ethernet Management component of the Cisco IOS XE operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the function that implements the ACL mechanism in the Gigabit Ethernet Management component of the Cisco IOS XE operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected...

5.3CVSS5.8AI score0.04395EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/26 12:00 a.m.8 views

The vulnerability of the Microsoft Dynamics 365 customer relationship management system, related to inadequate access control, allows a malicious individual to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 customer relationship management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending a specially crafted request to the vulnerable server...

6.5CVSS6.9AI score0.01763EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/15 12:00 a.m.8 views

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service interruptions using the MySQL protocol...

4.9CVSS6.4AI score0.0256EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/02/15 12:00 a.m.11 views

The vulnerability of the ImageIO component (libjpeg) in Oracle Java SE and Java SE Embedded software platforms allows a hacker to cause a system failure.

The vulnerability of the ImageIO component libjpeg in Oracle Java SE and Java SE Embedded software is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.5CVSS6.4AI score0.0501EPSS
SaveExploits1References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/02/12 12:00 a.m.12 views

The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data usi...

6.1CVSS6.7AI score0.01542EPSS
SaveExploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2019/02/07 6:16 p.m.26 views

Authentication Bypass by Spoofing in express-cart

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

8.8CVSS5.8AI score0.01156EPSS
SaveExploits1References3Affected Software1
Prion
Prion
added 2019/02/01 6:29 p.m.23 views

Improper access control

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

6.5CVSS8.6AI score0.01156EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2019/02/01 6:29 p.m.20 views

CVE-2018-16483

A deficiency in the access control in module express-cart =1.1.5 allows unprivileged users to add new users to the application as administrators...

8.8CVSS8.6AI score0.01156EPSS
SaveExploits1References1
Rows per page
Query Builder