Lucene search
+L
Bdu FstecMost viewed

92710 matches found

BDU FSTEC
BDU FSTEC
added 2023/02/27 12:0 a.m.20 views

The vulnerability of the kernel (NTOSKRNL) of Microsoft Windows operating systems, which allows a perpetrator to increase their privileges

The vulnerability of the kernel NTOSKRNL of Microsoft Windows is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.7AI score0.03603EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of the delivery interface component in NetScaler SD-WAN and Citrix SD-WAN software management tools allows attackers to enhance their privileges.

The vulnerability of the delivery interface component in NetScaler SD-WAN and Citrix SD-WAN software management tools is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

9CVSS7.7AI score0.74052EPSS
SaveExploits5References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of the Cisco IOS ROM Monitor, related to the leakage of file and directory information, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Cisco IOS ROM Monitor is related to the leakage of information about files and directories. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.6CVSS5.5AI score0.0027EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of Dell Container Storage Modules lies in their uncontrolled DLL search path, which allows an attacker to execute arbitrary code.

The vulnerability of the Dell Container Storage Modules relates to an uncontrolled DLL search process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8AI score0.02167EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/21 12:0 a.m.20 views

The vulnerability of the SICAM TOOLBOX II engineering software lies in the insufficient protection of the data transfer control protocol, allowing attackers to bypass access controls in the database service.

The vulnerability of the SICAM TOOLBOX II engineering software is related to insufficient protection of the data transfer control protocol. Exploiting this vulnerability can allow a malicious actor to gain access to the database using the 1522 TCP port...

9.9CVSS6.5AI score0.00675EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/02/20 12:0 a.m.20 views

The vulnerability in the implementation of the GOT Mobile function in the software for graphic control panels from Mitsubishi Electric’s GOT2000 series, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GOT Mobile function implementation in Mitsubishi Electric’s GOT2000 series graphic control panels, models GT27 and GT25, as well as the HMI platform GT SoftGOT2000, involves bypassing authentication through spoofing. Exploiting this vulnerability can allow unauthorized...

7.1CVSS7.4AI score0.00683EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.20 views

The vulnerability of the Apex-VUZ education automation system, related to the use of strictly encrypted user data, allows a perpetrator to gain full access to the software environment.

The vulnerability of the Apex-VUZ education automation system is related to the use of strictly encrypted user data. Exploiting this vulnerability could allow a malicious actor to gain full access to the software environment...

10CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.20 views

The vulnerability of the LoginForm and RegisterForm data transmission forms in the Apex-VUZ automation system allows a perpetrator to gain access to user account information.

The vulnerability of the LoginForm and RegisterForm data transmission forms in the Apex-VUZ automation system is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials...

7.8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.20 views

The vulnerability of the message exchange component of the system for loading user files in the Apex-VUZ education automation system allows a perpetrator to upload any files onto the server.

The vulnerability of the message exchange component of the system for loading user files in the Apex-VUZ education automation system is related to the unlimited loading of malicious files. Exploiting this vulnerability allows a remote attacker to load malicious files onto the server...

10CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/06 12:0 a.m.20 views

The vulnerability of the libssh2 library, which implements Git methods in C language using Libgit2, allows a attacker to perform a type of “man-in-the-middle” attack.

The vulnerability of the libssh2 library, which implements Git methods in C using Libgit2, is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

10CVSS6.1AI score0.0058EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/02/03 12:0 a.m.20 views

The vulnerability of the WAagent demon of the Azure Service Fabric Container allows attackers to escalate their privileges.

The vulnerability of WAagent, a demon of Azure Service Fabric Container, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7CVSS6.6AI score0.00607EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.20 views

The vulnerability of the gweb component of the Connection dispatcher, related to writing outside of the allocated memory range, allows a hacker to execute arbitrary code.

The vulnerability of the gweb component of the Connman connection controller is related to writing beyond the boundaries of a reserved memory range. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.02967EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.20 views

The vulnerability of the Aura component in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Aura component in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.00599EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/12/19 12:0 a.m.20 views

The vulnerability of the Microsoft Outlook email client for the MacOS operating system, related to information representation errors in the user interface, allows attackers to perform spearishing attacks.

The vulnerability of the Microsoft Outlook email client for the MacOS operating system is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created email message...

7.8CVSS7.3AI score0.01488EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.20 views

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE DB driver for SQL Server on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.01849EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.20 views

The vulnerability of the htx_add_header function in the include/haproxy/htx.h component of HAProxy’s server software allows a attacker to compromise data integrity.

The vulnerability of the htxaddheader function in the include/haproxy/htx.h component of HAProxy server software is related to integer overflow. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

7.8CVSS7.6AI score0.57934EPSS
SaveExploits6References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.20 views

The vulnerability of the IpSecDxe.efi component in the open-source UEFI development environment EDK2 allows a attacker to access confidential data.

The vulnerability of the IpSecDxe.efi component in the open-source UEFI EDK2 development environment is related to pointer swapping errors. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

7.8CVSS7.2AI score0.01106EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.20 views

The vulnerability of the cross-platform software development framework Qt, related to resource management errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cross-platform software development framework Qt is related to resource management errors. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created web page...

9.8CVSS5.5AI score0.05951EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:0 a.m.20 views

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

7.5CVSS7.3AI score0.0067EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:0 a.m.20 views

The vulnerability of the Cisco AsyncOS operating system in the Cisco Email Security Appliance (ESA) security system allows a perpetrator to trigger a service failure.

The vulnerability of the Cisco AsyncOS operating system in the Cisco Email Security Appliance ESA security system is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by establishing a large number o...

7.8CVSS7.2AI score0.008EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:0 a.m.20 views

The vulnerability of the SetStaticRouteIPv4Settings() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetStaticRouteIPv4Settings function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the failure of the system to properly validate the input data entered by the user when processing the StaticRouteIPv4Data element. Exploiti...

7.7CVSS7.1AI score0.01085EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/21 12:0 a.m.20 views

The vulnerability of the ConfigFileUpload() function in the web interface for managing D-Link DIR-1935 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the ConfigFileUpload function in the web interface for managing D-Link DIR-1935 router microprogramming software is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.7CVSS7.1AI score0.00813EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/17 12:0 a.m.20 views

The vulnerability of the Advanced Local Procedure Call (ALPC) handler in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.7AI score0.00292EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/11/17 12:0 a.m.20 views

The vulnerability of Grub2 operating system loaders, related to the execution of operations outside the buffer boundaries, allows attackers to execute arbitrary code.

The vulnerability of Grub2 operating system loaders is related to the issue where operations occur outside of the buffer in memory when rendering certain Unicode sequences using a specially crafted font. Exploiting this vulnerability allows an attacker to execute arbitrary code...

6.3CVSS7.7AI score0.00872EPSS
SaveExploits0References16Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/11/16 12:0 a.m.20 views

The vulnerability of the RTSP-based microprogramming software for IP cameras such as VPort P16-1MP-M12, VPort P16-1MP-M12-IR, and VPort P06-1MP-M12 allows a intruder to cause service failure.

The vulnerability of the RTSP-based microprogramming software for IP cameras such as VPort P16-1MP-M12, VPort P16-1MP-M12-IR, and VPort P06-1MP-M12 lies in the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.5AI score
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.21 views

The vulnerability in the web interface for managing the Cisco AsyncOS operating system of the Cisco Email Security Appliance (ESA) security email system, the Cisco Secure Email and Web Manager content protection device, and the Cisco Secure Web Appliance (formerly Cisco Web Security Appliance (WSA)) web gateway allows a perpetrator to enhance their privileges.

The vulnerability in the web interface for managing the Cisco AsyncOS operating system of the Cisco Email Security Appliance ESA, the Cisco Secure Email and Web Manager, and the Cisco Secure Web Appliance formerly Cisco Web Security Appliance WSA relates to the use of a hard-coded cryptographic...

9CVSS7.6AI score0.00715EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/15 12:0 a.m.20 views

The vulnerability of the vector graphics editor CorelDRAW Graphics Suite (formerly CorelDRAW) lies in the ability to read data beyond the buffer boundaries in memory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the CorelDRAW Graphics Suite formerly CorelDRAW graphic editor relates to the reading of data beyond the buffer boundaries in memory during the syntax analysis of GIF files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

3.3CVSS5.6AI score0.00807EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2022/11/02 12:0 a.m.20 views

The vulnerability of the `include/chart_generator.php` script of the Pandora Console component, a monitoring and management system for IT environments in the Pandora FMS framework. This script allows attackers to bypass security restrictions and execute arbitrary SQL code.

The vulnerability of the include/chartgenerator.php implementation of the Pandora Console component in the Pandora FMS monitoring and management system is related to the lack of measures taken to protect the SQL query structure during the processing of the sessionid parameter. Exploiting this...

10CVSS8.2AI score0.1139EPSS
SaveExploits2References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/03 12:0 a.m.20 views

The vulnerability of the `kodak_radc_load_raw` function in the `dcraw_common.cpp` component of the LibRaw image processing library allows a hacker to trigger a service failure.

The vulnerability of the kodakradcloadraw function in the dcrawcommon.cpp component of the LibRaw image processing library is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created POC file...

7.8CVSS6.8AI score0.02988EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/30 12:0 a.m.20 views

The vulnerability of the Synx driver for Multimedia Frameworks microprogramming software in Qualcomm embedded chips allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Synx driver for Multimedia Frameworks microprogramming software in embedded chips from Qualcomm relates to the use of memory after it is freed during file descriptor processing. Exploiting this vulnerability can allow an attacker to cause system failures or execute...

8.4CVSS7.5AI score0.00119EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2022/09/26 12:0 a.m.20 views

The vulnerability of the XAUTOCLAIM command implementation in the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the XAUTOCLAIM command in the Redis database management system is related to a numerical overflow when processing the COUNT argument. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7CVSS6.2AI score0.03013EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.20 views

The vulnerability of the GetValue() function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the GetValue function in the microprogramming system of LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the logserver file. Exploiting this vulnerability allows an attacker...

9.6CVSS8.1AI score0.01232EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.20 views

The vulnerability of extension XEP-0308: Last Message Correction for the Jabber/XMPP client Gajim, which allows a violator to trigger a service failure.

The vulnerability of extension XEP-0308, “Last Message Correction” for the Jabber/XMPP client Gajim, is related to insufficient validation of input data during the verification of message identifiers in a multi-user chat. Exploiting this vulnerability can allow a malicious actor, operating...

7.8CVSS7.2AI score0.01568EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.20 views

The vulnerability of the Crow web service framework relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Crow web service creation framework relates to the possibility of using memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.02221EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.20 views

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform lies in improper cleaning or release of resources, allowing a perpetrator to cause service failures.

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.8AI score0.03551EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.20 views

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform lies in improper cleaning or release of resources, allowing a perpetrator to cause service failures.

The vulnerability of the Microsoft Visual Studio software development tool and the Microsoft.NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.1AI score0.04943EPSS
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.20 views

The vulnerability of the ActiveX control on the SCADA server of Measuresoft ScadaPro Server allows a intruder to execute arbitrary code.

The vulnerability of the ActiveX control in the SCADA server of Measuresoft ScadaPro Server relates to the use of an untrusted indicator. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.8CVSS7.6AI score0.00291EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.20 views

The vulnerability of the Vim text editor lies in the fact that an operation can be performed outside the buffer, allowing an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.6AI score0.01461EPSS
SaveExploits1References17Affected Software10
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.20 views

The vulnerabilities of the merge, mergeWith, and defaultsDeep functions in the Lodash library allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the merge, mergeWith, and defaultsDeep functions in the Lodash library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

6.8CVSS6.1AI score0.01553EPSS
SaveExploits2References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/02 12:0 a.m.20 views

The vulnerability of the implementation of the finfo_buffer() function in the PHP programming language allows a hacker to execute arbitrary code.

The vulnerability of the finfobuffer function implementation in the PHP programming language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.02036EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/07/22 12:0 a.m.20 views

The vulnerability of the BIOS microprogramming system of Intel processors allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the BIOS microprogramming system of Intel processors is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00253EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/07/04 12:0 a.m.20 views

The vulnerability in the CDisplayPointer class implementation of the Microsoft Internet Explorer browser allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the CDisplayPointer class implementation in Microsoft Internet Explorer is related to resource management errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure through a specially created malicious web page...

9.3CVSS8AI score0.77462EPSS
SaveExploits8References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.20 views

The vulnerability of the Web Services Security component of the Oracle Web Services Manager allows a perpetrator to gain read access to data or modify data.

The vulnerability of the Web Services Security component of the Oracle Web Services Manager exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain read access to data or modify data using specially crafted HTTP...

8.1CVSS6.9AI score0.01623EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.20 views

The vulnerability of the OGG Core Library, a data stream management tool from Oracle GoldenGate, allows a hacker to gain full control over the application.

The vulnerability of the OGG Core Library, a data stream management tool of Oracle GoldenGate, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

8.8CVSS7.6AI score0.00308EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.20 views

The vulnerability of the JNDI component of the Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to access, modify, add, or delete data.

The vulnerability of the JNDI component of the Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete...

5.3CVSS6.2AI score0.02828EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/06/21 12:0 a.m.20 views

The vulnerability of the Microsoft .NET Framework software platform, related to improper cleaning or release of resources, allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft .NET Framework software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.3AI score0.03359EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/06/08 12:0 a.m.20 views

The vulnerability of the MultipartStream.java file in the Apache Commons FileUpload library allows a hacker to induce a service failure.

The vulnerability of the MultipartStream.java file in the Apache Commons FileUpload library is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure by manipulating the Content-Type header created by the...

7.5CVSS6.6AI score0.83175EPSS
SaveExploits8References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:0 a.m.20 views

The vulnerability of the DownloadCenterUploadHandler class in the CommCell storage management software allows a attacker to execute arbitrary code in the context of NETWORK SERVICE.

The vulnerability of the DownloadCenterUploadHandler class in the CommCell storage management software is related to the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of NETWORK SERVICE remotely...

9CVSS8AI score0.68864EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/20 12:0 a.m.20 views

Microsoft Edge’s vulnerability, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

7.5CVSS7.1AI score0.01307EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:0 a.m.20 views

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...

9CVSS8.1AI score0.02336EPSS
SaveExploits0References4
Total number of security vulnerabilities5000