Lucene search
+L

11717 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/17 12:0 a.m.25 views

The vulnerability of the HPE OneView IT infrastructure management system, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the HPE OneView IT infrastructure management system is related to authentication errors. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00283EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:0 a.m.9 views

The vulnerability of the TeamPass password manager, related to security configuration errors, allows a hacker to execute arbitrary PHP code.

The vulnerability of the TeamPass password manager is related to security configuration errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary PHP code...

9.1CVSS5.8AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/16 12:0 a.m.10 views

The vulnerability of the xenbus component of the Xen hypervisor allows a attacker to cause a service failure.

The vulnerability of the xenbus component of the Xen hypervisor arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6.4AI score0.00365EPSS
SaveExploits0References35Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/08/16 12:0 a.m.11 views

The vulnerability of the netfront component in the Xen hypervisor allows a attacker to trigger a service failure.

The vulnerability of the netfront component in Xen hypervisors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6.4AI score0.00348EPSS
SaveExploits0References35Affected Software7
OSV
OSV
added 2022/08/15 10:1 p.m.9 views

OPENSUSE-SU-2022:10088-1 Security update for opera

This update for opera fixes the following issues: Opera was updated to 89.0.4447.71 - CHR-8957 Update chromium on desktop-stable-103-4447 to 103.0.5060.134 - DNA-100492 authPrivate.storeCredentials should work with running auth session - DNA-100649 “Sign out” from settings doesn’t also sign out...

8.8CVSS7.3AI score0.70461EPSS
SaveExploits0References10
OSV
OSV
added 2022/08/15 10:1 p.m.10 views

OPENSUSE-SU-2022:10087-1 Security update for opera

This update for opera fixes the following issues: opera was updated to 89.0.4447.71 - CHR-8957 Update chromium on desktop-stable-103-4447 to 103.0.5060.134 - DNA-100492 authPrivate.storeCredentials should work with running auth session - DNA-100649 “Sign out” from settings doesn’t also sign out...

8.8CVSS7.1AI score0.70461EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2022/08/15 12:0 a.m.6 views

CVE-2021-39086

IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the...

5.3CVSS6AI score0.00915EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/08/15 12:0 a.m.47 views

GLSA-202208-29 : Nokogiri: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-29 Nokogiri: Multiple Vulnerabilities - Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schema...

8.2CVSS6.9AI score0.03549EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2022/08/15 12:0 a.m.12 views

The vulnerability of the Modbus TCP protocol implementation in microprogrammed software for programmable logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, Legacy Modicon Quantum, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Modbus TCP protocol implementation in microprogrammed logic controllers from Schneider Electric, such as Modicon M340, M580, MC80, Modicon Momentum MDI, and Legacy Modicon Quantum, is related to errors in information processing. Exploiting this vulnerability can allow an...

7.8CVSS7.2AI score0.00624EPSS
SaveExploits0References2Affected Software3
Code423n4
Code423n4
added 2022/08/13 12:0 a.m.12 views

Upgraded Q -> H from 54 [1660349227136]

Judge has assessed an item in Issue 54 as High risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

7AI score
SaveExploits0
Code423n4
Code423n4
added 2022/08/13 12:0 a.m.10 views

Upgraded Q -> H from 210 [1660349369322]

Judge has assessed an item in Issue 210 as High risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.13 views

The vulnerability of the Computational Fluid Dynamics Simcenter STAR-CCM+ software for simulation applications is related to errors in information processing. This vulnerability allows attackers to gain unauthorized access to protected information about the host and the names of users being displayed by the software.

The vulnerability of the Computational Fluid Dynamics Simulation software, Simcenter STAR-CCM+, is related to errors in information processing. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information about the host and the identities of the...

5.3CVSS7.2AI score0.00614EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.10 views

The vulnerability of Microsoft Windows Defender, a security software for Windows operating systems, allows a hacker to bypass the Kerberos authentication process.

The vulnerability of Microsoft Windows Defender operating system is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass the Kerberos authentication process...

6CVSS6.8AI score0.01186EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.11 views

The vulnerability of the Linux operating system’s kernel memory management subsystem, which allows attackers to increase their privileges

The vulnerability of the Linux operating system’s kernel memory management subsystem is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS6.7AI score0.0092EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.12 views

The vulnerability of the Secure Socket Tunneling Protocol (SSTP) implementation in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in the Windows operating system is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.1CVSS8AI score0.01813EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.11 views

The vulnerability of the StorageGRID object storage software, related to errors in information processing, allows a perpetrator to gain unauthorized access to protected information or modify the content of notifications.

The vulnerability of the StorageGRID object storage software lies in errors during information processing. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information or modify the content of notifications...

6.5CVSS6.5AI score0.007EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.17 views

The vulnerability of Microsoft Excel editors, related to security configuration errors, allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Excel editors is related to security configuration errors. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

7.3CVSS7.3AI score0.00806EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.11 views

The vulnerability of the biometric authentication function of the Windows Hello operating system allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the biometric authentication function of the Windows Hello operating system is related to security configuration errors. Exploiting this vulnerability could allow a hacker to circumvent existing security restrictions...

6.6CVSS6.8AI score0.00641EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/12 12:0 a.m.14 views

The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code or gain unauthorized access to the device.

The vulnerability of the Windows Hyper-V hardware virtualization system arises due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code or gain unauthorized access to the device...

7.8CVSS7.8AI score0.00335EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2022/08/11 12:0 a.m.18 views

Adobe Acrobat 2017 Security Update (APSB22-39) - Mac OS X

Adobe Acrobat Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

7.8CVSS6AI score0.06911EPSS
SaveExploits0References1
Rows per page
Query Builder