Lucene search
+L

261 matches found

BDU FSTEC
BDU FSTEC
added 2018/01/24 12:00 a.m.18 views

The vulnerability of the centralized version control system CVS lies in its improper handling of data when interacting with a remote repository via SSH protocol. This allows a malicious actor to execute arbitrary code.

The vulnerability of the centralized version control system CVS is related to improper data processing when interacting with a remote repository via SSH protocol. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted hostname in the repository’...

7.5CVSS7.2AI score0.06017EPSS
SaveExploits1References8Affected Software2
CNVD
CNVD
added 2017/12/21 12:00 a.m.8 views

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-00215)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A security vulnerability exists in Foxit Reader version 8.3.1.21155, which is caused by the program failing to properly validate user-submitted data. The vulnerability can be exploited by a remote attacker to execute...

8.8CVSS7.3AI score0.0259EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/12/21 12:00 a.m.8 views

Foxit Reader Information Disclosure Vulnerability (CNVD-2018-00217)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A security vulnerability exists in Foxit Reader version 8.3.2.25013, which is caused by the program failing to properly validate user-submitted data. The vulnerability can be exploited by a remote attacker to disclos...

6.5CVSS6.4AI score0.02456EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/12/07 12:00 a.m.12 views

The vulnerability of the microprogrammed software in wireless presentation systems like ClickShare CSM-1 and ClickShare CSC-1, related to incorrect data processing, allows a intruder to execute arbitrary code.

The vulnerability of the microprogrammed software in Barco ClickShare CSM-1 and ClickShare CSC-1 wireless presentation systems is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the affected application remotely...

10CVSS8.2AI score0.07798EPSS
SaveExploits1References5Affected Software2
CNVD
CNVD
added 2017/07/05 12:00 a.m.9 views

IBM Maximo Asset Management Local Information Disclosure Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A local...

3.3CVSS5.9AI score0.00322EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/06/30 12:00 a.m.14 views

The vulnerability of the Windows operating system’s kernel allows a hacker to execute code within the context of a privileged process.

The vulnerability of the Windows operating system’s kernel is related to improper data handling in the device’s memory. Exploiting this vulnerability allows a local attacker to execute code within the context of a privileged process...

7.2CVSS7.5AI score0.02341EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:00 a.m.15 views

The vulnerability of the Junos operating system’s jdhcpd daemon allows a attacker to cause the application to terminate and restart, thereby triggering a service failure.

The vulnerability of the Junos operating system’s jdhcpd component is related to improper data processing. Exploiting this vulnerability can allow a remote attacker to cause the application to stop working and restart, as well as trigger a service failure using a specially crafted DHCPv6 packet...

7.8CVSS7.3AI score0.02132EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/08 12:00 a.m.18 views

The vulnerabilities in Microsoft Word, Skype for Business, Microsoft Office, Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft Office Web Apps, and Office Online Server allow attackers to execute arbitrary code.

The vulnerabilities of Microsoft Word, Skype for Business, Microsoft Office, Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft Office Web Apps, and Office Online Server are related to improper data processing. Exploiting these vulnerabilities allows a malicious actor to...

9.3CVSS7.7AI score0.15757EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/08 12:00 a.m.15 views

The vulnerability of the Microsoft Office software package, which allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.3CVSS7.9AI score0.81005EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2017/06/08 12:00 a.m.16 views

The vulnerability of the Microsoft Server Message Block 1.0 (SMBv1) network protocol on the Windows operating system allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the Microsoft Server Message Block 1.0 SMBv1 operating system in Windows is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures by manipulating certain requests...

9.3CVSS7.9AI score0.17121EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2017/04/25 12:00 a.m.287 views

Ubuntu: Security Advisory (USN-3265-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.4AI score0.04953EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:00 a.m.10 views

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to improper data processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

6.8CVSS8.1AI score0.42546EPSS
SaveExploits2References3
NVD
NVD
added 2017/02/22 7:59 p.m.28 views

CVE-2016-3013

IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference : 1998661...

6.5CVSS7AI score0.00906EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/02/02 12:00 a.m.15 views

The vulnerability of Google Chrome browser allows a perpetrator to execute arbitrary code or trigger a service denial.

The vulnerability of the Google Chrome browser’s Blink service is related to improper data processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

4.3CVSS7.2AI score0.01081EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/01/26 12:00 a.m.14 views

The vulnerability of Google Chrome browser allows a perpetrator to trigger an emergency termination of the application’s operation.

The vulnerability of the Blink component in Google Chrome browser is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially created HTML page...

4.3CVSS7.2AI score0.01081EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/01/26 12:00 a.m.16 views

The vulnerability of the Android operating system, which allows a perpetrator to cause the device to freeze or restart.

The vulnerability of the libstagefright component in Android operating system media servers is related to improper data processing. Exploiting this vulnerability can cause the device to become unstable or restart remotely controlled by an attacker...

7.1CVSS5.9AI score0.00529EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/01/26 12:00 a.m.15 views

The vulnerability of Google Chrome browser allows a perpetrator to execute arbitrary code or trigger a service denial.

The vulnerability of Google Chrome is related to improper data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service denial using a specially created HTML page...

4.3CVSS7.1AI score0.01346EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2016/11/22 12:00 a.m.16 views

Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...

4.3CVSS5.9AI score
SaveExploits0References1
Kaspersky
Kaspersky
added 2016/10/28 12:00 a.m.47 views

KLA10895 Denial of service vulnerability in RealNetworks RealPlayer

An improper data handling was found in RealNetworks RealPlayer. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed .QCP file. NB: This vulnerability have no public CVSS rating so rating can be changed...

5.5CVSS5.6AI score0.08094EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2016/07/04 12:00 a.m.15 views

The vulnerability of the Windows operating system, which allows a hacker to redirect network traffic

The vulnerability of the Web Proxy Auto Discovery protocol in the Windows operating system is related to incorrect data processing. Exploiting this vulnerability allows a malicious actor to redirect network traffic remotely...

10CVSS7.7AI score0.7677EPSS
SaveExploits2References3
Rows per page
Query Builder