Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the stk1160-video.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the stk1160-video.c component in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.8AI score0.00271EPSS
Exploits0References17Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the tcp_dctcp.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the tcpdctcp.c component in the Linux operating system’s kernel is related to reading data from beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS7AI score0.00247EPSS
Exploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems occurs when the operation is performed outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

7.8CVSS7.8AI score0.01467EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the Hyper-converged Infrastructure of Microsoft Azure Stack (HCI), which stems from insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Hyper-converged Infrastructure of Microsoft Azure Stack HCI is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.6AI score0.00539EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the Windows Telephony Service on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Telephony Service in the Windows operating system is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01167EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

7.6CVSS7.6AI score0.01043EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS8AI score0.00708EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the configuration file default.cfg of the Tenda F1202 router microprogramming system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the configuration file default.cfg of the Tenda F1202 router microprogramming system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.07773EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability in the `ipc/namespace.c` component of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability in the ipc/namespace.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00231EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability in the fs/ntfs3/inode.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the fs/ntfs3/inode.c component of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS7.1AI score0.00218EPSS
Exploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the mlx5e_tir_builder_alloc() function in the net/mlx5e component of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the mlx5etirbuilderalloc function in the net/mlx5e component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00235EPSS
Exploits0References16Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to errors in the implementation of security checks for standard elements, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.4CVSS6.6AI score0.00669EPSS
Exploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the `twisted.web.util.redirectTo` function in the Twisted web framework allows a attacker to access confidential data and compromise its integrity.

The vulnerability of the twisted.web.util.redirectTo function in the Twisted web framework is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.4CVSS6.3AI score0.01109EPSS
Exploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the max3100.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the max3100.c component in the Linux operating system’s kernel is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00189EPSS
Exploits0References17Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the fslog.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the fslog.c component in the Linux operating system’s kernel is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00222EPSS
Exploits0References15Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the HTTP library Urllib3 in the Python programming language involves authentication process errors, which allow attackers to access sensitive data and compromise its integrity.

The vulnerability of the HTTP library Urllib3 in the Python programming language is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.5CVSS6.8AI score0.02109EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the upnphost.dll library in the Windows operating system, which allows attackers to escalate their privileges

The vulnerability of the upnphost.dll library in the Windows operating system is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability can allow attackers to increase their privileges...

7CVSS7.6AI score0.00291EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00555EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the desktop publishing system Adobe Framemaker, related to a countable loss of significance, allows a hacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker is related to a countable amount of loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...

7.8CVSS6AI score0.002EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise, related to the use of an incomplete blacklist, allows attackers to circumvent security restrictions.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of an incomplete blacklist. Exploiting this vulnerability could allow a hacker to bypass security restrictions...

7.8CVSS7.6AI score0.00724EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.4 views

The vulnerability of the ZimbraSyncService service in the corporate email management system, Zimbra Collaboration Suite, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ZimbraSyncService service in the Zimbra Collaboration Suite enterprise email management system exists due to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access t...

10CVSS8.2AI score0.34355EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.4 views

The vulnerability in the implementation of the LDAP service protocol for Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.8AI score0.02121EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Windows Kernel-mode Driver driver allows attackers to increase their privileges.

The vulnerability of the Windows Kernel-Mode Driver driver in the operating system involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.8AI score0.00529EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of Microsoft Office packages, Excel, and 365 Apps for Enterprise, as well as Microsoft Access, relates to a full-integer overflow issue, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise, as well as Microsoft Access, is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...

7.8CVSS8.1AI score0.00703EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure lies in the exposure of password values in log files, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure is related to the disclosure of password values in log files. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information from ...

7.7CVSS7.6AI score0.0103EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the cppc_get_cpu_cost() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cppcgetcpucost function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00229EPSS
Exploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the RabbitMQ messaging broker lies in the failure to remove script-related HTML tags from web pages, allowing attackers to compromise data integrity.

The vulnerability of the RabbitMQ messaging broker is related to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

3.5CVSS5.7AI score0.01437EPSS
Exploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the data.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the data.c component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

3.3CVSS5.9AI score0.0021EPSS
Exploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the cadence_master.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cadencemaster.c component in the Linux operating system is related to reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.9AI score0.00234EPSS
Exploits0References16Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the OpenSearch software package, related to the disclosure of information through discrepancies, allows a perpetrator to compromise the integrity of data.

The vulnerability of the OpenSearch software package is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of data...

5.3CVSS5.9AI score0.00328EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.4 views

The vulnerability of the Kerberos Key Distribution Proxy Service in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Kerberos Key Distribution Proxy Service in Windows operating systems is related to insufficient resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS7.5AI score0.018EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.4 views

The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems occurs when the operation is performed outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

7.8CVSS7.8AI score0.01316EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Digital Media component of Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Digital Media component of Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.5AI score0.00555EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the desktop publishing system Adobe Framemaker lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially created malicious file...

7.8CVSS8.4AI score0.00258EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the Microsoft 365 Apps for Enterprise package, related to memory usage after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft 365 Apps for Enterprise package is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00606EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the implementation of the AWS4-HMAC-SHA256 algorithm in the cross-platform FTP server CrushFTP allows a hacker to bypass security restrictions, gain access to the administrator account, and execute arbitrary commands.

The vulnerability of the AWS4-HMAC-SHA256 algorithm implementation in the cross-platform FTP server CrushFTP relates to the bypassing of authentication by using the default crushadmin account. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions, gain access ...

10CVSS8.3AI score0.99957EPSS
Exploits20References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to writing beyond the buffer limit, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

10CVSS7.4AI score0.0104EPSS
Exploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the formPPPoESetup function in the microprogramming software for routers EDIMAX RE11S allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formPPPoESetup function in the microprogramming software for EDIMAX RE11S routers stems from copying buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitra...

10CVSS6AI score0.00712EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.4 views

The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a hacker to execute arbitrary code.

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data...

7.6CVSS8.4AI score0.01059EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability in the driver/driver/usb/musb/musb_gadget.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/usb/musb/musbgadget.c component of the Linux operating system is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00158EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Kerberos authentication network protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos authentication protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

8.1CVSS7.5AI score0.01905EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.4 views

The vulnerability of the udp_media.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the udpmedia.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.0022EPSS
Exploits0References16Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the Linux operating system’s kernel, related to type conversion errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00217EPSS
Exploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.5 views

The vulnerability of the Linux operating system’s kernel, related to the use of memory after it is freed, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00235EPSS
Exploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS7AI score0.00291EPSS
Exploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of Active Directory Certificate Services on Windows operating systems allows attackers to increase their privileges.

The vulnerability of Active Directory Certificate Services on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

9CVSS7.5AI score0.02865EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the tap.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the tap.c component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.1CVSS7.1AI score0.00256EPSS
Exploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially created malicious file...

7.8CVSS8.6AI score0.00212EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the NTFS file system of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

6.8CVSS7.6AI score0.02631EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability in the web interface for managing Tenda FH1202 micro-program software routers allows a hacker to escalate their privileges.

The vulnerability of the web interface for managing Tenda FH1202 micro-programming software routers is related to deficiencies in access control when processing the /goform/SysToolChangePwd endpoint. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending...

5.3CVSS5.9AI score0.00647EPSS
Exploits1References4
Total number of security vulnerabilities74701