Lucene search
+L
Bdu FstecMost viewed

92920 matches found

BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.21 views

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the confcli file. Exploiting this vulnerability allows a remote attacker to execute arbitra...

9.6CVSS8.1AI score0.01232EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.21 views

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform lies in improper cleaning or release of resources, allowing a perpetrator to cause service failures.

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.04943EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.21 views

The vulnerability of Eclipse Jetty servlet containers, related to errors in information processing, allows attackers to gain unauthorized access to protected information.

The vulnerability of Eclipse Jetty servlet containers is related to errors in information processing. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS6.6AI score0.82371EPSS
SaveExploits7References28Affected Software11
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.21 views

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform lies in improper cleaning or release of resources, allowing a perpetrator to cause service failures.

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.8AI score0.03551EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.21 views

The vulnerability of the Vim text editor lies in the fact that an operation can be performed outside the buffer, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.6AI score0.01461EPSS
SaveExploits1References17Affected Software10
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.21 views

The vulnerability of the ActiveX control on the SCADA server of Measuresoft ScadaPro Server allows a intruder to execute arbitrary code.

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server relates to the use of an untrusted indicator. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.8CVSS7.6AI score0.00291EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.21 views

The vulnerability of the Vim text editor lies in the fact that an operation can be performed outside the buffer, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.5AI score0.01792EPSS
SaveExploits1References16Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.21 views

The vulnerability of the QPDF::processXRefStream function in the command-line utility for converting QPDF documents allows a attacker to cause a service failure.

The vulnerability of the QPDF::processXRefStream command-line utility for converting PDF documents is related to the lack of resource release after the expiration of its useful period. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS6.1AI score0.00744EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.21 views

The software for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission is vulnerable due to incorrect restrictions on the path to the restricted access catalog. This allows attackers to create or overwrite critical files and execute arbitrary code.

The vulnerability of the software used for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission involves incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to create or re-record...

7.8CVSS8.1AI score0.00782EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/11 12:0 a.m.21 views

The vulnerability of the microprogrammed network interface devices of Advanced Secure Gateway (ASG) and ProxySG, related to HTTP request processing flaws, allows attackers to execute the “HTTP request hijacking” attack.

The vulnerability of the Advanced Secure Gateway ASG and ProxySG’s microprogramming software lies in the shortcomings of their HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute an “HTTP request hijacking” attack...

9.4CVSS7.9AI score0.01562EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.21 views

The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, is related to deficiencies in pathname restriction, which allows attackers to compromise the confidentiality of information.

The vulnerability of the QTS operating system is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of information...

5.3CVSS6.2AI score0.00914EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.21 views

The vulnerability of the executable files instup.exe and wsc_proxy.exe of the antivirus protection software Avast Premium Security allows a perpetrator to execute arbitrary code or cause service failure.

The vulnerability of the installed files instup.exe and wscproxy.exe of the antivirus protection software Avast Premium Security is related to the use of an insecure search path. Exploiting this vulnerability can allow a hacker to execute arbitrary code or cause service failures...

6.8CVSS7AI score0.00277EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.21 views

The vulnerability of the OAS Engine SecureAddUser function in the platform for data transmission between devices and applications allows a perpetrator to gain unauthorized access to the system.

The vulnerability of the OAS Engine SecureAddUser function on the platform for data transfer between devices and applications is related to the lack of authentication checks for this critical function. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...

7.8CVSS7.2AI score0.01258EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.21 views

The vulnerability of the btrfs_alloc_tree_b function (fs/btrfs/extent-tree.c) in the file system of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the btrfsalloctreeb function fs/btrfs/extent-tree.c in the file system of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.004EPSS
SaveExploits1References19Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:0 a.m.21 views

The vulnerability of Safety Manager and microprogrammed logic controllers from Honeywell, such as Honeywell Experion PKS, arises from the use of rigidly encoded user data. This allows unauthorized individuals to gain access to the protected information.

The vulnerability of Safety Manager and microprogrammed logic controllers from Honeywell Experion PKS lies in the use of strictly encrypted user data. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

7.8CVSS5.5AI score0.00292EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/06/28 12:0 a.m.21 views

The vulnerability of the Inter-controller protocol implementation in Honeywell’s programmable logic controllers’ microprogramming software arises from the transmission of PIN codes, user names, and passwords as plain text. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Inter-controller protocol implementation for Honeywell programmable logic controllers involves the transmission of PIN codes, user names, and passwords as plain text. Exploiting this vulnerability could allow an unauthorized attacker to gain unauthorized access to protect...

7.8CVSS5.5AI score0.00232EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.21 views

The vulnerability of the Web Services Security component of the Oracle Web Services Manager allows a perpetrator to gain read access to data or modify data.

The vulnerability of the Web Services Security component of the Oracle Web Services Manager exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to data or modify data using specially crafted HTTP...

8.1CVSS6.9AI score0.01663EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.21 views

The vulnerability of the JNDI component of the Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to access, modify, add, or delete data.

The vulnerability of the JNDI component of the Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete...

5.3CVSS6.2AI score0.02828EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/06/08 12:0 a.m.21 views

The vulnerability of the MultipartStream.java file in the Apache Commons FileUpload library allows a hacker to induce a service failure.

The vulnerability of the MultipartStream.java file in the Apache Commons FileUpload library is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by manipulating the Content-Type header created by the...

7.5CVSS6.6AI score0.83175EPSS
SaveExploits8References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/06/07 12:0 a.m.21 views

The vulnerability of the Business Logic Infra SEC component of the JD Edwards EnterpriseOne Tools system for managing enterprise resources allows a perpetrator to gain access to data or cause service interruptions.

The vulnerability of the Business Logic Infra SEC component of the JD Edwards EnterpriseOne Tools system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain read access to data or cause service failures through HTTP requests...

8.5CVSS7.5AI score0.02089EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/21 12:0 a.m.21 views

The vulnerability of the ext/snmp/snmp.c component of the PHP programming language interpreter allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the ext/snmp/snmp.c component of the PHP programming language interpreter is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially have other effects through specially created...

10CVSS7.6AI score0.05417EPSS
SaveExploits1References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.21 views

The vulnerability of the FortiOS operating system’s signature verification function allows a hacker to execute arbitrary code.

The vulnerability of the FortiOS operating system’s signature verification function is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created installation images...

9.3CVSS8.4AI score0.0144EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.21 views

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decoder in the MPEG-4 multimedia platform GPAC’s decoding function is related to the lack of a mechanism for converting data types. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.6AI score0.01632EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.21 views

The vulnerability of the LibreOffice office software package lies in its improper verification of the cryptographic signature, allowing a hacker to circumvent security restrictions.

The vulnerability of the LibreOffice office software package is related to incorrect verification of the cryptographic signature when using the “X509Data” and “KeyValue” values. Exploiting this vulnerability can allow an attacker to circumvent security restrictions by using a specially created OD...

6.3CVSS7.4AI score0.00981EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/05 12:0 a.m.21 views

The vulnerability of the Exiv2 metadata management library, related to the execution of a loop with an unreachable exit condition, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 media metadata management library lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created image file...

7.1CVSS6.7AI score0.01113EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/04 12:0 a.m.21 views

The vulnerability of the HEVC Video Extension codec, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability of the HEVC Video Extension is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted request...

9.3CVSS8AI score0.03631EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/03/11 12:0 a.m.21 views

The vulnerability of the Yokogawa CENTUM VP SCADA system, related to errors in the code, allows a intruder to execute arbitrary commands.

The vulnerability of the Yokogawa CENTUM VP SCADA system is related to errors in the code. Exploiting this vulnerability allows an intruder to execute arbitrary code by modifying the project files and injecting their own code into them, which will be executed upon a specified event...

6.3CVSS6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.21 views

The vulnerability of NETGEAR’s embedded software for routers such as D7800, R7500v2, R7800, R8900, R9000, RAX1200, and XR700 lies in the lack of measures to sanitize input data. This allows attackers to execute arbitrary commands.

The vulnerability of NETGEAR’s embedded routing software, including models such as D7800, R7500v2, R7800, R8900, R9000, RAX1200, and XR700, stems from the lack of measures to sanitize input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.7CVSS7.5AI score0.01216EPSS
SaveExploits0References3Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.21 views

The vulnerability of HEVC Video Extensions relates to improper code generation, allowing attackers to execute arbitrary code.

The vulnerability of HEVC Video Extensions is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.8AI score0.02512EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/09 12:0 a.m.21 views

The vulnerability of the embedded software of NETGEAR routers such as R7900P, R7960P, R8000, R8000P, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, RAX75 lies in the lack of measures to sanitize input data. This allows a hacker to execute arbitrary commands.

The vulnerability of NETGEAR R7900P, R7960P, R8000, R8000P, MR60, RAX20, RAX45, RAX80, MS60, RAX15, RAX50, and RAX75 router software lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.4CVSS7.1AI score0.00631EPSS
SaveExploits0References3Affected Software12
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.21 views

The vulnerability of NETGEAR CBR750, RBK852, RBR850, and RBS850 Wi-Fi routers’ microprogramming software lies in insufficient cleaning of input data, allowing attackers to execute arbitrary commands.

The vulnerability of NETGEAR’s Wi-Fi router software, including models CBR750, RBK852, RBR850, and RBS850, lies in insufficient cleaning of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.6CVSS8.1AI score0.01667EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.21 views

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.7CVSS6.5AI score0.01024EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.21 views

The vulnerability of the adts_decode_extradata function in the libavformat/adtsenc.c component of the FFmpeg multimedia library, related to an unvalidated return value, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the adtsdecodeextradata function in the libavformat/adtsenc.c component of the FFmpeg multimedia library is related to an unvalidated return value of initgetbits. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, compromise its...

9.8CVSS7.2AI score0.02411EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/12/24 12:0 a.m.21 views

The vulnerability of the sub_8003183C function (/fromLogin) in the wireless router software D-Link DIR-809 allows a hacker to execute arbitrary code on the target system.

The vulnerability of the FUN80034d60 /formStaticDHCP function of the D-Link DIR-809 wireless router is related to stack buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the system via the created POST request...

10CVSS8.7AI score0.03938EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/13 12:0 a.m.21 views

The vulnerability of the HarmonyOS operating system’s kernel arises from insufficient validation of input data, allowing attackers to trigger service failures.

The vulnerability of the HarmonyOS operating system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.7AI score0.00752EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.21 views

The vulnerability of the ngx_memcpy function in the OpenResty web server, related to buffer overflows, allows attackers to cause a service failure.

The vulnerability of the memcpy-param-overlap function in the OpenResty web server is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service interruptions...

3.9CVSS5.9AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.21 views

The vulnerability of the microprogrammed logic controller ioLogik’s software, related to hard-coding passwords, allows a intruder to escalate their privileges and execute arbitrary code.

The vulnerability of the microprogrammed logic controller ioLogik software relates to the rigid encoding of passwords. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code remotely...

10CVSS5.9AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/11 12:0 a.m.21 views

The vulnerability of the IOMobileFramebuffer extension in iOS, iPadOS, watchOS, and macOS allows a hacker to execute arbitrary code.

The vulnerability of the IOMobileFramebuffer extension in iOS, iPadOS, watchOS, and macOS relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.5AI score0.28839EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/11/11 12:0 a.m.21 views

The vulnerability of the KrugCorrectTime.exe software of the SCADA system “KRUG-2000” lies in the lack of authentication for a critical function, allowing a intruder to cause a malfunction in the normal operation of the SCADA system.

The vulnerability of the KrugCorrectTime.exe software component of the SCADA system “KRUG-2000” lies in the lack of authentication for a critical function. Exploiting this vulnerability could allow an intruder to cause malfunctions in the normal operation of the SCADA system...

7.7CVSS5.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:0 a.m.21 views

The vulnerability of AMD’s microprogrammed software for processors lies in the speculative execution of read and write operations that access memory using invalid non- canonical addresses. This allows a hacker to exploit the vulnerability to gain access to information about the CPU’s address space.

The vulnerability of AMD’s microprogramming software is related to speculative operations for reading and writing data to memory, involving the use of non- canonical addresses. Exploiting this vulnerability can allow an attacker to gain access to information about the CPU’s address space, by usin...

6.2CVSS5.5AI score0.0242EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.21 views

The vulnerability of the Visual Composer browser-based modeling tool of the SAP NetWeaver software integration platform allows a perpetrator to escalate their privileges, execute arbitrary commands, or cause service interruptions.

The vulnerability of the Visual Composer browser-based modeling tool of the SAP NetWeaver software integration platform is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a remote attacker to enhance their privileges, execute arbitrary commands, or cau...

9.9CVSS7.9AI score0.36018EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.21 views

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to insufficient verification of session tokens. This allows attackers to increase their privileges.

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, is related to insufficient verification of session tokens. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.6AI score0.00316EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.21 views

The vulnerability of the VAPI service, a management tool for virtual infrastructure VMware vCenter Server, allows a attacker to cause a service failure.

The vulnerability of the VAPI service, a component of the VMware vCenter Server virtual infrastructure management tool, involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted HTTP...

7.5CVSS6.8AI score0.01403EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.21 views

The vulnerability of the iOS operating system’s kernel, which allows a hacker to obtain confidential information

The vulnerability of the iOS operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to obtain confidential information through a specially created application...

5.5CVSS6.9AI score0.30322EPSS
SaveExploits7References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:0 a.m.21 views

The vulnerability of the Siemens Solid Edge Viewer application, a tool set for design and simulation with Siemens Solid Edge, allows a malicious actor to execute arbitrary code.

The vulnerability of the Siemens Solid Edge Viewer application, a tool for design and simulation, is related to the use of memory after it is freed during OBJ file syntax analysis. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicio...

8.8CVSS7.6AI score0.01159EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/08 12:0 a.m.21 views

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware Cloud Foundation, relates to insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.5AI score0.01944EPSS
SaveExploits5References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/05 12:0 a.m.21 views

The vulnerability of the syntactic analyzer in the mac80211 subsystem of the Linux operating system’s kernel allows a perpetrator to trigger a service failure due to pointer arithmetic errors.

The vulnerability of the syntactic analyzer in the mac80211 subsystem of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure by injecting a 802.11a frame...

5.5CVSS6.5AI score0.00269EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.21 views

The vulnerability in the `parser_parse_function_statement` function of the `js-parser-statm.c` component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform, related to the insufficient use of the `assert()` function, allows a attacker to trigger a service failure.

The vulnerability of the parserparsefunctionstatement function in the js-parser-statm.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform is related to incorrect comparisons. Exploiting this vulnerability could allow a remote attacker to cause a...

7.5CVSS7.2AI score0.01149EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:0 a.m.21 views

The vulnerability of the Shops module in the NukeViet content management system allows a hacker to execute arbitrary SQL code.

The vulnerability of the Shops module in the NukeViet content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code through the listid parameter in the detail.php script, ...

9.8CVSS8.2AI score0.01576EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/18 12:0 a.m.21 views

The vulnerability of the TrustAccess network firewall, related to deficiencies in information protection mechanisms, allows attackers to perform privileged operations.

The vulnerability of TrustAccess is related to deficiencies in information protection mechanisms. Exploiting this vulnerability allows a perpetrator with access to the directory where TrustAccess is installed to perform privileged operations through a DLL hijacking attack. This is achieved by...

6.3CVSS5.5AI score
SaveExploits0Affected Software1
Total number of security vulnerabilities5000