Lucene search
+L

2628 matches found

BDU FSTEC
BDU FSTEC
added 2020/06/26 12:0 a.m.10 views

The vulnerability of the vclmi.dll component in the OpenOffice.org office software suite, specifically LibreOffice, relates to numerical processing errors. This vulnerability allows an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the vclmi.dll component in the OpenOffice.org suite of office programs for LibreOffice is related to numerical processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data...

10CVSS5.4AI score0.13734EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:0 a.m.9 views

The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager allows a malicious individual to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential...

7.8CVSS5.5AI score0.01227EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:0 a.m.7 views

The vulnerability of the doc/docmacromode.cxx component in the LibreOffice office software package allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability of the doc/docmacromode.cxx component in the LibreOffice office software package is related to a deficiency in the processing of macros. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise th...

10CVSS7.1AI score0.03922EPSS
Exploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/06/26 12:0 a.m.8 views

The vulnerability in the modules/serverdensity_device.py of the configuration management system and SaltStack remote execution module allows a perpetrator to gain unauthorized access to confidential data, cause service failures, or compromise data integrity.

The vulnerability in the modules/serverdensitydevice.py module of the Configuration Management system and SaltStack’s remote execution feature is related to a data processing error. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential data, cause service...

5.3CVSS6.1AI score0.00428EPSS
Exploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/06/10 12:0 a.m.7 views

The vulnerability of Huawei’s mobile phone microprogramming software, related to security mechanism errors, allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of Huawei’s mobile phone microprogramming software is related to security mechanism errors. Exploiting this vulnerability can allow a hacker to gain unauthorized access to protected data...

3.3CVSS5.4AI score0.00209EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/06/05 12:0 a.m.5 views

The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the Query component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to remotely cause service interruptions or gain unauthorized access to protected...

7.1CVSS7.1AI score0.01035EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/06/02 12:0 a.m.7 views

The vulnerability of the Web Based Report Designer component of the Oracle Hyperion Financial Reporting application allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Web Based Report Designer component of the Oracle Hyperion Financial Reporting application for automating budget management processes is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protect...

3.5CVSS5.8AI score0.00892EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.7 views

The vulnerability of the GDI component of the Windows operating system, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the Graphics Device Interface GDI component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS6.4AI score0.06257EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.4 views

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Filters component within the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause a partial service failure using the...

7.5CVSS7.2AI score0.01014EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.6 views

The vulnerability of the GDI component of the Windows operating system, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the Graphics Device Interface GDI component in the Windows operating system is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created applicatio...

5.5CVSS6.5AI score0.01618EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.6 views

The vulnerability of the “Estimate and Actual Charges” component of the Oracle Depot Repair automation software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the “Estimate and Actual Charges” component of the Oracle Depot Repair automation software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through the...

8.2CVSS7.4AI score0.01282EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.4 views

The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning component in the bank analytics system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the User Interface sub-component of the Oracle Financial Services Balance Sheet Planning banking analytics system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete, or modify access...

7.5CVSS7.2AI score0.01051EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.4 views

The vulnerability of the Transaction Processing sub-component of the Oracle FLEXCUBE Core Banking banking analytics system’s simulation model, Oracle Financial Services Applications. This vulnerability allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data. It can also cause partial service interruption.

The vulnerability of the Transaction Processing sub-component of the Oracle FLEXCUBE Core Banking banking analytics system, an imitation model of Oracle Financial Services Applications, is related to the lack of protection for operational data. Exploiting this vulnerability allows a malicious act...

6.5CVSS6.8AI score0.00898EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.8 views

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Oracle Marketing’s Marketing Administration component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP network protocol...

8.2CVSS7.5AI score0.01282EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2020/05/22 6:15 a.m.4 views

CVE-2020-3184

A vulnerability in the web-based management interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates...

7.2CVSS6.8AI score0.00944EPSS
Exploits0References1
NVD
NVD
added 2020/05/08 12:15 p.m.44 views

CVE-2020-12018

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...

7.5CVSS8AI score0.01529EPSS
Exploits0References2
OSV
OSV
added 2020/05/08 12:15 p.m.9 views

CVE-2020-12018

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...

7.5CVSS5.8AI score0.01529EPSS
Exploits0References2
Prion
Prion
added 2020/05/08 12:15 p.m.19 views

Out-of-bounds

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...

5CVSS7.5AI score0.01529EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/05/08 11:51 a.m.37 views

CVE-2020-12018

Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. An out-of-bounds vulnerability exists that may allow access to unauthorized data...

7.5AI score0.01529EPSS
Exploits0References2
CVE
CVE
added 2020/05/08 11:51 a.m.62 views

CVE-2020-12018

Advantech WebAccess Node (HMI platform) is affected by CVE-2020-12018 via an out-of-bounds read in IOCTL handling of ViewSrv.dll/DrawSrv.dll, exposing unauthorized data. Affected versions are WebAccess Node 8.4.4 and prior, and 9.0.0. The vulnerability enables information disclosure without authe...

7.5CVSS7.4AI score0.01529EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder