Lucene search
K

55 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data, which allows attackers to circumvent existing security restrictions.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions using a specially created file...

6.8CVSS5.4AI score0.0026EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.1 views

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created EMF file...

3.3CVSS6.2AI score0.00122EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/28 12:0 a.m.1 views

The vulnerability of the application for updating Google Updater allows a perpetrator to elevate their privileges.

The vulnerability of the application for updating Google Updater is related to data processing errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

7.3CVSS7.2AI score0.0004EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.1 views

The vulnerability of Microsoft Defender operating systems for Windows, which allows a hacker to bypass existing security restrictions

The vulnerability of Microsoft Defender’s operating system vulnerabilities is related to security configuration errors. Exploiting this vulnerability can allow a hacker to bypass existing security restrictions using a specially created file...

5.5CVSS6.6AI score0.00255EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.1 views

The vulnerability of the xmlValidatePopElement function in the XML Reader Interface component of the Libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlValidatePopElement function in the XML Reader Interface component of the Libxml2 library is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created file...

7.8CVSS6.6AI score0.00165EPSS
Exploits3References19Affected Software9
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:0 a.m.1 views

Microsoft Edge’s vulnerability, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created file...

5.2CVSS5.9AI score0.00893EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.1 views

The vulnerability of Google Chrome’s Skia graphics library allows a hacker to escape from the isolated software environment.

The vulnerability of Google Chrome’s Skia graphics library stems from a numerical overflow condition. Exploiting this vulnerability allows an attacker to escape from a isolated software environment by introducing a specially created file...

10CVSS8.1AI score0.01287EPSS
Exploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/11/09 12:0 a.m.2 views

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the use of an uninitialized pointer on the stack, allowing a malicious actor to execute arbitrary code within the context of the current process.

The vulnerability of the Siemens Solid Edge design and simulation tools is related to the use of an uninitialized pointer on the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process, through the use of specially created P...

7.8CVSS7.6AI score0.00059EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:0 a.m.1 views

The vulnerability of the nAtoms function in the Open Babel file conversion software allows a hacker to execute arbitrary code.

The vulnerability of the nAtoms function in the Open Babel file conversion software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file...

10CVSS8.2AI score0.00223EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.1 views

The software for resource planning in Microsoft Dynamics 365 is vulnerable due to the lack of security measures taken to protect the website structure. This vulnerability allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

6.4CVSS6.6AI score0.00285EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/18 12:0 a.m.1 views

The vulnerability of the Microsoft Outlook email client, related to insufficient validation of input data, allows a hacker to execute arbitrary code on the target system.

The vulnerability of the Microsoft Outlook email client is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially created file...

7.1CVSS8.2AI score0.00641EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:0 a.m.1 views

The vulnerability of the OneDrive file sharing service, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the OneDrive for Windows file sharing service is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.7AI score0.01149EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.1 views

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. This allows a malicious actor to gain unauthorized access to protected information or cause service failures.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...

5.5CVSS5.7AI score0.0022EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:0 a.m.1 views

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.8AI score0.00097EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/09 12:0 a.m.1 views

The vulnerability of the Microsoft.NET Framework, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft.NET Framework is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.04954EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/28 12:0 a.m.4 views

The vulnerability of the Azure RTOS GUIX Studio development environment, due to insufficient testing of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Azure RTOS GUIX Studio development environment exists due to insufficient testing of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.8AI score0.02297EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/25 12:0 a.m.2 views

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to disclose protected information by using a specially created file...

7.8CVSS6.8AI score0.26117EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2022/08/04 12:0 a.m.1 views

The vulnerability of the Advantech DeviceOn/iService software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech DeviceOn/iService software is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

8.8CVSS7.6AI score0.00038EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/02 12:0 a.m.2 views

The vulnerability of the Advantech SQ Manager Server software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech SQ Manager Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to increase their privileges by using a specially created file...

8.8CVSS7.6AI score0.00038EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.1 views

The vulnerability of Adobe InCopy, a text creation and editing software, relates to memory usage after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

7.8CVSS7.6AI score0.1143EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder