Lucene search
+L

383 matches found

BDU FSTEC
BDU FSTEC
added 2021/09/20 12:00 a.m.14 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential information...

4.9CVSS5.6AI score0.00885EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:00 a.m.14 views

The vulnerability of the password change interface of the Cisco Connected Mobile Experiences (CMX) software allows a hacker to bypass security mechanisms.

The vulnerability of the Cisco Connected Mobile Experiences CMX password change interface is related to deficiencies in the management of registration data. Exploiting this vulnerability could allow a malicious actor to bypass security measures through a specially created API request...

5CVSS5.5AI score0.00748EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/07 12:00 a.m.11 views

The vulnerability of the Telerik.Web.UI.dll library of the Telerik UI software for ASP.NET AJAX and the Sitefinity web content management system allows a attacker to exploit the encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or MachineKey).

The vulnerability of the Telerik.Web.UI.dll library of the Telerik UI software for ASP.NET AJAX and the Sitefinity web content management system is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose encryption keys...

10CVSS8AI score0.75098EPSS
SaveExploits5References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/08/19 12:00 a.m.18 views

The vulnerability of the Fortinet FortiPortal security analysis and management tool, which stems from the rigid encoding of registration data, allows attackers to execute arbitrary commands.

The vulnerability of the Fortinet FortiPortal security analysis and management tool is related to the rigid encoding of registration data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS8.1AI score0.03333EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:00 a.m.13 views

The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020 and EcoStruxure Geo SCADA Expert 2019 lies in the insufficient protection of registration data, allowing unauthorized access by attackers to the protected information.

The vulnerability of SCADA systems such as EcoStruxure Geo SCADA Expert 2020 and EcoStruxure Geo SCADA Expert 2019 is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

7.8CVSS7.2AI score0.0031EPSS
SaveExploits0References3Affected Software2
OSV
OSV
added 2021/08/13 5:15 p.m.10 views

CVE-2021-36791

The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...

5.3CVSS5.8AI score0.00801EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/08/13 5:15 p.m.5 views

CVE-2021-36791

The datednews aka Dated News extension through 5.1.1 for TYPO3 allows Information Disclosure of application registration data...

5.3CVSS6.8AI score0.00801EPSS
SaveExploits0References3
CVE
CVE
added 2021/08/13 4:06 p.m.116 views

CVE-2021-36791

CVE-2021-36791 affects the TYPO3 Dated News extension (dated_news) up to version 5.1.1, enabling information disclosure of application registration data. The available sources (NVD/Red Hat/CVE records and TYPO3 advisory) confirm the vulnerability and affected component but do not include explicit...

5.3CVSS5.5AI score0.00801EPSS
SaveExploits0References2Affected Software1
Typo3
Typo3
added 2021/08/10 12:00 a.m.119 views

Multiple vulnerabilities in Extension "Dated News" (dated_news)

The extension fails to properly encode user input for output in HTML context CVE-2021-36790 and contains a blind SQL injection vulnerability CVE-2021-36789. It is also possible to confirm various applications CVE-2021-36792 and thereby obtain all application registration data CVE-2021-36791...

7.5CVSS7.1AI score0.00996EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/10 12:00 a.m.15 views

The vulnerability of the command-line interface of Cisco SD-WAN micro-programming software allows a hacker to read arbitrary files or gain unauthorized access to the device.

The vulnerability of the command-line interface of Cisco SD-WAN software lies in the insufficient protection of registration data. Exploiting this vulnerability allows an attacker to read arbitrary files or gain unauthorized access to the device...

5.5CVSS6AI score0.00254EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:00 a.m.9 views

The vulnerability of the mutt email client, related to insufficient protection of registration data, allows attackers to gain access to confidential information.

The vulnerability of the mutt email client is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

5.3CVSS5.9AI score0.02351EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.11 views

The vulnerability of the McAfee True Key Windows Client password storage tool allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the McAfee True Key Windows Client password storage tool relates to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5CVSS5.5AI score0.00359EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:00 a.m.13 views

The vulnerability of the Cisco Jabber software platform, related to insufficient protection of registration data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco Jabber software platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information through a specially crafted XMPP message...

6.8CVSS6.8AI score0.00796EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/16 12:00 a.m.10 views

The vulnerability of Belden Hirschmann HiOS and HiSecOS operating systems lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Belden Hirschmann HiOS and HiSecOS lies in the insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

10CVSS7.8AI score0.01264EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:00 a.m.15 views

The vulnerability of the client’s execution file airhost.exe allows unauthorized access to protected information when conducting real-time audio and video conferences using Zoom Client for Meetings.

The vulnerability of the airhost.exe executable file used by clients for real-time audio and video conferencing with Zoom Client for Meetings is related to the rigid encoding of registration data when using the SHA-256 hashing algorithm. Exploiting this vulnerability can allow a malicious...

7.5CVSS7.1AI score0.01706EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:00 a.m.11 views

The vulnerability of the online business analytics service IBM Cognos Analytics, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.5CVSS5.8AI score0.02371EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:00 a.m.10 views

The vulnerability of the online business analytics service IBM Cognos Analytics, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the online business analytics service IBM Cognos Analytics is related to insufficient protection of registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.9CVSS5.8AI score0.02371EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/04 12:00 a.m.15 views

The vulnerability of the IBM Security Guardium security tool, related to insufficient protection of registration data, allows attackers to gain unauthorized access to the protected information.

The vulnerability of the IBM Security Guardium security tool is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the protected information...

5.1CVSS6.3AI score0.00199EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/04 12:00 a.m.9 views

The vulnerability of the IBM Security Guardium security tool, related to the rigid encoding of registration data, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IBM Security Guardium security tool is related to the rigid encoding of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS6.6AI score0.00963EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.10 views

The vulnerability of the CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 optical line terminals is related to rigid encoding of registration data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of optical line terminal devices such as CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS...

10CVSS7.8AI score0.01477EPSS
SaveExploits1References3Affected Software28
Rows per page
Query Builder