Lucene search
K

8 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.1 views

The vulnerability of the IBM DevOps Velocity lifecycle management platform (previously known as IBM UrbanCode Velocity) stems from the use of an untrusted inter-domain policy file. This allows attackers to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the IBM DevOps Velocity lifecycle management platform previously known as IBM UrbanCode Velocity is related to the use of an untrusted inter-domain policy file. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information and...

5.3CVSS5.5AI score0.00043EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.1 views

The vulnerability of the SIMATIC PCS neo technology process management web system, related to the use of an untrusted inter-domain policy file, allows a perpetrator to execute arbitrary codes.

The vulnerability of the SIMATIC PCS neo technology process management web system is related to the use of an untrusted interdomain policy file. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS8AI score0.00188EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:0 a.m.3 views

The vulnerability of the hedwig.cgi and pigwidgeon.cgi components of the D-Link DIR-868L router’s software allows a attacker to perform a CSRF attack.

The vulnerability of the hedwig.cgi and pigwidgeon.cgi components of the D-Link DIR-868L router software is related to the manipulation of inter-domain requests. Exploiting this vulnerability allows a remote attacker to execute a CSRF attack...

10CVSS7.7AI score0.0023EPSS
Exploits1References2Affected Software1
Fortinet
Fortinet
added 2022/11/01 12:0 a.m.26 views

FortiMail - Inter-domain information leakage

An improper access control vulnerability CWE-284 in FortiMail may allow an authenticated admin user assigned to a specific domain to access and modify other domains information via insecure direct object references IDOR...

4.7CVSS6.2AI score0.00187EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:0 a.m.1 views

The vulnerability of the `append_domain` parameter in the Squid proxy server, related to the manipulation of inter-domain requests, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the appenddomain parameter in the Squid proxy server is related to deficiencies in mechanisms for combating cross-site fraud. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to confidential data and compromise its integrity...

6.1CVSS6.5AI score0.04214EPSS
Exploits0References16Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:0 a.m.1 views

The vulnerabilities of browsers Internet Explorer and Microsoft Edge, related to errors in processing inter-domain requests, allow attackers to disclose protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to errors in processing inter-domain requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page...

4CVSS6.2AI score0.09895EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.5 views

The vulnerability of the Internet Explorer browser allows a perpetrator to gain access to information, enabling them to transfer it from one domain to another.

The vulnerability of the Internet Explorer browser exists due to the lack of implementing inter-domain policies. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to information and transfer it from one domain to another using a specially created applicati...

5.8CVSS5.9AI score0.00988EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/01/19 12:0 a.m.3 views

The vulnerability of the Internet Explorer browser, which allows a violator to access information

The vulnerability of the Internet Explorer browser is related to deficiencies in the implementation of inter-domain interaction policies. Exploiting this vulnerability allows a malicious actor to obtain information from one domain and inject it into another domain...

5.8CVSS5.8AI score0.31124EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder