Lucene search
+L

13382 matches found

BDU FSTEC
BDU FSTEC
•added 2023/12/06 12:00 a.m.•20 views

PowerShell Disclosure Sensitive Information

The vulnerability of PowerShell command interpreters on Windows operating systems is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information remotely...

6.8CVSS6.5AI score0.01436EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/06 12:00 a.m.•23 views

Updater service Parallels Desktop Privilege Escalation

The vulnerability of the Toolgate controller in Parallels Desktop lies in initialization errors. Exploiting this vulnerability allows an attacker to execute arbitrary code and enhance their privileges...

7.8CVSS7.7AI score0.00363EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2023/12/06 12:00 a.m.•23 views

Toolgate Component Code Execution

The vulnerability of the Toolgate controller in Parallels Desktop involves synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

7.5CVSS7.6AI score0.00405EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2023/12/06 12:00 a.m.•19 views

PT-2023-29099 · Unknown · Kernel Module

Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to data verification errors in the kernel module. Successful exploitation may cause WLAN interruption. Recommendations: At the moment, there is no information abo...

7.5CVSS7.2AI score0.00515EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2023/12/05 6:15 p.m.•24 views

jupyter-server errors include tracebacks with path information

Impact Unhandled errors in API requests include traceback information, which can include path information. There is no known mechanism by which to trigger these errors without authentication, so the paths revealed are not considered particularly sensitive, given that the requesting user has...

4.3CVSS7AI score0.00841EPSS
SaveExploits0References7Affected Software1
osv_ghsa
osv_ghsa
•added 2023/12/05 6:15 p.m.•41 views

GHSA-H56G-GQ9V-VC8R jupyter-server errors include tracebacks with path information

Impact Unhandled errors in API requests include traceback information, which can include path information. There is no known mechanism by which to trigger these errors without authentication, so the paths revealed are not considered particularly sensitive, given that the requesting user has...

4.3CVSS4.2AI score0.00841EPSS
SaveExploits0References7
Veracode
Veracode
•added 2023/12/05 7:03 a.m.•28 views

Information Disclosure

jupyterserver is vulnerable to Information Disclosure. An information disclosure flaw exists due to unhandled errors in API requests. While not directly allowing unauthorized access, these errors may leak sensitive path information in responses, potentially revealing sensitive server details to...

4.3CVSS6.1AI score0.00841EPSS
SaveExploits0References4Affected Software2
Code423n4
Code423n4
•added 2023/12/05 12:00 a.m.•28 views

An attacker can manipulate the preDepositvePrice to steal from other users.

Lines of code Vulnerability details Impact The first user that stakes can manipulate the total supply of sfTokens and by doing so create a rounding error for each subsequent user. In the worst case, an attacker can steal all the funds of the next user. Proof of Concept When the first user enters...

6.9AI score
SaveExploits0
Prion
Prion
•added 2023/12/04 9:15 p.m.•25 views

Design/Logic Flaw

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...

4CVSS6.7AI score0.00841EPSS
SaveExploits0References4Affected Software1
osv_ubuntu
osv_ubuntu
•added 2023/12/04 9:15 p.m.•23 views

UBUNTU-CVE-2023-49080

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...

4.3CVSS6.1AI score0.00841EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2023/12/04 9:15 p.m.•31 views

CVE-2023-49080

The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. Unhandled errors in API requests coming from an authenticated user include traceback information, which can include path information...

4.3CVSS5.8AI score0.00841EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/12/04 12:00 a.m.•16 views

Adobe InDesign Pointer Error DoS

The vulnerability of Adobe InDesign’s computer layout automation tool is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00313EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/04 12:00 a.m.•17 views

Private Key Handler Disclosure

The vulnerability of the Private Key Handler component in the server that unlocks encrypted disks of the Tang service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

5.3CVSS5.8AI score0.00568EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•23 views

Intel Graphics Driver DoS

The vulnerability of the graphics driver of Intel microprogramming systems is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

6.1CVSS5.9AI score0.00206EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•20 views

McAfee Web Gateway DoS

The vulnerability of the McAfee Web Gateway is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

7.8CVSS7.2AI score0.0239EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•27 views

ownCloud WebDAV Authentication Bypass

The vulnerability of the WebDAV application interface for data synchronization with ownCloud is related to initialization errors caused by the lack of configuration of signature keys for pre-signed URL addresses. Exploiting this vulnerability allows an attacker to bypass authentication procedures...

10CVSS8AI score0.4319EPSS
SaveExploits2References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•20 views

Linux nft_inner.c Network Interface Buffer Overflow Privilege Escalation

The vulnerability of the nftinner.c component in the Linux operating system’s network interface layer is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

7.8CVSS6.4AI score0.00276EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•20 views

Graphic Drivers Pointer Swapping System Failure

The vulnerability of graphics drivers in microprogramming software for Intel processors is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.6CVSS5.9AI score0.00181EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/11/30 12:00 a.m.•13 views

GIMP PSP-files Code Execution

The vulnerability of the PSP-files of the GIMP graphic editor is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.56129EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
•added 2023/11/29 12:00 a.m.•23 views

Honeywell ProWatch RCE

The vulnerability of the Honeywell ProWatch software platform for remote monitoring and control is related to data processing errors. Exploiting this vulnerability could allow a intruder to execute arbitrary code...

7.8CVSS7.6AI score0.00195EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder