Lucene search
+L

2035 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.6 views

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms allows a perpetrator to gain full control over the application.

The vulnerability of the Libraries component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application by using various network protoco...

8.3CVSS7.4AI score0.0623EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.6 views

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform allows a hacker to gain full control over the application.

The vulnerability of the Analytics Web General component of the Oracle Business Intelligence Enterprise Edition software platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the application through the HTTP network...

10CVSS7.7AI score0.71031EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.7 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

7.5CVSS7.3AI score0.00379EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.9 views

The vulnerability of the integrity_check command in the PRAGMA implementation of the SQLite database management system allows a hacker to gain full control over the application.

The vulnerability of the integritycheck command in the PRAGMA implementation of the SQLite database management system is related to insufficient checks for unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the...

10CVSS7.4AI score0.05376EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:0 a.m.11 views

The vulnerability of the Java VM component of the Oracle Database Server database management system allows a hacker to gain full control over the application.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application using the Oracle Net network protocol...

8CVSS7.4AI score0.01125EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:0 a.m.10 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain full control over the application.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the application using the Oracle Net network...

7.1CVSS6.7AI score0.01031EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.5 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

7CVSS7.1AI score0.00385EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.5 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

7.5CVSS7.3AI score0.00567EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.8 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

7.5CVSS7.3AI score0.00562EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.6 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.2CVSS7.3AI score0.00576EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.6 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain control over the application.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to lack of access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...

7.8CVSS7.3AI score0.00586EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/04/29 2:15 a.m.4 views

CVE-2020-8481

For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody...

9.8CVSS7.3AI score0.0181EPSS
SaveExploits0References2
NVD
NVD
added 2020/04/29 2:15 a.m.46 views

CVE-2020-8481

For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody...

10CVSS9.4AI score0.0181EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/04/29 1:30 a.m.56 views

CVE-2020-8481 ABB Central Licensing System - Information disclosure

For ABB products ABB Ability™ System 800xA and related system extensions versions 5.1, 6.0 and 6.1, Compact HMI versions 5.1 and 6.0, Control Builder Safe 1.0, 1.1 and 2.0, Symphony Plus -S+ Operations 3.0 to 3.2 Symphony Plus -S+ Engineering 1.1 to 2.2, Composer Harmony 5.1, 6.0 and 6.1, Melody...

9.8CVSS9.3AI score0.0181EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2020/04/21 10:55 a.m.5 views

tomcat: local privilege escalation

A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was enabled. A local attacker without access to the Tomcat process or configuration files could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The attacker could then capture user...

7CVSS7.1AI score0.01221EPSS
SaveExploits0References8
NVD
NVD
added 2020/04/20 11:15 p.m.15 views

CVE-2020-9279

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

10CVSS9.6AI score0.02187EPSS
SaveExploits1References3
Prion
Prion
added 2020/04/20 11:15 p.m.20 views

Hardcoded credentials

An issue was discovered on D-Link DSL-2640B B2 EU4.01B devices. A hard-coded account allows management-interface login with high privileges. The logged-in user can perform critical tasks and take full control of the device...

10CVSS9.4AI score0.02187EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2020/03/20 12:0 a.m.4 views

ZOHO ManageEngine Remote Access Plus Elevation of Privilege Vulnerability

ZOHO ManageEngine Remote Access Plus is a remote access solution from ZOHO. An elevation of privilege vulnerability exists in Zoho ManageEngine Remote Access Plus version 10.0.258, which can be exploited by an attacker to elevate privileges and take full control of the application...

8.8CVSS7.3AI score0.03019EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.7 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain full control over the system or execute arbitrary code.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain full control over the system or execute arbitrary code using a specially created documen...

6.7CVSS7.5AI score0.21983EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2020/03/17 1:13 p.m.6 views

tomcat: local privilege escalation

A privilege escalation flaw was found in Tomcat when the JMX Remote Lifecycle Listener was enabled. A local attacker without access to the Tomcat process or configuration files could be able to manipulate the RMI registry to perform a man-in-the-middle attack. The attacker could then capture user...

7CVSS7.1AI score0.01221EPSS
SaveExploits0References8
Rows per page
Query Builder