Lucene search
+L
Bdu FstecMost viewed

92710 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/28 12:0 a.m.20 views

The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster allows a intruder to execute arbitrary code.

The vulnerability of the SetAPLanSettings function in the microprogramming software of the D-Link DAP-1325 wireless signal booster is related to the execution of operations outside the buffer in memory when processing XML data. Exploiting this vulnerability allows a remote attacker to execute...

8.8CVSS8.4AI score0.00855EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/28 12:0 a.m.20 views

The vulnerability of the microprogramming software of the PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT arises from the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the microprogrammed software of the PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a...

10CVSS7.5AI score0.01794EPSS
SaveExploits1References5Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/09/26 12:0 a.m.20 views

The vulnerability of Google Chrome’s user tabs allows a hacker to replace the user’s interface.

The vulnerability of Google Chrome’s user tabs is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

5CVSS5.5AI score0.00663EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/09/15 12:0 a.m.20 views

The vulnerability of the ds_compress.cc component in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the dscompress.cc component in the MariaDB database management system arises due to blocking resource errors. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.8AI score0.00241EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/15 12:0 a.m.20 views

The vulnerability of the bt_quickfix function in the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.5AI score0.00528EPSS
SaveExploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.20 views

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the DHCP server service for Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

5.3CVSS6.9AI score0.24014EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.20 views

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS6.8AI score0.01093EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/08/31 12:0 a.m.20 views

The vulnerability of Zoom’s video conferencing software, related to the implementation of security features at the client side, allows attackers to gain unauthorized access to protected information.

The vulnerability of Zoom, a video conferencing software, is related to the implementation of security features at the client side. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.5CVSS6.5AI score0.01245EPSS
SaveExploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/08/23 12:0 a.m.20 views

The vulnerability of the SED software “DELO” stems from deficiencies in the authentication process, allowing a perpetrator to intercept the identifier and bypass the authentication mechanism.

The vulnerability of the SED software “DELO” is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to intercept the identifier and bypass the authentication mechanism...

10CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/08 12:0 a.m.20 views

The vulnerability of the Cast component of the Google Chrome browser, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Cast component of the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial-of-service attack by loading a specially created web page...

10CVSS8.1AI score0.01193EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.20 views

The vulnerability of the Google Chrome browser’s Extensions API allows a perpetrator to gain unauthorized access to local files.

The vulnerability of the Google Chrome browser’s Extensions API is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to local files...

7.8CVSS6.5AI score0.00463EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.20 views

The vulnerability of software for developing and executing applications in the ABAP language of SAP NetWeaver Application Server allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerabilities in software for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and...

7.4CVSS7.2AI score0.00392EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.20 views

The vulnerability of the cloud-based messaging and streaming transmission platform Apache Pulsar, related to authentication deficiencies, allows attackers to gain access to the configuration of the cloud-based platform.

The vulnerability of the cloud-based messaging and streaming communication platform Apache Pulsar is related to deficiencies in authentication mechanisms. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the configuration of the cloud-based platfo...

8.2CVSS6.9AI score0.00819EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.20 views

The vulnerability of the macOS operating system’s kernel allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the macOS operating system’s kernel is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass security restrictions and gain unauthorized access to protected information...

5.5CVSS6.6AI score0.00231EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.20 views

The vulnerability of CODESYS software products, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of CODESYS software products is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

7.8CVSS7.6AI score0.01871EPSS
SaveExploits0References2Affected Software19
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.20 views

The vulnerability of the kernel of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS allows attackers to execute arbitrary code with kernel privileges.

The vulnerability in the kernels of operating systems such as MacOS, iOS, tvOS, iPadOS, and watchOS relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges...

7.8CVSS7.6AI score0.00298EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/08/02 12:0 a.m.20 views

The vulnerability of the web server of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers allows a perpetrator to cause a service failure.

The vulnerability of the web server of the microprogramming software for SIMATIC MV540, MV550, and MV560 barcode readers is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

8.6CVSS7.3AI score0.00626EPSS
SaveExploits0References4Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.20 views

The vulnerability of the drm_mode_setcrtc() function in the drivers/gpu/drm/drm_crtc.c file of the DRM driver for the Astra Linux Special Edition operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the drmmodesetcrtc function in the drivers/gpu/drm/drmcrtc.c file of the DRM driver for the Astra Linux Special Edition operating system is related to access and manipulation of dynamically allocated uninitialized memory. Exploiting this vulnerability could allow an attacker ...

8.8CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.20 views

The vulnerability of the WebRTC technology implementation in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.13813EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.20 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted HTML page...

10CVSS8AI score0.23855EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:0 a.m.20 views

The vulnerability of the GetDeviceSettings function in the application software interface of D-Link DIR-2150 router software allows a hacker to execute arbitrary code.

The vulnerability of the GetDeviceSettings function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using specially...

7.7CVSS7.2AI score0.01429EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/06 12:0 a.m.20 views

The vulnerability of Juniper Networks’ Junos OS Evolved operating system, related to deficiencies in authentication procedures, allows attackers to execute arbitrary commands.

The vulnerability of Juniper Networks’ Junos OS Evolved operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary commands using the sysmanctl command...

7.1CVSS7.4AI score0.00146EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/05 12:0 a.m.20 views

The vulnerability of the SetTriggerPPPoEValidate function in the application software interface of D-Link DIR-2150 router microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the SetTriggerPPPoEValidate function in the application software interface of D-Link DIR-2150 router microprogramming devices is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially...

7.7CVSS7.1AI score0.0176EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/29 12:0 a.m.20 views

The vulnerability of the Red Hat Enterprise Linux operating system, related to access control deficiencies, allows a intruder to gain unauthorized access to limited functions.

The vulnerability of the Red Hat Enterprise Linux operating system is related to lack of access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to limited functions...

9.4CVSS6.8AI score0.00974EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.20 views

The vulnerability of microprogrammed software in network devices such as Zyxel ZyWALL/USG, VPN, USG FLEX, ATP allows a perpetrator to execute arbitrary commands.

The vulnerability of Zyxel ZyWALL/USG, VPN, USG FLEX, and ATP network devices exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS8.4AI score0.99284EPSS
SaveExploits8References3Affected Software19
BDU FSTEC
BDU FSTEC
added 2023/05/24 12:0 a.m.20 views

The vulnerability of the ksmbd module in Linux operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ksmbd module in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the SMB2SESSIONSETUP command...

9CVSS7.3AI score0.02615EPSS
SaveExploits0References14Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/05/15 12:0 a.m.20 views

The vulnerability of the NTLM Security Support Provider implementation in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTLM Security Support Provider in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

5.9CVSS6.8AI score0.01232EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/04/17 12:0 a.m.20 views

The vulnerability of the PDF-XChange PDF document viewing and editing program lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created TIFF file...

10CVSS7.6AI score0.00532EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/04/07 12:0 a.m.20 views

The vulnerability of Google Chrome’s browser history allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s browser is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

6.5CVSS8.4AI score0.00975EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:0 a.m.20 views

The vulnerability in the web interface for managing microprogramming software used in IPTV and VoD services, NetUP IPTV Combine, allows attackers to bypass security restrictions and gain increased privileges.

The vulnerability in the web-based administration interface of microprogramming software for IPTV and VoD services, NetUP IPTV Combine, is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increase...

10CVSS5.5AI score
SaveExploits0References1Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/23 12:0 a.m.20 views

The vulnerability of the audit log management mechanism of the Secure Access Management System IED Siemens RUGGEDCOM CROSSBOW allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the audit log management mechanism of the Secure Access Management System for IED Siemens RUGGEDCOM CROSSBOW is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL...

9CVSS6.8AI score0.00805EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.20 views

The vulnerability of the NGINX software configuration, which manages the Discourse mailing list, allows a hacker to cause a service failure.

The vulnerability of the NGINX software-based Discourse mailing list management system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

5.3CVSS5.9AI score0.00742EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/03/03 12:0 a.m.20 views

The vulnerability of the MKLogic-500 PLI configuration protocol, due to deficiencies in the encryption algorithm, allows attackers to decrypt the configuration protocol and modify the device’s configuration.

The vulnerability of the MKLogic-500 PLB protocol lies in the transmission of information sufficient to recover encryption keys in an open form. Exploiting this vulnerability allows a malicious actor to decrypt the PLB protocol and modify the device’s configuration...

9.7CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/28 12:0 a.m.20 views

The vulnerability in the web-based interface for controlling programmable logic controllers WAGO PFC100/PFC200, CC100, Edge Controller, and sensor panels WAGO Touch Panel 600 allows a intruder to execute arbitrary code.

The vulnerability of the web-based interface for controlling WAGO PFC100/PFC200, CC100, Edge Controller, and WAGO Touch Panel 600 programmable logic controllers is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker operating...

10CVSS7.4AI score0.0074EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.20 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malware file or a specially crafted...

5.5CVSS6.4AI score0.00609EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.20 views

The vulnerability of the kernel (NTOSKRNL) of Microsoft Windows operating systems, which allows a perpetrator to increase their privileges

The vulnerability of the kernel NTOSKRNL of Microsoft Windows is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.7AI score0.03603EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.20 views

The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Internet Storage Name Service iSNS for Windows operating systems is related to insufficient protection of service data due to operations going beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

6.2CVSS6.8AI score0.00497EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of the delivery interface component in NetScaler SD-WAN and Citrix SD-WAN software management tools allows attackers to enhance their privileges.

The vulnerability of the delivery interface component in NetScaler SD-WAN and Citrix SD-WAN software management tools is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

9CVSS7.7AI score0.74052EPSS
SaveExploits5References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of the Cisco IOS ROM Monitor, related to the leakage of file and directory information, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco IOS ROM Monitor is related to the leakage of information about files and directories. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.0027EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of Dell Container Storage Modules lies in their uncontrolled DLL search path, which allows an attacker to execute arbitrary code.

The vulnerability of the Dell Container Storage Modules relates to an uncontrolled DLL search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8AI score0.02167EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of the SICAM TOOLBOX II engineering software lies in the insufficient protection of the data transfer control protocol, allowing attackers to bypass access controls in the database service.

The vulnerability of the SICAM TOOLBOX II engineering software is related to insufficient protection of the data transfer control protocol. Exploiting this vulnerability can allow a malicious actor to gain access to the database using the 1522 TCP port...

9.9CVSS6.5AI score0.00675EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of the ExploreIT website content management system, related to the lack of measures to protect the SQL query structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the ExploreIT website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

10CVSS7.6AI score0.04051EPSS
SaveExploits3References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/20 12:0 a.m.20 views

The vulnerability in the implementation of the GOT Mobile function in the software for graphic control panels from Mitsubishi Electric’s GOT2000 series, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GOT Mobile function implementation in Mitsubishi Electric’s GOT2000 series graphic control panels, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, involves bypassing authentication through spoofing. Exploiting this vulnerability can allow unauthorized...

7.1CVSS7.4AI score0.00683EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.20 views

The vulnerability of the Apex-VUZ education automation system, related to the use of strictly encrypted user data, allows a perpetrator to gain full access to the software environment.

The vulnerability of the Apex-VUZ education automation system is related to the use of strictly encrypted user data. Exploiting this vulnerability could allow a malicious actor to gain full access to the software environment...

10CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.20 views

The vulnerability of the LoginForm and RegisterForm data transmission forms in the Apex-VUZ automation system allows a perpetrator to gain access to user account information.

The vulnerability of the LoginForm and RegisterForm data transmission forms in the Apex-VUZ automation system is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials...

7.8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.20 views

The vulnerability of the message exchange component of the system for loading user files in the Apex-VUZ education automation system allows a perpetrator to upload any files onto the server.

The vulnerability of the message exchange component of the system for loading user files in the Apex-VUZ education automation system is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a remote attacker to load malicious files onto the server...

10CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/06 12:0 a.m.20 views

The vulnerability of the libssh2 library, which implements Git methods in C language using Libgit2, allows a attacker to perform a type of “man-in-the-middle” attack.

The vulnerability of the libssh2 library, which implements Git methods in C using Libgit2, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

10CVSS6.1AI score0.0058EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.20 views

The vulnerability of the gweb component of the Connection dispatcher, related to writing outside of the allocated memory range, allows a hacker to execute arbitrary code.

The vulnerability of the gweb component of the Connman connection controller is related to writing beyond the boundaries of a reserved memory range. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.02967EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.20 views

The vulnerability of the Aura component in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Aura component in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.00599EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/12/19 12:0 a.m.20 views

The vulnerability of the Microsoft Outlook email client for the MacOS operating system, related to information representation errors in the user interface, allows attackers to perform spearishing attacks.

The vulnerability of the Microsoft Outlook email client for the MacOS operating system is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created email message...

7.8CVSS7.3AI score0.01488EPSS
SaveExploits0References2
Total number of security vulnerabilities5000