Lucene search
+L

5613 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.14 views

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

6.1CVSS6.6AI score0.02419EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.9 views

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

6.1CVSS6.6AI score0.02626EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:0 a.m.24 views

Foxit Studio Photo EZI File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS3.7AI score0.03422EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.12 views

The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint software package is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted requests...

5.4CVSS6AI score0.01571EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:0 a.m.37 views

Foxit Studio Photo EZIX File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS3.6AI score0.03451EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2019/04/17 12:0 a.m.32 views

Foxit Studio Photo JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling ...

7.8CVSS3.6AI score0.03451EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.7 views

The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint software package is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted requests...

5.4CVSS6AI score0.01571EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.8 views

The vulnerability of the Team Foundation Server project management and version control system arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the Team Foundation Server project management and version control system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.4CVSS6.7AI score0.01773EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.8 views

The vulnerability of the Network Configuration Transfer tool of the firewall, The Expedition Migration tool, exists due to the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary JavaScript or HTML code.

The vulnerability of the Network Configuration Transfer tool exists because no measures have been taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript or HTML code remotely...

4.8CVSS6AI score0.01063EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.8 views

The vulnerability of the Expedition Migration tool, which exists due to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary JavaScript or HTML code.

The vulnerability of the Network Configuration Transfer tool exists because no measures have been taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript or HTML code remotely...

4.8CVSS6AI score0.01063EPSS
SaveExploits1References4Affected Software1
zdt
zdt
added 2019/04/03 12:0 a.m.117 views

WebKit JavaScriptCore - createRegExpMatchesArray Type Confusion Exploit

/ Prerequisites ------------- In JavaScriptCore, JSObjects have an associated Structure: an object describing various aspects of the JSObject such as its type, its properties, and the type of elements being stored e.g. unboxed double or JSValues. Whenever a property is added to an object or some...

8.8CVSS9AI score0.18108EPSS
SaveExploits2
Exploit DB
Exploit DB
added 2019/04/03 12:0 a.m.130 views

WebKit JavaScriptCore - 'createRegExpMatchesArray' Type Confusion

/ Prerequisites ------------- In JavaScriptCore, JSObjects have an associated Structure: an object describing various aspects of the JSObject such as its type, its properties, and the type of elements being stored e.g. unboxed double or JSValues. Whenever a property is added to an object or some...

9.3CVSS7.3AI score0.18108EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2019/03/29 12:0 a.m.8 views

The vulnerability of the pg_upgrade and pg_dump utilities in the PostgreSQL database management system allows a hacker to execute arbitrary SQL commands.

The vulnerability of the pgupgrade and pgdump utilities in the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

9.8CVSS7.9AI score0.0515EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.10 views

The vulnerability of the Team Foundation Server and Microsoft SharePoint Foundation software systems, which are used for project management and version control, stems from the lack of protective measures for the website structure. This vulnerability allows a hacker to execute arbitrary code in a user’s browser.

The vulnerability of Team Foundation Server and Microsoft SharePoint Foundation software lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a user’s browser remotely...

3.5CVSS6.6AI score0.01652EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.9 views

The vulnerability of the NuGet package management system allows a hacker to alter the folder structure of a package.

The vulnerability of the NuGet package management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to alter the package’s folder structure...

6.3CVSS6.8AI score0.02696EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.9 views

The vulnerability of the Team Foundation Server’s project management and version control system arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code in users’ browsers.

The vulnerability of the Team Foundation Server project management and version control system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser...

3.5CVSS6.7AI score0.01697EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2019/03/26 12:0 a.m.33 views

Apple macOS SCSITaskUserClient Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SCSITaskUserClient...

7.8CVSS4AI score0.00395EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.12 views

The vulnerability of the identification management service of the Cisco Digital Network Architecture (DNA) Center arises from the lack of protective measures for the website structure, allowing attackers to access confidential information.

The vulnerability in the web interface of the management service exists because measures to protect the structure of the web page have not been taken. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information through a specially...

5.5CVSS5.9AI score0.00876EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.6 views

The vulnerability of the Advantech WebAccess remote monitoring software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Advantech WebAccess remote monitoring software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.8AI score0.01882EPSS
SaveExploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.7 views

The vulnerability of Microsoft Lync Server and Skype for Business Server messaging programs lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Microsoft Lync Server and Skype for Business Server’s instant messaging programs is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack using a specially...

6.4CVSS6.3AI score0.02084EPSS
SaveExploits0References2
Rows per page
Query Builder