Lucene search
+L

581 matches found

BDU FSTEC
BDU FSTEC
added 2021/06/01 12:0 a.m.10 views

The vulnerability of the virtual learning environment Moodle, which stems from insufficient verification of input data, allows a intruder to gain unauthorized access to protected information.

The vulnerability in the virtual learning environment Moodle exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS6.6AI score0.01017EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/04/28 1:15 p.m.3 views

CVE-2021-22331

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

7.5CVSS5.8AI score0.00721EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.6 views

The vulnerability of the self-service portal systems for call processing in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition allows a intruder to compromise data integrity.

The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition call management systems exists due to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity...

4.3CVSS5.5AI score0.00615EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.13 views

The vulnerability in the web administration panel of Microprogrammed software for Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 allows a hacker to add IP addresses to a white list.

The vulnerability of the web-based administration panel of Microprogramming software for Netgear ProSafe Plus JGS516PE and ProSAFE Plus GS116Ev2 lies in insufficient verification of input parameters. Exploiting this vulnerability allows an attacker to add IP addresses to a white list using the...

7.2CVSS7.1AI score0.0112EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:0 a.m.6 views

The vulnerability of the Omnibox address bar in Google Chrome allows a hacker to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

4.3CVSS6.4AI score0.01307EPSS
SaveExploits1References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:0 a.m.6 views

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a hacker to gain access to confidential data.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

4.3CVSS6.4AI score0.01306EPSS
SaveExploits0References14Affected Software5
OSV
OSV
added 2021/03/12 7:15 p.m.5 views

CVE-2021-21726

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

2.3CVSS5.8AI score0.00373EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/12 7:15 p.m.28 views

CVE-2021-21726

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

2.3CVSS0.00373EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/12 7:15 p.m.17 views

Input validation

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

2.1CVSS4AI score0.00373EPSS
SaveExploits0References1Affected Software3
CVE
CVE
added 2021/03/12 6:5 p.m.64 views

CVE-2021-21726

CVE-2021-21726 affects ZTE ZXONE series (ZXONE 9700, ZXONE 8700, ZXONE 19700) with specific firmware/version identifiers (e.g., V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set). The vulnerability is an input verification flaw in the diagnostic function interface caused by insuff...

2.3CVSS4AI score0.00373EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/03/12 6:5 p.m.36 views

CVE-2021-21726

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

4AI score0.00373EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/06 3:15 a.m.20 views

Buffer overflow

There is a buffer overflow vulnerability in Mate 30 10.1.0.126C00E125R5P3. A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service...

2.1CVSS4.4AI score0.00203EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2021/02/06 3:15 a.m.20 views

Design/Logic Flaw

There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service...

3.6CVSS6.7AI score0.00232EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:0 a.m.7 views

The vulnerability of the Push API interface on Mozilla Firefox’s browser allows a perpetrator to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the Push API interface of Mozilla Firefox’s browser is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service failures...

8.5CVSS7.7AI score0.01605EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/12/24 12:0 a.m.10 views

The vulnerability of the Fanuc 32i numerical program-controlled controller lies in the insufficient verification of input data, allowing a intruder to trigger a service failure.

The vulnerability of the Fanuc 32i numerical program-controlled controller is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure using specially crafted network packets...

6.5CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.8 views

The vulnerability of the command-line interface of the StarOS operating system, which allows a hacker to gain increased privileges

The vulnerability of the StarOS command-line interface is related to errors during command input verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...

4.6CVSS6.6AI score0.00377EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.7 views

The vulnerability of the command-line interface of the StarOS operating system, which allows a hacker to gain increased privileges

The vulnerability of the StarOS command-line interface is related to errors during command input verification. Exploiting this vulnerability can allow an attacker to gain increased privileges...

6.4CVSS6.6AI score0.00387EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.7 views

The vulnerability of the Cisco Discovery Protocol implementation in the microsoftware-based IP camera of the Cisco Video Surveillance 8000 Series allows a intruder to execute arbitrary code.

The vulnerability of the Cisco Discovery Protocol implementation in Cisco Video Surveillance 8000 Series software-based IP cameras exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8.8CVSS8AI score0.00746EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:0 a.m.7 views

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, stems from insufficient verification of input data. This vulnerability allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Intel Data Center Manager Console, a software tool for collecting and analyzing data on the performance, power consumption, and temperature of various devices, exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor...

4CVSS6.5AI score0.00863EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/01 12:0 a.m.9 views

The vulnerability of the ldb microprogramming software services for Qualcomm’s IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, and QCA9980 products exists due to insufficient verification of input data. This allows attackers to execute arbitrary codes.

The vulnerability of the ldb microprogramming software for Qualcomm’s IPQ4019, IPQ6018, IPQ8064, IPQ8074, QCA4531, QCA9531, and QCA9980 products exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.20075EPSS
SaveExploits1References5
Rows per page
Query Builder