Lucene search
+L

13113 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/08 12:00 a.m.12 views

The vulnerability of the Oracle WebCenter Content component of the Oracle Fusion Middleware software platform allows a perpetrator to disclose protected information or gain access to read, modify, add, or delete data.

The vulnerability of the Oracle WebCenter Content component of the Oracle Fusion Middleware software is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information or gain access to read, modify, add, or delete data...

7.2CVSS6.5AI score0.0065EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/08 12:00 a.m.11 views

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

7.8CVSS7.2AI score0.0022EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/04 12:00 a.m.13 views

The vulnerability of the LibreOffice office software’s user configuration database allows a hacker to disclose protected information.

The vulnerability of the LibreOffice office software’s user configuration database is related to insufficiently secure data encryption. Exploiting this vulnerability could allow a malicious actor to disclose protected information from a remote location...

7.8CVSS7.5AI score0.01005EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/08/02 12:00 a.m.13 views

The vulnerability of the Group Membership Handler component in the Kubernetes authentication service provided by VMware Pinniped allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Group Membership Handler component in Kubernetes authentication services exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

8.5CVSS6.8AI score0.00948EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/08/02 12:00 a.m.111 views

Debian DSA-5197-1 : curl - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5197 advisory. Multiple security vulnerabilities have been discovered in cURL, an URL transfer library. These flaws may allow remote attackers to obtain sensitive information,...

9.8CVSS7AI score0.3216EPSS
SaveExploits15References34
Positive Technologies
Positive Technologies
added 2022/08/02 12:00 a.m.7 views

PT-2022-3988 · Nvidia +3 · Nvidia Gpu Display Driver For Linux +3

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to a vulnerability in an optional D-Bus configuration file of the NVIDIA GPU Display Driver for Linux. This vulnerability can be exploited b...

7.8CVSS6.3AI score0.00278EPSS
SaveExploits0References20
NVD
NVD
added 2022/08/01 11:15 a.m.23 views

CVE-2022-33169

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888...

6.5CVSS0.006EPSS
SaveExploits0References2
Prion
Prion
added 2022/08/01 11:15 a.m.18 views

Design/Logic Flaw

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888...

4CVSS6.3AI score0.006EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/07/31 5:30 p.m.31 views

CVE-2022-33169

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888...

5.3CVSS6.4AI score0.006EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/07/29 12:00 a.m.34 views

EulerOS 2.0 SP10 : curl (EulerOS-SA-2022-2128)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...

8.1CVSS6.8AI score0.03777EPSS
SaveExploits4References5
OpenVAS
OpenVAS
added 2022/07/29 12:00 a.m.25 views

Huawei EulerOS: Security Advisory for subversion (EulerOS-SA-2022-2172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.3AI score0.09473EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2022/07/29 12:00 a.m.36 views

EulerOS 2.0 SP10 : curl (EulerOS-SA-2022-2153)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...

8.1CVSS6.8AI score0.03777EPSS
SaveExploits4References5
Vulnrichment
Vulnrichment
added 2022/07/28 2:18 p.m.6 views

CVE-2021-22640 Ovarro TBox Insufficiently Protected Credentials

An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks...

7.5CVSS9.6AI score0.00769EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/07/28 2:18 p.m.42 views

CVE-2021-22640 Ovarro TBox Insufficiently Protected Credentials

An attacker can decrypt the Ovarro TBox login password by communication capture and brute force attacks...

7.5CVSS9.8AI score0.00769EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/07/27 12:00 a.m.5 views

PT-2022-4038 · Jenkins · Jenkins Repository Connector Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Repository Connector Plugin versions 2.2.0 and earlier Description: The issue is related to insufficient authorization procedures in the Jenkins Repository Connector Plugin, allowing remote attackers with Overall/Read permission to...

4.3CVSS4.1AI score0.00661EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2022/07/27 12:00 a.m.11 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.02095EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/26 12:00 a.m.11 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.02095EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/26 12:00 a.m.13 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.02095EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/07/25 12:00 a.m.170 views

AlmaLinux 8 : curl (5313) (ALSA-2022:5313)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:5313 advisory. - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without...

8.1CVSS6.9AI score0.03777EPSS
SaveExploits4References5
BDU FSTEC
BDU FSTEC
added 2022/07/22 12:00 a.m.14 views

The vulnerability of the interface of microprogrammed software for programmable logic controllers Lenze Cabinet c520, Lenze Cabinet c550, and Lenze Cabinet c750 allows a intruder to gain unauthorized access to protected information.

The vulnerability of the microprogramming software interfaces of Lenze Cabinet c520, Lenze Cabinet c550, and Lenze Cabinet c750 is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

10CVSS7.8AI score0.0195EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder