Lucene search
+L

192 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.13 views

Microsoft Edge’s vulnerability, related to the use of memory after it is freed, allows attackers to compromise privacy, integrity, and accessibility of information.

The vulnerability of Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

8.8CVSS7.4AI score0.04125EPSS
SaveExploits0References5Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/01/04 12:0 a.m.12 views

The vulnerability of the Jenkins automation server, related to deficiencies in the authentication mechanism, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Jenkins automation server is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.7AI score0.02034EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.11 views

The vulnerability of the Jenkins automation server, related to deficiencies in the authentication mechanism, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Jenkins automation server is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.7AI score0.02034EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.10 views

The vulnerability of the Autofill component in the Microsoft Edge browser allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Autofill component in the Microsoft Edge browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

9.3CVSS7.3AI score0.04125EPSS
SaveExploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/09/10 12:0 a.m.11 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to data type mixing errors. These vulnerabilities allow attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to data type mixing errors. Exploiting these...

7.8CVSS5.4AI score0.01919EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:0 a.m.15 views

The vulnerability of web services in the Spring Framework software platform allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of web services in the Spring Framework is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of information...

10CVSS7.5AI score0.0411EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/12/24 12:0 a.m.12 views

The vulnerability of the Istio network software, related to authentication errors, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Istio network software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

7.5CVSS7.2AI score0.02606EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.9 views

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS7.2AI score0.00384EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/11 12:0 a.m.7 views

The vulnerability of the Cisco IOS XR command-line interface allows a attacker to compromise the integrity and accessibility of protected information.

The vulnerability of the Cisco IOS XR operating system’s command-line interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of protected information...

8.4CVSS7.2AI score0.00281EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/05 12:0 a.m.10 views

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.5CVSS7.3AI score0.00547EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.9 views

The vulnerability in the embedded software of NETGEAR routers such as NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850 exists due to the failure to take measures to eliminate special elements used in the operating system. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of NETGEAR’s embedded software, including models like NETGEAR RBK752, NETGEAR RBK753, NETGEAR RBK753S, NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBK842, NETGEAR RBR840, NETGEAR RBS840, NETGEAR RBK852, NETGEAR RBK853, NETGEAR RBR850, and NETGEAR RBS850, exists due to the lack of...

9.6CVSS7.8AI score0.0184EPSS
SaveExploits0References4Affected Software12
BDU FSTEC
BDU FSTEC
added 2020/05/08 12:0 a.m.8 views

The vulnerability of the printcontrol-web component lies in the lack of mechanisms for providing permissions, privileges, and access control. This allows attackers to manipulate the accessibility of information.

The vulnerability of the printcontrol-web component is related to the lack of mechanisms for granting permissions, privileges, and managing access control. Exploiting this vulnerability could allow an attacker to compromise the accessibility of information...

5.3CVSS5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.10 views

The vulnerability of the soup_ntlm_parse_challenge() function in the libsoup library allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the soupntlmparsechallenge function in the libsoup library arises due to an out-of-buffer operation in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity, confidentiality, and accessibility of the protected information...

10CVSS7.8AI score0.02784EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.8 views

The vulnerability of Qualcomm IPS’s PostScript- and PDF-compliant software interpreters, caused by a full-integer overflow, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Qualcomm IPS’s PostScript- and PDF-compliant software interpreters is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.8AI score0.01389EPSS
SaveExploits0References4Affected Software14
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.14 views

The vulnerability of the Qualcomm TZ App Handler component in the Android operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm TZ App Handler component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.5AI score0.01252EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/05/25 12:0 a.m.12 views

The vulnerability of the Qualcomm Access Control component in the Android operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Qualcomm Access Control component in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.5AI score0.01187EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/10/26 12:0 a.m.10 views

The vulnerability of the `sixel_output_create` function (coders/sixel.c) in the console-based graphic editor ImageMagick allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sixeloutputcreate function in the console-based image editing tool ImageMagick is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9.8CVSS7.7AI score0.03175EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2017/09/01 12:0 a.m.14 views

The vulnerability of the Keymaster component of the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Keymaster component of the Android operating system from the CAF repository is related to the lack of checks on buffer size. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.1AI score0.00836EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/09/19 12:0 a.m.13 views

The vulnerability of Oracle WebLogic Server application servers allows attackers to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Oracle WebLogic Server application server is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of information by manipulating components related to WLS Core Components...

10CVSS7.7AI score0.19775EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/11 12:0 a.m.15 views

Vulnerability of software platforms such as Flash Player and Flash Player for Linux, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.

The vulnerabilities of the Flash Player and Flash Player for Linux are related to errors in the code. Exploiting these vulnerabilities can allow a malicious actor to compromise the integrity, accessibility, and confidentiality of information...

9.3CVSS7.7AI score0.0381EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder