Lucene search
+L

54 matches found

BDU FSTEC
BDU FSTEC
added 2026/08/31 12:00 a.m.9 views

The vulnerability of the Paint component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

7.8CVSS6.6AI score0.00176EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/31 12:00 a.m.51 views

The vulnerability of the CSS components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

5CVSS5.9AI score0.00164EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/08/31 12:00 a.m.6 views

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

7.8CVSS6.6AI score0.00176EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/31 12:00 a.m.6 views

The vulnerability of the CSS components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

5CVSS5.9AI score0.00164EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/06/08 12:00 a.m.14 views

The vulnerability of the MHTML component in Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the MHTML component in Google Chrome and Microsoft Edge is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

3.1CVSS5.8AI score0.00152EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.9 views

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to the manipulation of inter-site requests, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

9CVSS7.2AI score0.00316EPSS
SaveExploits0References16Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/09/28 12:00 a.m.7 views

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit, related to the manipulation of inter-site requests, allows attackers to access confidential data.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...

7.8CVSS6.8AI score0.00378EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:00 a.m.13 views

The vulnerability of the fromSysToolRestoreSet() function in the microprogramming software for Tenda AC9 allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolRestoreSet function in the Tenda AC9 router’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability could allow a remote attacker to execute a CSRF attack...

5CVSS5.6AI score0.00303EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/11 12:00 a.m.14 views

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a attacker to compromise the integrity of the protected information.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

6.4CVSS7.6AI score0.00215EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:00 a.m.16 views

The vulnerability of the 3DSecure (3DS2) protocol, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the 3DSecure 3DS2 protocol is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack by altering the HTTP headers Origin and Referer...

10CVSS5.4AI score
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:00 a.m.12 views

The vulnerability of Symantec’s Privileged Access Management tool, related to the manipulation of inter-site requests, allows a perpetrator to intercept user sessions.

The vulnerability of Symantec’s Privileged Access Management tool is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to intercept user sessions remotely...

9.6CVSS5.4AI score0.00236EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:00 a.m.17 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete files.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to the manipulation of inter-site requests. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete file access rights...

6.8CVSS7.6AI score0.002EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:00 a.m.15 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete files.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to the manipulation of inter-site requests. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete file access rights...

5.5CVSS7.6AI score0.00194EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/20 12:00 a.m.21 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

5.5CVSS5.4AI score0.00434EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:00 a.m.16 views

The vulnerability of software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network lies in the inter-site requests that are forged. This allows a perpetrator to carry out a CSRF attack.

The vulnerability of software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a remote attacker to…...

10CVSS7.7AI score0.00632EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/21 12:00 a.m.19 views

The vulnerability of D-Link DIR-600 router’s microprogramming software, related to the manipulation of inter-site requests, allows a hacker to increase their privileges.

The vulnerability of D-Link DIR-600 router’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to enhance their privileges by intercepting authentication requests remotely...

8.3CVSS7.7AI score0.43456EPSS
SaveExploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:00 a.m.18 views

The vulnerability of the CMS system Netcat, related to the manipulation of inter-site requests, allows a hacker to inject arbitrary JavaScript code.

The vulnerability of the CMS system Netcat is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code remotely...

7.5CVSS5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/20 12:00 a.m.16 views

The vulnerability of the microprogramming software of Osprey Pump Controller allows a intruder to execute arbitrary commands.

The vulnerability of Microprogrammed Software in Osprey Pump Controller controllers relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially crafted HTTP requests...

7.1CVSS7.8AI score0.00254EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/15 12:00 a.m.14 views

The vulnerability of the modoboa/modoboa mail server, related to the manipulation of inter-site requests, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the modoboa/modoboa mail server is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

7.8CVSS5.9AI score0.00348EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/28 12:00 a.m.12 views

The vulnerability of the Ajax Controller component of the PNP4Nagios network monitoring system allows a attacker to perform a CSRF attack.

The vulnerability of the Ajax Controller component in the PNP4Nagios network monitoring system is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

5CVSS7.5AI score0.00295EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder