Lucene search
+L

13142 matches found

BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.7 views

The vulnerability of the Java Management Extensions (JMX) extension in the Apache Camel framework allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Java Management Extensions JMX in the Apache Camel framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.8CVSS6.6AI score0.13959EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.11 views

The vulnerability of Adobe Audition for Windows and macOS, related to reading data beyond the buffer in memory, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Adobe Audition for Windows and macOS relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS5.7AI score0.02873EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.14 views

The vulnerability of Microsoft Edge browser for Android, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Microsoft Edge browser for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

5CVSS6.1AI score0.02799EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.10 views

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process of software products allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker, operating remotely, t...

7.8CVSS7.3AI score0.08235EPSS
SaveExploits0References13Affected Software20
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.11 views

The vulnerability of the Django library, related to errors in the certificate validation process, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Django library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.9CVSS6.5AI score0.0609EPSS
SaveExploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.16 views

The vulnerability of the Bluetooth service for Windows operating systems allows a perpetrator to increase their privileges and gain unauthorized access to protected information.

The vulnerability of the Bluetooth service for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges and gain unauthorized access to protected information...

5.5CVSS6.4AI score0.0165EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.8 views

The vulnerability of the SQLite database management system, related to writing data beyond the buffer boundaries in memory, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the SQLite database management system is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.8AI score0.01027EPSS
SaveExploits1References16Affected Software18
BDU FSTEC
BDU FSTEC
added 2021/02/16 12:00 a.m.11 views

The vulnerability of Java-Framework templates in the Apache Camel framework allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Java-Framework templates in the Apache Camel framework lies in insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

7.8CVSS7.4AI score0.04491EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:00 a.m.13 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.1CVSS6.1AI score0.02812EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:00 a.m.12 views

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software, related to reading beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Premiere Pro’s nonlinear video editing software is related to reading data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS5.7AI score0.02677EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:00 a.m.10 views

The vulnerability of the Windows Media Center multimedia playback application stems from incorrect restrictions on XML links to external objects, which allows attackers to exploit this flaw to disclose protected information.

The vulnerability of the Windows Media Center multimedia playback application is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose protected information using a specially crafted .mcl file...

10CVSS5.5AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/11 12:00 a.m.13 views

The vulnerability of the Unified Audit component of the Oracle Database Server system allows a perpetrator to gain access to modify, add, or delete data, or to obtain unauthorized access to protected information.

The vulnerability of the Unified Audit component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or gain unauthorized access to protected...

5.4CVSS6.3AI score0.00764EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2021/02/09 5:15 p.m.14 views

CVE-2020-10048

A vulnerability has been identified in SIMATIC PCS 7 All versions, SIMATIC WinCC All versions V7.5 SP2. Due to an insecure password verification process, an attacker could bypass the password protection set on protected files, thus being granted access to the protected content, circumventing...

5.5CVSS5.7AI score0.00336EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.15 views

SIMATIC PCS 7 和 SIMATIC WinCC 授权问题漏洞

Siemens SIMATIC WinCC is an automated data acquisition and monitoring SCADA system from Siemens, Germany. A security vulnerability exists in Siemens SIMATIC WinCC. The vulnerability is caused due to an insecure password authentication process, which can be exploited by an attacker to bypass the...

5.5CVSS6AI score0.00336EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:00 a.m.13 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a malicious individual to gain unauthorized access to protected information.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.5AI score0.01296EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/09 12:00 a.m.12 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 involve reading beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can...

7.8CVSS7.4AI score0.03474EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2021/02/09 12:00 a.m.9 views

PT-2021-2039 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: The issue is related to insufficient input validation. It may allow a remote attacker to gain unauthorized access to protected information. Recommendations: At the moment, there...

6.8CVSS6.4AI score0.02806EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.17 views

The vulnerability of the file system driver in the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the file system driver filter in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.8AI score0.01254EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.16 views

The vulnerability of Microsoft Edge browsers, related to writing beyond the buffer, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Microsoft Edge relates to writing beyond the buffer. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

7.6CVSS5.8AI score0.01916EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/02/08 12:00 a.m.9 views

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS7.2AI score0.01348EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder