Lucene search
+L

5590 matches found

BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.7 views

The vulnerability in the web interface of the IBM InfoSphere Information Server’s data integration software allows a perpetrator to execute arbitrary JavaScript code and gain unauthorized access to the protected resources.

The vulnerability of the web interface of the IBM InfoSphere Information Server software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code and gain...

5.5CVSS6.3AI score0.00376EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/22 12:0 a.m.8 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS6.3AI score0.00311EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:0 a.m.10 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to carry out cross-site attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site attacks remotely...

5.5CVSS6.5AI score0.00609EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:0 a.m.12 views

The vulnerability of the Site Configuration Tool tool in the NetAct network management system allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Site Configuration Tool in the NetAct network management system is related to insufficient protection of the web page structure during file loading. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.8CVSS5.6AI score0.00371EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:0 a.m.7 views

The vulnerability of the Fortinet FortiNAC access control device lies in its lack of measures to protect the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Fortinet FortiNAC network access control device is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted HTTP requests...

7.6CVSS5.6AI score0.00514EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/20 12:0 a.m.7 views

The vulnerability of the Alarm Reports Dashboard, a component of the NetAct network management system, allows a violator to perform cross-site scenario attacks.

The vulnerability of the Alarm Reports Dashboard of the NetAct network management system is related to insufficient protection of the website structure during task creation. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.8CVSS5.6AI score0.00371EPSS
SaveExploits0References1Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.30 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.7AI score0.00223EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.42 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.7AI score0.00223EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.30 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.6AI score0.00223EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.31 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.6AI score0.00223EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2023/03/16 12:0 a.m.33 views

Siemens Tecnomatix Plant Simulation SPP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Tecnomatix Plant Simulation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...

7.8CVSS7.7AI score0.00217EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:0 a.m.12 views

The vulnerability in the implementation of the TLS protocol in the Linux operating system allows a attacker to cause a service failure.

The vulnerability in the implementation of the TLS protocol in Linux operating systems is related to the lack of checks on a certain data structure field, which can lead to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

3.3CVSS6.5AI score0.00217EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:0 a.m.7 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of protective measures for website structures. This allows attackers to execute arbitrary code.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS6.3AI score0.10128EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:0 a.m.6 views

The vulnerability of the tap_open() function (/drivers/net/tap.c) in the Linux kernel’s virtual network adapter driver allows a hacker to exploit their privileges.

The vulnerability of the tapopen function /drivers/net/tap.c in the Linux kernel’s TAP network adapter driver is related to the use of an inappropriate data structure description for reading data from memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

5.5CVSS6.4AI score0.00257EPSS
SaveExploits0References17Affected Software3
Fedora
Fedora
added 2023/03/11 3:53 a.m.50 views

[SECURITY] Fedora 38 Update: redis-7.0.9-1.fc38

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

6.5CVSS6.1AI score0.59706EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/03/11 12:0 a.m.10 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created website...

6.4CVSS6.4AI score0.00502EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/11 12:0 a.m.9 views

The vulnerability in the web interface for controlling Siemens SCALANCE industrial switches allows a hacker to execute arbitrary code.

The vulnerability of the web interface for controlling Siemens SCALANCE microprogrammable industrial controllers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS6.3AI score0.00589EPSS
SaveExploits0References5Affected Software3
Fedora
Fedora
added 2023/03/10 1:24 a.m.50 views

[SECURITY] Fedora 37 Update: redis-7.0.9-1.fc37

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

6.5CVSS6.1AI score0.59706EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.22 views

Debian: Security Advisory (DLA-89-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS9.6AI score0.06109EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/07 12:0 a.m.7 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, which allows an attacker to execute XSS attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.8AI score0.00746EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder