Lucene search
+L

2082 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.9 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.1AI score0.01285EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.18 views

The vulnerability of Google Chrome’s browser, related to insufficient validation of input data, allows attackers to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient security of its interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

7.1CVSS7AI score0.0139EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/22 12:00 a.m.8 views

The vulnerability in the Git version control system’s component that handles NTFS Alternate Data Streams allows a attacker to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

The vulnerability of the Git version control system’s NTFS Alternate Data Streams handling component is related to a lack of input validation mechanisms. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, and compromise...

9.3CVSS7.4AI score0.24014EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.11 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to information.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to information through a specially created HTML page...

7.4CVSS7AI score0.00737EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/21 12:00 a.m.15 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity through a specially crafted HTML page...

7.1CVSS6.5AI score0.00729EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/17 12:00 a.m.11 views

The vulnerability of the _ctl_ioctl_main function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ctlioctlmain function drivers/scsi/mpt3sas/mpt3sasctl.c in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7.1AI score0.00406EPSS
SaveExploits0References20Affected Software3
Tenable Nessus
Tenable Nessus
added 2020/04/16 12:00 a.m.58 views

EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2020-1452)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic...

9.3CVSS7.2AI score0.05123EPSS
SaveExploits7References25
OpenVAS
OpenVAS
added 2020/04/16 12:00 a.m.39 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2020-1452)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.5AI score0.05123EPSS
SaveExploits7References2
Tenable Nessus
Tenable Nessus
added 2020/04/16 12:00 a.m.46 views

Adobe ColdFusion 2016.x < 2016u15 / 2018.x < 2018u9 Multiple Vulnerabilities (APSB20-18)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2016.x update 15 or 2018.x prior to update 9. It is, therefore, affected by the following vulnerabilities as referenced in the APSB20-18 advisory: - An application-level denial of service DoS vulnerability due to...

7.8CVSS6.8AI score0.04294EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/04/16 12:00 a.m.9 views

The vulnerability of the WebKit rendering module, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the WebKit rendering module is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

7.1CVSS6.9AI score0.01304EPSS
SaveExploits0References12Affected Software15
CNVD
CNVD
added 2020/04/15 12:00 a.m.7 views

Adobe ColdFusion Insufficient Input Validation Vulnerability

Adobe ColdFusion is a commercial rapid application development platform. A security vulnerability exists in Adobe ColdFusion. An attacker could exploit the vulnerability to cause a denial of service DoS...

6.5CVSS6.6AI score0.0347EPSS
SaveExploits0References1
Huawei
Huawei
added 2020/04/15 12:00 a.m.66 views

Security Advisory - Denial of Service Vulnerability on Huawei Smartphone

There is an denial of service vulnerability on some Huawei smartphone. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal. Vulnerability ID: HWPSIRT-2019-12057 This...

5.5CVSS5.4AI score0.00526EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.11 views

The vulnerability of the Git version control system, related to insufficient validation of input data, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Git version control system lies in the improper updating of submodules. This occurs because the operation can execute commands found in the .gitmodules file of the malicious repository. Exploiting this vulnerability allows a remote attacker to access confidential data,...

9.3CVSS7.6AI score0.03691EPSS
SaveExploits1References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.11 views

The vulnerability of the Omnibox address bar in Google Chrome, related to insufficient validation of entered data, allows attackers to compromise data integrity.

The vulnerability of the Omnibox address bar in Google Chrome relates to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise data integrity by using a specially created domain name...

7.1CVSS6.8AI score0.01945EPSS
SaveExploits0References14Affected Software6
Positive Technologies
Positive Technologies
added 2020/04/14 12:00 a.m.12 views

PT-2020-2598

Name of the Vulnerable Software and Affected Versions Java SE versions 7u251, 8u241, 11.0.6, and 14 Java SE Embedded version 8u241 Description The issue is related to insufficient input validation in the Libraries component of Oracle Java SE and Java SE Embedded. This could allow a remote attacke...

8.3CVSS7.4AI score0.0447EPSS
SaveExploits0References288
BDU FSTEC
BDU FSTEC
added 2020/04/14 12:00 a.m.11 views

The vulnerability of Firefox browser, related to insufficient validation of input data, allows attackers to compromise the integrity of data.

The vulnerability of Firefox is related to a security policy error. This error does not apply to the content of XSL stylesheets, provided that the XML file complies with security policies and contains an XSL stylesheet. Exploiting this vulnerability could allow an attacker to compromise the...

7.1CVSS6.9AI score0.01145EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/13 12:00 a.m.16 views

The vulnerability of the sqlite3Select function in the SQLite database management system, related to insufficient input data validation, allows attackers to trigger a service failure.

The vulnerability of the sqlite3Select function in the SQLite database management system is related to a selection error that uses the DISTINCT operator. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS7.4AI score0.03333EPSS
SaveExploits0References9Affected Software6
Veracode
Veracode
added 2020/04/10 12:36 a.m.30 views

Arbitrary Code Execution

vnc is vulnerable to arbitrary code execution. The vulnerability exists as an insufficient input validation flaw was discovered in the VNC client application, vncviewer. If an attacker could convince a victim to connect to a malicious VNC server, or when an attacker was able to connect to vncview...

10CVSS4.3AI score0.04052EPSS
SaveExploits0References19Affected Software1
Tenable Nessus
Tenable Nessus
added 2020/04/10 12:00 a.m.32 views

Cisco FTD Software Command Injection (cisco-sa-20191002-fxos-cmd-inject)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by multiple vulnerabilities in the CLI due to insufficient input validation. An unauthenticated, local attacker can exploit this, by including crafted arguments to specific commands, in order to execut...

8.8CVSS8.1AI score0.00897EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
added 2020/04/10 12:00 a.m.33 views

Cisco Email Security Appliance URL Filtering Bypass (cisco-sa-20191120-esa-url-bypass)

According to its self-reported version, Cisco Email Security Appliance ESA is affected by a vulnerability in the antispam protection mechanisms of Cisco AsyncOS Software due to insufficient input validation of URLs. An unauthenticated, remote attacker can exploit this, by crafting the URL in a...

5.8CVSS5.9AI score0.01011EPSS
SaveExploits0References3
Rows per page
Query Builder