Lucene search
+L

5849 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.9 views

The vulnerability of the CLI component of Cisco Wireless LAN Controller (WLC) software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.6AI score0.0065EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the NSS libraries, related to errors in value generation during the processing of the ClientHello request, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NSS libraries is related to errors in value generation during the processing of the ClientHello request. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.9CVSS6.2AI score0.01496EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.15 views

The vulnerability of Google Chrome’s swiftshader library allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Swiftshader library arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.3AI score0.00902EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.13 views

The vulnerability of the ActiveX Installer component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ActiveX Installer component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS6.5AI score0.01233EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the libcurl library, related to insufficient protection of registration data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the libcurl library is related to insufficient protection for registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.5CVSS6.7AI score0.08031EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.13 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

4.6CVSS6.5AI score0.00346EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.7 views

The vulnerability in the security.http.utils component of the Symfony software development and web application management platform allows attackers to carry out phishing attacks and gain access to protected information.

The vulnerability of the security.http.utils component of the Symfony software development and management platform involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows attackers to conduct phishing attacks remotely and gain access to protected information using...

6.4CVSS6.8AI score0.01139EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.16 views

The vulnerability of the Firefox browser, related to the use of open redirection, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Firefox browser is related to the use of open redirecting. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS6.7AI score0.01274EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.12 views

The vulnerability of Microprogramming Software, Intel Converged Security and Manageability Engine (CSME), and Intel Trusted Execution Engine (TXE) arises from insufficient validation of input data, allowing attackers to disclose protected information.

The vulnerability of Microprogramming Software Intel Converged Security and Manageability Engine CSME and Intel Trusted Execution Engine TXE is related to insufficient verification of input data. Exploiting this vulnerability can allow attackers to disclose protected information...

6.2CVSS6.5AI score0.00349EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2019/11/21 6:15 p.m.18 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2019/11/21 5:46 p.m.26 views

CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.4AI score0.04338EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.8 views

The vulnerability of the Security component in Java SE and Java SE Embedded software platforms allows attackers to gain unauthorized access to protected information.

The vulnerability of the Security component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through various network...

4.3CVSS6.5AI score0.03159EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.12 views

The vulnerability of the Segment component in Oracle Retail Customer Management and Segmentation Foundation software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Segment component of the Oracle Retail Customer Management and Segmentation Foundation software lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.9CVSS6.8AI score0.01373EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/19 12:00 a.m.11 views

The vulnerability of the <FilesMatch> component in the Apache HTTP Server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the component in the Apache HTTP Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.3CVSS6.5AI score0.8572EPSS
SaveExploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.12 views

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications software package allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to remotely gain access, enabling them to modify, add, or delete...

6.8CVSS6.9AI score0.01341EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.9 views

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the...

5CVSS6.9AI score0.01129EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.10 views

The vulnerability of the OAM component in Oracle JDeveloper and ADF allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OAM component in Oracle JDeveloper and ADF is related to lack of access control. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

3.5CVSS5.8AI score0.00882EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.10 views

Vulnerability of the Server component: Security: Encryption of the Oracle MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Oracle MySQL Server’s Security: Encryption component is related to access control deficiencies. Exploiting this vulnerability may allow attackers, operating remotely, to gain unauthorized access to protected information using the MySQL protocol...

5.3CVSS6.2AI score0.02211EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/11 12:00 a.m.14 views

The vulnerability of the Installation sub-component of the Oracle Business Intelligence Enterprise Edition software platform, Oracle Fusion Middleware, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Installation sub-component of the Oracle Business Intelligence Enterprise Edition software platform, Oracle Fusion Middleware, is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

8.6CVSS7AI score0.01976EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/11/04 12:00 a.m.10 views

The vulnerability of the Microsoft SQL Server Management Studio database management system, related to the improper assignment of permissions for files, allows a perpetrator to gain access to protected information.

The vulnerability of the Microsoft SQL Server Management Studio database management system is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...

6.8CVSS5.6AI score0.05311EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder