Lucene search
+L

14 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/05 11:57 p.m.•91 views

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8.3AI score0.00762EPSS
SaveExploits1References11Affected Software9
BDU FSTEC
BDU FSTEC
•added 2026/08/03 12:00 a.m.•14 views

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin allows a attacker to execute arbitrary code.

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

8.6CVSS5.9AI score0.00184EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/07/15 12:00 a.m.•14 views

The vulnerability of the Python programming language’s pip module, related to the inclusion of functions from an unreliable and uncontrolled area, allows a perpetrator to execute arbitrary code.

The vulnerability of the Python programming language’s pip module is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

6.2CVSS6.6AI score0.00171EPSS
SaveExploits0References9Affected Software12
Redos
Redos
•added 2026/07/13 12:00 a.m.•12 views

ROS-20260713-73-0027

The vulnerability of the Python JSON Logger library is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by deploying a specially crafted package...

8.8CVSS8.5AI score0.01609EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•14 views

The vulnerability of the shell-env package for the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) allows a perpetrator to execute arbitrary code.

The vulnerability of the shell-env package for the AI agent OpenClaw formerly known as ClawdBot or MoltBot lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

6.1CVSS7.2AI score0.00125EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/03/02 12:00 a.m.•16 views

The vulnerability of the telnetd server of the inetutils network programming package allows a hacker to elevate their privileges to the root level.

The vulnerability of the telnetd server in the inetutils network programming package is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a attacker to elevate their privileges to the root level...

7.4CVSS5.8AI score0.002EPSS
SaveExploits4References9Affected Software4
RedhatCVE
RedhatCVE
•added 2026/01/09 9:57 a.m.•19 views

CVE-2020-12680

Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the executable file Avira.PWM.NativeMessaging.exe are aimed at collecting credentials stored in Chrome, Firefox, Opera, and Edge. The executable does not verify the calling program and th...

5.5CVSS6.5AI score0.00344EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/11/29 12:00 a.m.•25 views

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in the fact that it allows unauthorized users to execute arbitrary code. This vulnerability stems from the inclusion of functions from an unverified and uncontrolled area.

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow attackers to execute arbitra...

7.3CVSS6AI score0.00154EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/03 12:00 a.m.•16 views

The vulnerability of the IntelliJ IDEA integrated development environment lies in the fact that functions from an unverified and uncontrolled area can be enabled, allowing a malicious actor to execute arbitrary plugins.

The vulnerability of the IntelliJ IDEA software development environment lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability can allow attackers to execute arbitrary plugins...

7.3CVSS6AI score0.00129EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/22 5:35 p.m.•22 views

CVE-2020-9095

HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160C00E160R2P8 has an integer overflow vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause integer...

5.5CVSS7.1AI score0.00199EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/03/10 12:00 a.m.•21 views

The vulnerability of the Python JSON Logger library, a programming language, stems from the inclusion of functions from an unverified and uncontrolled area. This allows attackers to execute arbitrary code.

The vulnerability of the Python JSON Logger library is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by deploying a specially crafted package...

10CVSS7.6AI score0.01609EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/10/28 12:00 a.m.•17 views

The vulnerability of the performance.getEntries() method in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the performance.getEntries method in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a remote attacker to obtain URL records from various...

7.6CVSS6.9AI score0.00426EPSS
SaveExploits0References20Affected Software18
BDU FSTEC
BDU FSTEC
•added 2022/04/19 12:00 a.m.•27 views

The vulnerability of the Advanced Tab for Dialogs plugin of the CKEditor editor allows a hacker to manipulate the content of the address bar.

The vulnerability of the Advanced Tab for Dialogs plugin for the CKEditor editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to manipulate the content of the address bar remotely...

7.1CVSS6.9AI score0.0197EPSS
SaveExploits0References5Affected Software9
BDU FSTEC
BDU FSTEC
•added 2022/04/19 12:00 a.m.•22 views

The vulnerability of the Autolink plugin for the CKEditor WYSIWYG editor, which stems from the inclusion of functions from an unverified controlled area, allows attackers to trigger a service failure.

The vulnerability of the Autolink plugin for the CKEditor WYSIWYG editor is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.1CVSS6.7AI score0.02223EPSS
SaveExploits0References6Affected Software10
Rows per page
Query Builder