Lucene search
+L

13148 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/15 12:00 a.m.12 views

The vulnerability of the Media Foundation component in Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Media Foundation component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created file or website...

5.5CVSS6.2AI score0.06649EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/15 12:00 a.m.9 views

The vulnerability of the Media Foundation component in Windows operating systems, which allows a hacker to disclose protected information

The vulnerability of the Media Foundation component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created file or website...

5.5CVSS6.2AI score0.06649EPSS
SaveExploits0References3
NVD
NVD
added 2020/05/14 9:15 p.m.28 views

CVE-2020-0104

In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

5.5CVSS5.1AI score0.00167EPSS
SaveExploits0References1
Prion
Prion
added 2020/05/14 9:15 p.m.21 views

Information disclosure

In onShowingStateChanged of KeyguardStateMonitor.java, there is a possible inappropriate read due to a logic error. This could lead to local information disclosure of keyguard-protected data with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

2.1CVSS5.6AI score0.00167EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.10 views

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

5.5CVSS6.1AI score0.01521EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.7 views

The vulnerability of the Diagnostics component of the Oracle Applications Framework software, a part of the Oracle E-Business Suite, allows an intruder to access, modify, add, or delete data, or to gain unauthorized access to protected information.

The vulnerability of the Diagnostics component of the Oracle Applications Framework, a part of the Oracle E-Business Suite, relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, or to gain unauthorized...

8.2CVSS7.5AI score0.01461EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:00 a.m.11 views

Vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module. The Oracle E-Business Suite technical foundation for enterprise automation, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the Preferences component of the Oracle CRM system’s customer relationship management module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the...

5.3CVSS6.3AI score0.01227EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:00 a.m.9 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

7.1CVSS6.4AI score0.05907EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/05/07 12:00 a.m.11 views

The vulnerability of the Media Foundation component in Windows operating systems allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

9.3CVSS7.4AI score0.05162EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/05/07 12:00 a.m.7 views

Multiple Cisco Product Policy Bypass Vulnerabilities

Cisco 3000 Series Industrial Security Appliances are products of Cisco Corporation.Cisco 3000 Series Industrial Security Appliances is a 3000 Series Firewall Appliance.Cloud Cisco 3000 Series Industrial Security Appliances is a 3000 Series firewall appliance. 1000V Series Cloud Services Router is...

5.8CVSS7AI score0.02156EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/05/07 12:00 a.m.47 views

Torchbox Wagtail Competitive Conditions Issue Vulnerability

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Torchbox Wagtail versions prior to 2.7.2 and prior to 2.8.2. An attacker could exploit the vulnerability to obtain a shared password used to protect a page or document...

6.1CVSS6.8AI score0.0025EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2020/05/07 12:00 a.m.24 views

FreeBSD : Wagtail -- potential timing attack vulnerability (d5fead4f-8efa-11ea-a5c8-08002728f74c)

Wagtail release notes : CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack on pages or documents that have been protected with a shared password through Wagtail's 'Privacy' controls. This password check is performed through...

6.1CVSS5.2AI score0.0025EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2020/05/04 12:00 a.m.27 views

Wagtail -- potential timing attack vulnerability

Wagtail release notes: CVE-2020-11037: Potential timing attack on password-protected private pages This release addresses a potential timing attack on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password check is performed through ...

6.1CVSS1.4AI score0.0025EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:00 a.m.11 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 are related to the lack of protection for operational data, allowing attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the lack of data protection for operational data. Exploiting these vulnerabilitie...

7.8CVSS7.2AI score0.02893EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/29 12:00 a.m.13 views

The vulnerability of the Special:Redirect function in the MediaWikia hypertext environment allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Special:Redirect function in the MediaWiki software lies in the lack of protection for user-defined data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by searching for user identities...

5.3CVSS5.7AI score0.01768EPSS
SaveExploits1References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.12 views

The vulnerability of Google Chrome’s browser, related to memory usage after deallocation, allows attackers to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.4AI score0.0197EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.14 views

The vulnerability of Google Chrome’s browser, related to access to resources using incompatible types, allows attackers to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to access to a resource using an incompatible type. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HT...

9.3CVSS7.3AI score0.01947EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.9 views

The vulnerability of Google Chrome, related to writing beyond the buffer of memory, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the writing beyond the buffer of the memory buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.5AI score0.0157EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.14 views

The vulnerability of Google Chrome’s browser, related to the disclosure of information, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.1CVSS7AI score0.01376EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:00 a.m.14 views

The vulnerability of Google Chrome, related to writing beyond the buffer of memory, allows a perpetrator to gain unauthorized access to protected information and compromise its integrity and accessibility.

The vulnerability of Google Chrome relates to the writing beyond the buffer of the memory buffer. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and compromise its integrity and availability through a specially created HTML file...

9.3CVSS7.5AI score0.0184EPSS
SaveExploits0References11Affected Software5
Rows per page
Query Builder