Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the Adobe Framemaker desktop publishing system, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Framemaker desktop publishing system is related to buffer overflow in the stack. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...

7.8CVSS6.3AI score0.0022EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the desktop publishing system Adobe Framemaker lies in the overflow of buffers in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the desktop publishing system Adobe Framemaker is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially created malicious file...

7.8CVSS6AI score0.0022EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the .NET Remoting technology in systems for visualization and analysis of clinical data based on artificial intelligence, IntelliSpace Portal. This allows a intruder to execute arbitrary code.

The vulnerability of the .NET Remoting technology in systems for visualization and analysis of clinical data based on artificial intelligence, IntelliSpace Portal, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to execute arbitra...

7.1CVSS8AI score0.00278EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the drm/dp_mst component in the Linux operating system allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the drm/dpmst component in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7CVSS7AI score0.00158EPSS
Exploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability in the Wayland protocol for X.Org XWayland, which is related to the X.Org Server, a server for the X Window System, arises from buffer overflows in the stack. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Wayland protocol for X.Org XWayland, which is implemented by the X.Org Server, is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.5AI score0.0039EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the Microsoft Office software package, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Office package is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS7.6AI score0.01083EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the GUPnP framework for UPnP devices stems from the dependence of critical operations on the reverse DNS solution. This allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the GUPnP device framework relates to the dependence of critical operations on the reverse DNS solution. Exploiting this vulnerability allows a remote attacker to gain access to confidential data and compromise its integrity...

8.1CVSS7.6AI score0.01088EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

8.5CVSS7.5AI score0.01285EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.4 views

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure lies in the insufficient protection of registration data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Kubernetes cluster deployment and management software on Azure Local Cluster infrastructure is related to insufficient protection for registration data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

7.3CVSS7.6AI score0.01154EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the landlock component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the landlock component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.7AI score0.00249EPSS
Exploits0References13Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00762EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Shell command shell in Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Shell command shell in Windows operating systems relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00719EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.1 views

The vulnerability of the Windows Standards-Based Storage Management Service in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Windows Standards-Based Storage Management Service in Windows operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.6AI score0.01713EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.9AI score0.00676EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to errors in the implementation of security checks for standard elements, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.4CVSS6.6AI score0.00669EPSS
Exploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the otx2_dcbnl.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the otx2dcbnl.c component in the Linux operating system is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00203EPSS
Exploits0References15Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.3 views

The vulnerability of the Linux operating system’s kernel, related to the operation of operations beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

4.9CVSS7AI score0.00388EPSS
Exploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:0 a.m.2 views

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to insufficient detection or processing of adversarial input anomalies. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

5.1CVSS7.6AI score0.005EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.10 views

The vulnerability of the `gf_opus_parse_packet_header` function in the `media_tools/av_parsers.c` file, implemented by the MP4Box packaging tool for the GPAC multimedia platform, allows a hacker to trigger a service failure.

The vulnerability of the gfopusparsepacketheader function in the mediatools/avparsers.c file, belonging to the MP4Box packaging tool of the GPAC multimedia platform, is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service...

9.4CVSS5.9AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.29 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to execute the displayed HTML code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code by sending a specially crafted POST request...

7.5CVSS5.9AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the distribution and transaction optimization software in the Apache Seata microservice architecture, related to shortcomings in the deserialization mechanism, allows attackers to trigger service failures.

The vulnerability of distribution software and the improvement of transaction performance in the architecture of Apache Seata microservices is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to trigger service failures through a...

10CVSS5.5AI score0.01012EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the formWifiWpsOOB function in the microprogrammed routing software of Tenda AC6 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWifiWpsOOB function in the microprogrammed routing software Tenda AC6 is related to data writing beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

10CVSS6.3AI score0.00455EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the PDFClassHandler component of the XWiki Platform, a platform for creating collaborative web applications. The XWiki Platform allows attackers to enhance their privileges.

The vulnerability of the PDFClassHandler component in the XWiki platform for creating collaborative web applications stems from the lack of authentication procedures. Exploiting this vulnerability could allow attackers to increase their privileges remotely...

9.9CVSS5.4AI score0.01447EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 software allows a hacker to execute arbitrary code.

The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.3AI score0.00548EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications (VSTA) is related to an uncontrolled search path element, which allows a malicious actor to escalate their privileges.

The vulnerability of the toolset for configuring Microsoft Visual Studio Tools for Applications VSTA is related to an uncontrolled search path element. Exploiting this vulnerability could allow an attacker to increase their privileges...

7.3CVSS7.6AI score0.00576EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the Microsoft AutoUpdate (MAU) application for Mac, which deals with access control deficiencies, allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft AutoUpdate MAU for Mac application relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.6AI score0.00886EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to the swapping of an unreliable pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.5AI score0.00516EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to incorrect authorization, allows a violator to disclose protected information.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to improper authorization. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

5.3CVSS5.8AI score0.00263EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the Adobe Photoshop graphic editor arises from the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.6AI score0.00353EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.3AI score0.06825EPSS
Exploits2References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.6AI score0.00353EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.6 views

The vulnerability of the Windows Secure Channel component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Secure Channel component in Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow attackers to enhance their privileges...

7CVSS7.5AI score0.00306EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.01024EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.6CVSS8.2AI score0.01375EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.14 views

The vulnerability of the trusted execution environment of Virtualization-Based Security (VBS) Enclaves in Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

6.2CVSS7.7AI score0.0035EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform, related to the lack of measures to neutralize special elements, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.5CVSS8.3AI score0.04554EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the Linux operating system’s driver/usb/typec/ucsi/ucsi.c code allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s driver/usb/typec/ucsi/ucsi.c code relates to pointer aliasing. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00168EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of Google Chrome’s browser, related to buffer overflows, allows attackers to execute arbitrary code.

The vulnerability of Google Chrome relates to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

10CVSS8.2AI score0.00615EPSS
Exploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the software interface of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises from the failure to implement measures to neutralize instructions in dynamically executed code, allowing attackers to execute arbitrary code.

The vulnerability of the software interface of the XWiki Platform for creating collaborative web applications lies in the failure to implement measures to neutralize instructions within the dynamically executed code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9CVSS5.9AI score0.00549EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the macOS operating system, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

10CVSS5.8AI score0.01301EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability in the implementation of the LDAP Lightweight Directory Access Protocol on the Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS8.2AI score0.07407EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the ColdFusion software platform, related to the lack of measures to neutralize special elements, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS8.3AI score0.02158EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the ColdFusion software platform, related to insufficient validation of input data, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

9.1CVSS8AI score0.01333EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the ColdFusion software platform, related to deficiencies in the authentication process, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.1CVSS8.3AI score0.01445EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to execute the displayed HTML code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary reflected HTML code remotely...

7.5CVSS5.8AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the Apache Airflow Common SQL Provider software, which is used for creating, monitoring, and orchestrating data processing scripts in Airflow, stems from a lack of security measures regarding SQL query structures. This vulnerability allows attackers to enhance their privileges and execute arbitrary commands.

The vulnerability of the Apache Airflow Common SQL Provider software, which is used for creating, monitoring, and orchestrating data processing scenarios, relates to the lack of security measures taken to protect the SQL query structure during the execution of the SQLTableCheckOperator with the...

9CVSS6.1AI score0.00731EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the usbhsc_notify_hotplug() function in the USB driver (drivers/usb/renesas_usbhs/common.c) in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the usbhscnotifyhotplug function in the USB driver drivers/usb/renesasusbhs/common.c in Linux operating systems is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00185EPSS
Exploits0References16Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the crypto/xilinx/zynqmp-aes-gcm.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the crypto/xilinx/zynqmp-aes-gcm.c component in the Linux operating system is related to incorrect locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

3.3CVSS5.7AI score0.00231EPSS
Exploits0References16Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the iso.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the iso.c component in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS7.1AI score0.00252EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the Werkzeug library for developing web applications, related to the manipulation of cross-site requests, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Werkzeug library for developing web applications relates to the manipulation of cross-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and even cause service failures...

7.6CVSS6.3AI score0.03397EPSS
Exploits0References10Affected Software3
Total number of security vulnerabilities74701