Lucene search
+L

5845 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.11 views

The vulnerability of Google Chrome’s dialog window implementation allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s dialog window implementation exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

6.5CVSS6.9AI score0.01486EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:00 a.m.8 views

The vulnerability of the Navigation component in Google Chrome allows a hacker to disclose protected information.

The vulnerability of the Navigation component in Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...

9.4CVSS6.9AI score0.00783EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.11 views

The vulnerability of Zoom’s video conferencing software, related to the disclosure of information in erroneous data fields, allows attackers to disclose protected information.

The vulnerability of Zoom video conferencing software is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

7.8CVSS6.9AI score0.01666EPSS
SaveExploits0References2Affected Software22
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.10 views

The vulnerability of the Android EMUI operating system’s shell, related to errors in saving permissions, allows a intruder to disclose protected information.

The vulnerability of the Android EMUI operating system is related to errors during permission saving. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

5.3CVSS5.9AI score0.00512EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.14 views

The vulnerability of the win32k component in Microsoft Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the win32k component in Microsoft Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.2AI score0.00958EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.15 views

The vulnerability in the implementation of the Windows SMB network protocol of the Microsoft operating system allows a perpetrator to disclose protected information.

The vulnerability of the Windows SMB network protocol implementation in Microsoft Windows is related to information disclosure. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

6.8CVSS6.7AI score0.02766EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.12 views

The vulnerability of the Android EMUI operating system’s shell is related to the improper implementation of the sequence of actions that should be performed. This allows attackers to disclose protected information.

The vulnerability of the Android EMUI operating system’s shell is related to the improper implementation of the sequence of actions that need to be performed. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

5.3CVSS5.9AI score0.00595EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server packages, related to the lack of integrity checks, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server packages is related to the lack of integrity checks. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by replacing the content of files during the download of updates...

6.5CVSS6.1AI score0.06086EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:00 a.m.14 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

3.3CVSS5.9AI score0.01812EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:00 a.m.14 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

3.3CVSS5.9AI score0.02067EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/09 12:00 a.m.13 views

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

3.3CVSS5.9AI score0.01812EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/08 12:00 a.m.20 views

The vulnerability of MasterCard Tokenisation Service (MDES) and Visa Tokenisation Service (VTS) lies in the absence of critical fields in the ARQC cryptographic algorithm (such as 9F15 MCC), which allows a malicious actor to disclose protected information.

The vulnerability of MasterCard Tokenisation Service MDES and Visa Tokenisation Service VTS lies in the possibility of arbitrary modification of the “Amount” field in the Authorisation Request ISO 8583 packet. Exploiting this vulnerability could allow a malicious actor to disclose protected...

6.8CVSS5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.9 views

The vulnerability of the ColdFusion software platform, related to the use of initially dangerous functions, allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and gain unauthorized access to protected information...

7.5CVSS7.2AI score0.00493EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:00 a.m.13 views

The vulnerability of the Azure Sphere operating system, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Azure Sphere operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.9CVSS5.4AI score0.00803EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/03 12:00 a.m.9 views

The vulnerability of the Media Foundation component in Microsoft Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Media Foundation component in Microsoft Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose the protected information...

5.5CVSS6.2AI score0.00974EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/03 12:00 a.m.9 views

The vulnerability in the web interface of Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Cisco Unified Communications Manager Im & Presence Service, and Cisco Unity Connection allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Web interface for controlling Cisco Unified Communications Manager, Cisco Unified Communications Manager SME, Cisco Unified Communications Manager Im & Presence Service, and Cisco Unity Connection is related to incorrect path name restrictions in the access control catalo...

4.3CVSS5.5AI score0.01563EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.8 views

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.5CVSS7.4AI score0.0251EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.10 views

The vulnerability of the DNN CMS system, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.

The vulnerability of the DNN CMS system is related to insufficiently secure data encryption. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.5CVSS7.2AI score0.74048EPSS
SaveExploits5References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.12 views

The vulnerability of FaceTime video/audio call technology in operating systems macOS and iOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of FaceTime video/audio calls in macOS and iOS operating systems lies in the fact that the call operations go beyond the buffer in memory during group calls. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

7.5CVSS7.7AI score0.02629EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.13 views

The vulnerability of the DNN CMS system, related to insufficiently secure data encryption, allows attackers to gain unauthorized access to protected information.

The vulnerability of the DNN CMS system is related to insufficiently secure data encryption. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.74048EPSS
SaveExploits5References6Affected Software1
Rows per page
Query Builder