Lucene search
+L

11727 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.12 views

The vulnerability of the Windows operating system, related to errors in the code, allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.03846EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.9 views

The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.3AI score0.02266EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.14 views

The vulnerability of the Windows operating system, related to errors in the code, allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.03459EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.12 views

The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.2AI score0.01865EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.12 views

The vulnerability of the Windows Hyper-V hardware virtualization system for Windows operating systems arises from synchronization errors when using shared resources (“Race Conditions”). This allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.8AI score0.00552EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.15 views

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software, related to security mechanism errors, allows a intruder to remove the user from the system.

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software is related to security mechanism errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to remove a user using a specially created network package...

7.8CVSS7.4AI score0.00994EPSS
SaveExploits0References7Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/06/10 12:0 a.m.11 views

The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.2AI score0.01865EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/06/09 12:0 a.m.12 views

The vulnerability of the Bluetooth driver for Microsoft Windows operating systems, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

8.8CVSS7.2AI score0.0034EPSS
SaveExploits0References3
Debian
Debian
added 2022/06/08 7:42 p.m.73 views

[SECURITY] [DLA 3048-1] python-bottle security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-3048-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta June 09, 2022 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

9.8CVSS9.5AI score0.01994EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/06/08 12:36 p.m.5 views

java-11-openj9,java-1_8_0-openj9: unverified methods can be invoked using MethodHandles

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.3CVSS7.3AI score0.01014EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/07 12:0 a.m.13 views

The vulnerability of component ADF Faces in the Oracle Jdeveloper software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of component ADF Faces in the Oracle Jdeveloper software is related to errors in the code. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information through HTTP requests...

10CVSS7.1AI score0.62478EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/07 12:0 a.m.12 views

Microsoft Edge’s vulnerability, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

8.3CVSS7.4AI score0.01797EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/06 12:0 a.m.11 views

The vulnerability of the DNS Server component of the Windows operating system, related to synchronization errors when using a shared resource (“Race Situation”), allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9CVSS7.7AI score0.03713EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/06 12:0 a.m.6 views

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to resource management errors, which can be exploited by attackers to cause a local privilege escalation that requires system execution privileges...

6.7CVSS5.8AI score0.00111EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/06 12:0 a.m.10 views

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow a attacker to enhance their privileges...

7.8CVSS7.3AI score0.00513EPSS
SaveExploits0References3
Code423n4
Code423n4
added 2022/06/06 12:0 a.m.10 views

Upgraded Q -> M from 135 [1654503723748]

Judge has assessed an item in Issue 135 as Medium risk. The relevant finding follows: --- The text was updated successfully, but these errors were encountered: All reactions...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/06/06 12:0 a.m.14 views

The vulnerability of the DNS Server component of the Windows operating system, related to synchronization errors when using a shared resource (“Race Situation”), allows a perpetrator to execute arbitrary code.

The vulnerability of the DNS Server component of the Windows operating system is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

8.5CVSS7.3AI score0.01687EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/06/03 10:19 p.m.66 views

Dev error stack trace leaking into prod in Play Framework

Impact Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception stack trace. Play does this by configuring its DefaultHttpErrorHandler to do so based on the application mode. In its Scala API Play also provides a static object DefaultHttpErrorHandler...

7.5CVSS7.6AI score0.01259EPSS
SaveExploits0References5Affected Software2
Veracode
Veracode
added 2022/06/03 5:15 a.m.37 views

Validation Bypass

bottle is vulnerable to validation bypass. The library mishandles errors in handle function during early request binding, allowing an attacker to compromise the target system...

9.8CVSS8.8AI score0.01994EPSS
SaveExploits0References9Affected Software3
Github Security Blog
Github Security Blog
added 2022/06/03 12:1 a.m.37 views

Denial of service in bottle

Bottle before 0.12.20 mishandles errors during early request binding...

9.8CVSS9AI score0.01994EPSS
SaveExploits0References10Affected Software1
Rows per page
Query Builder