Lucene search
+L

13142 matches found

BDU FSTEC
BDU FSTEC
added 2021/01/21 12:00 a.m.14 views

The vulnerability of the file system driver in the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the file system driver filter in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.8AI score0.01201EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2021/01/20 11:15 p.m.7 views

CVE-2021-1067

NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an attacker can write to the Write Protect Configuration Block, which may lead to denial of service or escalation of privileges...

6.8CVSS5.5AI score0.00381EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/20 12:00 a.m.12 views

NVIDIA SHIELD TV 安全漏洞

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia, USA. A security vulnerability exists in NVIDIA SHIELD TV all versions prior to 8.2.2, which contains a vulnerability in the implementation of the RPMB command state that allows an attacker to write write-protected configuration...

6.8CVSS6.7AI score0.00381EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.10 views

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface of Mozilla Firefox allows a perpetrator to gain unauthorized access to protected information.

The vulnerability in the implementation of the AES-GCM mode of the WebCrypto API interface in Mozilla Firefox’s browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

5.3CVSS6.8AI score0.01485EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.11 views

The vulnerability of the _exposedProps_ mechanism in the Mozilla Firefox browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the exposedProps mechanism in Mozilla Firefox is related to the lack of access restrictions for certain exposed properties. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.3CVSS6.8AI score0.01742EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.11 views

The vulnerability of Mozilla Firefox’s WebExtensions module allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WebExtensions module in the Mozilla Firefox browser is related to a lack of mechanisms for checking input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS6.8AI score0.01382EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.13 views

The vulnerability in the Google Chrome web interface allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome’s web interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

6.8CVSS7.7AI score0.01065EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.16 views

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic, relates to reading data beyond the buffer in memory. This allows an attacker to gain unauthorized access to protected information.

The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

6.5CVSS6.1AI score0.02411EPSS
SaveExploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/01/20 12:00 a.m.89 views

EulerOS 2.0 SP3 : ImageMagick (EulerOS-SA-2021-1074)

According to the versions of the ImageMagick packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - ImageMagick 7.0.9-27 through 7.0.10-17 has a heap-based buffer over-read in BlobToStringInfo in MagickCore/string.c during TIFF image...

7.8CVSS7.4AI score0.07508EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.10 views

The vulnerability of the QES operating system, related to deficiencies in the mechanism for generating error reports, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the QES operating system is related to deficiencies in the mechanism for generating error reports. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

2.3CVSS5.4AI score0.00293EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:00 a.m.8 views

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

6.8CVSS7.7AI score0.03095EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:00 a.m.10 views

The vulnerability of Firefox browsers, related to the lack of uniform protection for encoding response headers, allows attackers to gain unauthorized access to protected information.

The vulnerability of Firefox browsers is related to the lack of uniform protection for encoding response headers. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.5CVSS6.7AI score0.0073EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:00 a.m.13 views

The vulnerability of Google Chrome’s Blink rendering module allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s Blink rendering module relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

6.8CVSS7.7AI score0.01353EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.15 views

The vulnerability of the Cisco Jabber software platform for Windows, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco Jabber software for Windows relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9CVSS8.1AI score0.01351EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.12 views

The vulnerability in the components drivers/tty/tty_jobctrl.c and drivers/tty/tty_io.c of the Linux operating system allows an attacker to disclose protected information.

The vulnerability in the components drivers/tty/ttyjobctrl.c and drivers/tty/ttyio.c of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

4.6CVSS6.2AI score0.00474EPSS
SaveExploits1References37Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.10 views

The vulnerability in the drivers/tty/tty_jobctrl.c component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drivers/tty/ttyjobctrl.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.4AI score0.0112EPSS
SaveExploits2References43Affected Software7
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.13 views

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.

The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS involves memory object processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS8.1AI score0.02244EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
added 2021/01/12 12:00 a.m.7 views

PT-2021-1829 · Microsoft · Windows Gdi +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a component of the Windows operating system, specifically Windows GDI+, and is associated with shortcomings in security mechanisms. It may allow a remote attacker to...

6.3CVSS6.9AI score0.03441EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2021/01/12 12:00 a.m.5 views

PT-2021-1828 · Microsoft · Windows Dns +1

Name of the Vulnerable Software and Affected Versions: Windows DNS versions affected versions not specified Description: The issue is related to weaknesses in the security mechanisms of the Windows DNS server, allowing an attacker to gain unauthorized access to protected information. It enables...

5.5CVSS6.5AI score0.01201EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2021/01/12 12:00 a.m.8 views

PT-2021-1543 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows modem.sys Description: The issue exists due to insufficient input validation in the modem.sys component of the Windows operating system. This can allow an attacker to obtain unauthorized access to protected information. The...

5.5CVSS6.2AI score0.021EPSS
SaveExploits0References8
Rows per page
Query Builder