Lucene search
+L

581 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/15 12:0 a.m.6 views

The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment component of the Oracle E-Business Suite allows a perpetrator to gain access to and modify data.

The vulnerability of the Print Server sub-component of the Oracle One-to-One Fulfillment component in the Oracle E-Business Suite exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to read, modify, add,...

8.2CVSS7.4AI score0.01282EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2020/05/13 6:15 p.m.4 views

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

9.8CVSS7.4AI score0.07131EPSS
SaveExploits0References3
NVD
NVD
added 2020/05/13 6:15 p.m.22 views

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

9.8CVSS9.4AI score0.07131EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2020/05/13 5:52 p.m.28 views

CVE-2020-12832

WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input...

9.4AI score0.07131EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.7 views

The vulnerability of the user interface in Google Chrome’s Omnibox allows a perpetrator to compromise data integrity.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

4.3CVSS6.6AI score0.01166EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:0 a.m.7 views

The vulnerability of Google Chrome’s browser extension security policies allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s browser extension security policies is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through the created HTML page...

7.1CVSS6.5AI score0.01584EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:0 a.m.8 views

The vulnerability of the Omnibox mechanism in the Google Chrome browser, related to the lack of a mechanism for checking entered data, allows a perpetrator to compromise the integrity of the data.

The vulnerability of the Omnibox mechanism in the Google Chrome browser is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to manipulate the integrity of data by creating a malicious HTML page...

7.1CVSS7AI score0.0136EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/13 12:0 a.m.6 views

The vulnerability of the Google Chrome browser’s Omnibox user interface lies in the lack of a mechanism for verifying the accuracy of entered data. This allows attackers to compromise the integrity of the data.

The vulnerability of the user interface in Google Chrome’s Omnibox is related to the lack of a mechanism for verifying the entered data. Exploiting this vulnerability allows an attacker to affect the integrity of data by using a created domain name...

7.1CVSS7AI score0.01313EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.8 views

The vulnerability of the SINAMICS PERFECT HARMONY GH180 driver software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the device.

The vulnerability of SINAMICS PERFECT HARMONY GH180 driver software is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of the device...

7.2CVSS6.7AI score0.00316EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.9 views

The vulnerability of the microprogramming software for Siemens SIMATIC S7-1500 CPU Family programmable logic controllers allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created network packets...

7.8CVSS7.2AI score0.01986EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.7 views

The vulnerability of the microprogramming software for Siemens Simatic SIMATIC S7-1500 CPU Family allows a intruder to trigger a service failure.

The vulnerability of microprogrammed software in Siemens SIMATIC S7-1500 CPU Family programmable logic controllers is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially created network packets...

7.8CVSS7.2AI score0.01986EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.8 views

The vulnerability of the Security Audit Log of the SAP HANA database management system allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Security Audit Log of the SAP HANA database management system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

4CVSS5.3AI score0.0093EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/24 12:0 a.m.8 views

The vulnerability of the LDAP server component in Samba’s network communication software allows a hacker to induce a service failure.

The vulnerability of the Samba network communication component’s LDAP server is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker to cause service failures...

6.5CVSS7AI score0.10839EPSS
SaveExploits0References4Affected Software2
Packet Storm
Packet Storm
added 2019/12/30 12:0 a.m.102 views

HomeAutomation 3.3.2 Open Redirect

HomeAutomation v3.3.2 Open Redirect Vendor: Tom Rosenback and Daniel Malmgren Product web page: http://karpero.mine.nu/ha/ Affected version: 3.3.2 Summary: HomeAutomation is an open-source web interface and scheduling solution. It was initially made for use with the Telldus TellStick, but is now...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/12/26 12:0 a.m.8 views

The vulnerability of the EFI_BOOT_SERVICES component of Hewlett-Packard Development Company L.P.’s desktop workstations, personal computers, and cash registers allows a hacker to exploit their privileges.

The vulnerability of the EFIBOOTSERVICES component in microprogramming software for desktop workstations, personal computers, and payment devices of Hewlett-Packard Development Company L.P exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote...

9CVSS7.2AI score0.01959EPSS
SaveExploits0References3Affected Software86
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:0 a.m.8 views

The vulnerability of the SharedPoolDataSource and PerUserPoolDataSource components of the Jackson-databind library in the FasterXML project allows a malicious actor to gain unauthorized access to information or cause service failures.

The vulnerability of the SharedPoolDataSource and PerUserPoolDataSource components of the Jackson-databind library in the FasterXML project is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information...

9.8CVSS7.1AI score0.05728EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:0 a.m.5 views

The vulnerability of the P6DataSource component in the Jackson-databind library of the FasterXML project allows a hacker to gain unauthorized access to information or cause service failures.

The vulnerability of the P6DataSource component in the Jackson-databind library of the FasterXML project is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to information or cause service failures...

10CVSS7.1AI score0.04901EPSS
SaveExploits0References6Affected Software8
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:0 a.m.4 views

The vulnerability of the Wi-Fi WPA Supplicant component allows a intruder to trigger a service failure.

The vulnerability of the Wi-Fi WPA Supplicant component is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability allows an attacker who operates remotely to cause a service failure...

6.5CVSS6.5AI score0.01214EPSS
SaveExploits0References17Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/12/13 12:0 a.m.5 views

The vulnerability of the p256-ECDH key generation function in browsers Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to induce a service failure.

The vulnerability of the p256-ECDH key generation function in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to a lack of mechanisms for verifying input data. Exploiting this vulnerability can allow an attacker to cause service failures...

7.8CVSS7.4AI score0.02794EPSS
SaveExploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:0 a.m.8 views

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Hyper-V hardware virtualization system and the Windows operating system is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created application from a remote location...

8.4CVSS7.8AI score0.02748EPSS
SaveExploits0References3
Rows per page
Query Builder