Lucene search
+L

48 matches found

BDU FSTEC
BDU FSTEC
added 2018/06/07 12:0 a.m.8 views

The vulnerability of the proxy.cgi component of Belkin N750 router software allows a hacker to execute arbitrary commands with root privileges.

The vulnerability of the proxy.cgi component of the Belkin N750 router’s microprogramming system is related to insufficient cleaning of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary commands with root privileges using specially crafte...

10CVSS5.9AI score0.06981EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/03/01 12:0 a.m.6 views

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.18518EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/03/01 12:0 a.m.8 views

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.18518EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/02/15 12:0 a.m.9 views

The vulnerability of the Cisco Unified Computing System (UCS) Manager, the microsoftware-based network interface card of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and the Cisco Firepower 9300 Security Appliance allows a attacker to gain access to the device with root privileges.

The vulnerability of the Cisco Unified Computing System UCS Manager, the microprogrammed network interface software of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW, and the Cisco Firepower 9300 Security Appliance is related to the lack of measures for input data cleansing...

7.8CVSS5.5AI score0.77071EPSS
Exploits3References4
BDU FSTEC
BDU FSTEC
added 2018/02/01 12:0 a.m.6 views

The vulnerability of AtHome IP Camera’s microprogramming software lies in the lack of measures to clean incoming data, allowing intruders to execute arbitrary commands.

The vulnerability of AtHome IP Camera microprogramming software is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary commands using the “noodles” service running on port 1300...

10CVSS5.9AI score0.07214EPSS
Exploits3References2
BDU FSTEC
BDU FSTEC
added 2017/04/20 12:0 a.m.8 views

The vulnerability of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system allows a intruder to inject arbitrary commands.

The vulnerability of the CLI component of the Cisco Firepower Extensible Operating System and the Cisco Unified Computing System Central device management system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary...

7.2CVSS7.3AI score0.0081EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/07/08 12:0 a.m.11 views

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to execute arbitrary code with system privileges.

The vulnerability of the Tivoli Storage Manager FastBack data management program is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with system privileges...

10CVSS8.2AI score0.05527EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2004/12/31 5:0 a.m.13 views

CVE-2004-2411

The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting XSS attacks that do not use tags, as demonstrated via javascript in IMG tags to 1 the cat parameter in...

4.3CVSS6AI score0.02193EPSS
Exploits1References8
Rows per page
Query Builder