Lucene search
+L

313 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.13 views

The vulnerability of the Zoom video conferencing service, which stems from insufficient validation of input data, allows attackers to access protected information.

The vulnerability of the Zoom video conferencing service exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

7.8CVSS6.5AI score0.00962EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/29 12:0 a.m.7 views

The vulnerability of the WinRAR file archiver, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the WinRAR file archiver is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.3AI score0.97811EPSS
SaveExploits49References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/14 12:0 a.m.11 views

The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.8CVSS8.1AI score0.0247EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:0 a.m.11 views

The vulnerability of Windows Deployment Services for Windows operating systems stems from insufficient validation of input data, allowing a malicious actor to perform a service failure.

The vulnerability of Windows Deployment Services for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to perform a service failure remotely...

9CVSS7.7AI score0.01386EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.9 views

The vulnerability of the Windows Authentication component of the Windows operating system allows a perpetrator to carry out a DoS attack.

The vulnerability of the Windows Authentication component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute a DoS attack...

6.8CVSS7.1AI score0.01823EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/07/19 12:0 a.m.12 views

Vulnerability of the Microsoft Office Graphics Package components in Microsoft Office programs, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Office Graphics Package components in Microsoft Office products is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00631EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/07/17 12:0 a.m.15 views

The vulnerability of the Remote Procedure Call (RPC) technology in Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Procedure Call RPC technology in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

6.8CVSS6.9AI score0.0163EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.13 views

The vulnerability of Rockwell Automation’s distributed controller software ArmorStart ST, related to deficiencies in input data validation by users, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the microprogramming software for Rockwell Automation’s ArmorStart ST distributed controllers is related to deficiencies in the validation of user-input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks remotely...

6.5CVSS6.3AI score0.0062EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/05/10 12:0 a.m.18 views

The vulnerability of the udmabuf_vm_fault() function in the drivers/dma-buf/udmabuf.c module of Linux kernel allows a attacker to escalate their privileges and execute arbitrary code.

The vulnerability of the udmabufvmfault function in the drivers/dma-buf/udmabuf.c module of Linux operating systems is related to unvalidated array indexing due to incorrect data validation. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

8.2CVSS7.1AI score0.0101EPSS
SaveExploits1References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.14 views

The vulnerability of the Secure Channel component in Windows operating systems, which allows a hacker to cause a service failure

The vulnerability of the Secure Channel component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

7.8CVSS7.3AI score0.01731EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/25 12:0 a.m.7 views

The vulnerability in the implementation of the Secure Socket Tunneling Protocol (SSTP) on Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.01986EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/22 12:0 a.m.9 views

The vulnerability of the Network Address Translation (NAT) technology implementation in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Network Address Translation NAT technology implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using specially created data...

7.8CVSS7.3AI score0.01936EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.10 views

The vulnerability of the Microsoft Visual Studio software allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.00681EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/04/14 12:0 a.m.10 views

The vulnerability of the Microsoft Office software package, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.03011EPSS
SaveExploits4References2
BDU FSTEC
BDU FSTEC
added 2023/04/12 12:0 a.m.25 views

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE allows a hacker to trigger a service failure.

The vulnerability of the HTTP-based client profiling function in Cisco IOS XE exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.4CVSS6.5AI score0.00303EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/07 12:0 a.m.9 views

The vulnerability of the IBM DB2 database management system, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the IBM DB2 database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure by executing the Load command...

6.2CVSS7.2AI score0.00739EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/24 12:0 a.m.12 views

The vulnerability of the formWriteFacMac function in the Tenda AC1206 router software allows a hacker to execute arbitrary commands.

The vulnerability of the formWriteFacMac function in the Tenda AC1206 router microprogramming system is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary commands...

10CVSS8.1AI score0.02537EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.8 views

The vulnerability in the implementation of the Internet Key Exchange (IKE) protocol in Windows operating systems allows a hacker to induce a service failure.

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.3AI score0.01654EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.13 views

The vulnerability of the Windows Media Foundation component in Windows operating systems allows attackers to execute arbitrary code.

The vulnerability of the Windows Media Foundation component in Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00598EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.13 views

The vulnerability of Microsoft Excel, Office, and Office 365 software lies in insufficient validation of input data, which allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel, Office, and Office 365 packages is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to execute arbitrary code using a specially created file...

7.8CVSS7.7AI score0.02532EPSS
SaveExploits3References2
Rows per page
Query Builder