Lucene search
+L

13149 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/06 12:00 a.m.12 views

The vulnerability of the Redmine project and task management web application relates to the failure to protect the SQL query structure, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...

6.8CVSS6.7AI score0.04338EPSS
SaveExploits2References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:00 a.m.13 views

The vulnerability of the NX-API network operating system function of Cisco NX-OS routers allows attackers to compromise the accessibility of protected information.

The vulnerability of the NX-API network operating system of Cisco NX-OS routers is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the accessibility of protected information...

5.3CVSS5.9AI score0.01744EPSS
SaveExploits0References4
OSV
OSV
added 2020/04/02 12:00 a.m.37 views

UBUNTU-CVE-2020-8833

Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protectedsymlinks is disabled, this can be exploited between the os.open and os.chown calls when the Apport cron script clears out crash...

5.6CVSS5.8AI score0.00344EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2020/03/26 12:00 a.m.13 views

The vulnerability of the mDNS protocol used by Cisco Webex Meetings Client software for web conferencing on the MacOS operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the mDNS protocol used in Cisco Webex Meetings Client software for MacOS operating systems is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

4.3CVSS5.5AI score0.00508EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2020/03/25 12:00 a.m.8 views

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-40857)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A security vulnerability exists in Samsung mobile devices, which can be exploited by attackers to perform arbitrary write operations to protected memory...

7.5CVSS7AI score0.00346EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/03/25 12:00 a.m.9 views

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-31396)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to turn off some protected features...

7.5CVSS6.6AI score0.00346EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:00 a.m.10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

5CVSS6.1AI score0.05458EPSS
SaveExploits0References3
OSV
OSV
added 2020/03/24 8:15 p.m.6 views

CVE-2019-20601

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos7570, 7580, 7870, 7880, and 8890 chipsets software. RKP memory corruption causes an arbitrary write to protected memory. The Samsung ID is SVE-2019-13921-2 May 2019...

7.5CVSS7.2AI score0.00346EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/24 8:15 p.m.21 views

Memory corruption

An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 Exynos7570, 7580, 7870, 7880, and 8890 chipsets software. RKP memory corruption causes an arbitrary write to protected memory. The Samsung ID is SVE-2019-13921-2 May 2019...

5CVSS7.9AI score0.00346EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2020/03/24 12:00 a.m.13 views

GitLab Access Control Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

7.5CVSS6.7AI score0.00935EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:00 a.m.12 views

The vulnerability of Huawei’s microprogrammed router software arises from insufficient validation of input data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Huawei’s microprogrammed router software exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.00764EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:00 a.m.14 views

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of Windows GDI components in Windows operating systems is related to security flaws in the system’s mechanisms. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

7.1CVSS6.1AI score0.05853EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:00 a.m.11 views

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the web interface of the content management software in the Prime Collaboration Provisioning network is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.3CVSS5.9AI score0.01106EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:00 a.m.8 views

The vulnerability of the Windows Error Reporting registration service allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Windows Error Reporting service-related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS5.9AI score0.01308EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:00 a.m.14 views

The vulnerability of the Media Foundation component in Windows operating systems allows attackers to compromise the confidentiality, integrity, or accessibility of protected information.

The vulnerability of the Media Foundation component in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, or accessibility of protected informati...

9.3CVSS7.7AI score0.0561EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:00 a.m.10 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created document or a...

5.5CVSS6.1AI score0.06288EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:00 a.m.12 views

The vulnerability of the win32k component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the win32k component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a remote attacker to gain unauthorized access to protected information through a specially created application...

7.5CVSS7.2AI score0.05944EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:00 a.m.8 views

The vulnerability of the Network Connections Service in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Network Connections Service in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

5.5CVSS5.9AI score0.01428EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:00 a.m.11 views

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Connected User Experiences and Telemetry Services for Windows operating systems stems from the lack of protection for service-related data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created...

5.5CVSS5.9AI score0.01531EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:00 a.m.9 views

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

4.7CVSS6AI score0.01655EPSS
SaveExploits0References2
Rows per page
Query Builder