Lucene search
+L

13156 matches found

BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.11 views

The vulnerability of Google Chrome’s WebRTC technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebRTC technology is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created video file...

9.3CVSS7.3AI score0.00825EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.11 views

The vulnerability of Google Chrome’s WebAudio component allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Google Chrome’s WebAudio component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...

10CVSS7.7AI score0.72977EPSS
SaveExploits4References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.16 views

The vulnerability of the V8 component in the Google Chrome browser allows attackers to disclose protected information.

The vulnerability of the V8 component in the Google Chrome browser is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information using a specially created PDF file...

7.1CVSS7.3AI score0.00833EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.12 views

The vulnerability in the implementation of the CORS mechanism for the Google Chrome browser allows a hacker to disclose protected information.

The vulnerability of the CORS mechanism implementation in Google Chrome browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

6.5CVSS7.1AI score0.00867EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.13 views

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially create...

5CVSS7.1AI score0.00905EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.16 views

The vulnerability of the Open Enclave SDK, a software development tool, is related to an object processing error in memory, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Open Enclave SDK software development tools is related to an object processing error in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

5.5CVSS6.5AI score0.0155EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.9 views

The vulnerability of the String#unpack method in the Ruby programming language allows attackers to exploit it to disclose protected information.

The vulnerability of the Stringunpack method in the Ruby programming language is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information that is protected by this method...

7.8CVSS6.7AI score0.0767EPSS
SaveExploits0References17Affected Software5
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.15 views

The vulnerability of the Blink component in Google Chrome browser allows a hacker to disclose protected information.

The vulnerability of the Blink component in Google Chrome relates to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created HTML page...

7.1CVSS7.1AI score0.01663EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.11 views

The vulnerability of the Windows Servicing Stack component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Servicing Stack component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.2AI score0.01556EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.10 views

The vulnerability of the Win32k component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.01778EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.14 views

The vulnerability of the Microsoft Office suite relates to errors in memory object handling, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.02352EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.9 views

The vulnerability of the Windows GDI component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

6.5CVSS6.1AI score0.75403EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the DefaultServlet component of the Jetty HTTP server allows a attacker to gain unauthorized access to protected information.

The vulnerability of the DefaultServlet component in the Jetty HTTP server is related to errors in error handling when incorrect requests are used. Exploiting this vulnerability allows an attacker to gain unauthorized access to protected information by displaying the InvalidPathException message,...

5.3CVSS6.4AI score0.04273EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.12 views

The vulnerability of the Apache Thrift interface description language in Node.js allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Apache Thrift interface description language in Node.js lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.5CVSS6.7AI score0.04875EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.12 views

The vulnerability of the CLI component of Cisco Wireless LAN Controller (WLC) software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the CLI component of Cisco Wireless LAN Controller WLC software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS5.6AI score0.0065EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
added 2019/12/03 12:00 a.m.41 views

FreeBSD : Gitlab -- Multiple Vulnerabilities (1aa7a094-1147-11ea-b537-001b217b3468)

Gitlab reports : Path traversal with potential remote code execution Private objects exposed through project import Disclosure of notes via Elasticsearch integration Disclosure of comments via Elasticsearch integration DNS Rebind SSRF in various chat notifications Disclosure of vulnerability stat...

9.8CVSS5.7AI score0.01656EPSS
SaveExploits0References21
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.13 views

The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software lies in its ability to allow unlimited download of files of a dangerous type, enabling an intruder to gain unauthorized access to protected information.

The vulnerability of the Microsoft SharePoint Enterprise Server software and the Microsoft SharePoint Foundation email messaging software is related to the unlimited download of sensitive files. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

6.5CVSS6.5AI score0.05749EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.12 views

The vulnerability of Microsoft Office packages, related to errors in information presentation by the user interface, allows an intruder to gain unauthorized access to protected information.

The vulnerability of Microsoft Office packages is related to errors in information representation by the user interface. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information using a specially crafted file...

6.5CVSS5.9AI score0.02156EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the NSS libraries, related to errors in value generation during the processing of the ClientHello request, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NSS libraries is related to errors in value generation during the processing of the ClientHello request. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.9CVSS6.2AI score0.01496EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/03 12:00 a.m.8 views

The vulnerability of the Secure/Multipurpose Internet Mail Extentions (S/MIME) encryption function in the Thunderbird email client allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Secure/Multipurpose Internet Mail Extensions S/MIME function in the Thunderbird email client is related to the lack of protection for service data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

7.8CVSS6.7AI score0.02396EPSS
SaveExploits0References12Affected Software6
Rows per page
Query Builder