Lucene search
+L

5858 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/11 12:00 a.m.11 views

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from insufficient validation of input data. This allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS7.6AI score0.00686EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/11 12:00 a.m.17 views

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to insufficient access control. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...

6.8CVSS7.6AI score0.0344EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.10 views

The vulnerability of the Primo RPA Orchestrator module of the Primo RPA automation platform allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Primo RPA Orchestrator module of the Primo RPA automation platform lies in the use of a strictly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.12 views

The vulnerability of Windows operating system-based Cryptographic Services allows attackers to disclose protected information.

The vulnerability of Windows operating system’s Cryptographic Services is related to the use of a cryptographic primitive with a risky implementation. Exploiting this vulnerability could allow an attacker to disclose the protected information...

5.5CVSS7.5AI score0.00503EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.13 views

The vulnerability of the Rack::Static class in the module interface between web servers and Rack web applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Rack::Static module interface between web servers and Rack web applications is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.0115EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.13 views

The vulnerability of the Microsoft Outlook for Android client, related to insufficient protection of administrative data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Outlook for Android client is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.6AI score0.0153EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.15 views

The vulnerability of the NTFS file system in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS7.9AI score0.00862EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.14 views

The vulnerability of the NTFS file system of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

6.8CVSS7.6AI score0.03199EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.18 views

The vulnerability of the Power Dependency Coordinator component in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the Power Dependency Coordinator component in the Windows operating system is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

5.5CVSS7.5AI score0.00922EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.20 views

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

10CVSS5.8AI score0.00295EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.13 views

The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS8AI score0.00326EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.18 views

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to incorrect authorization, allows a violator to disclose protected information.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to improper authorization. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

5.3CVSS5.8AI score0.00279EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.14 views

The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9.1CVSS8AI score0.22515EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.13 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity and accessibility of protected information...

8.5CVSS5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/04/08 12:00 a.m.10 views

The vulnerability of the driver_override_show() function in the Linux operating system’s kernel drivers (drivers/cdx/cdx.c) allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the driveroverrideshow function in the Linux operating system’s drivers/cdx/cdx.c file relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS7.1AI score0.00203EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.12 views

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the webapi component of the cloud software for file storage, synchronization, and sharing with Synology Drive Server is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthoriz...

7.8CVSS7.2AI score0.24558EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.14 views

The vulnerability of the Jenkins automation server plugin Asakusa Satellite lies in the lack of password masking, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server plugin Asakusa Satellite is related to the absence of password masking. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

6.5CVSS5.5AI score0.00278EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.14 views

The vulnerability of the IntelliJ IDEA integrated development environment, related to the disclosure of information in the log file, allows attackers to gain unauthorized access to protected information.

The vulnerability of the IntelliJ IDEA integrated development environment is related to the disclosure of information in the idea.log log file. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.00431EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.15 views

The vulnerability of the Jenkins automation server, related to deficiencies in authentication procedures, allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

4.3CVSS6.4AI score0.00392EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.13 views

The vulnerability of the Stack Hammer plugin on the Jenkins automation server, related to deficiencies in access control, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Stack Hammer plugin in the Jenkins automation server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

6.5CVSS5.5AI score0.00278EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder