Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the MAC Service Monitor component of the Open vSwitch software multi-level switch allows a attacker to trigger a service failure.

The vulnerability of the MAC Service Monitor component of the Open vSwitch software multi-level switch is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

5.3CVSS6.2AI score0.01002EPSS
Exploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the formSetPPTPServer() function in the Tenda AC7 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetPPTPServer function in the Tenda AC7 router’s microprogramming software is related to the operation of writing data outside of the buffer in memory when processing the pptpserverstartip and pptpserverendip parameters. Exploiting this vulnerability allows a remote...

9CVSS8.3AI score0.05167EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of AMD64 Microcode in processor microcodes, related to incorrect code generation, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of AMD64 Microcode in processors relates to incorrect code generation management. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

7.5CVSS7.5AI score0.00622EPSS
Exploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability in the dix/devices.c component of the X Window System X.Org Server allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the dix/devices.c component in the X Window System X.Org Server implementation is related to improper resource locking. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.7CVSS7.2AI score0.00271EPSS
Exploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the au_read_header function in the src/au.c component of the Libsndfile library for reading and writing audio files allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the aureadheader function in the src/au.c file of the Libsndfile library, which is used for reading and writing audio files, is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity,...

7.8CVSS7.2AI score0.00368EPSS
Exploits1References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the ass_outline_construct() function in the ASS/SSA Libass subtitle renderer allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the assoutlineconstruct function in the ASS/SSA Libass subtitle renderer is related to integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

8.8CVSS7.7AI score0.01789EPSS
Exploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the RTSP PLAY Command Handler component in the Live555 multimedia streaming library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the RTSP PLAY Command Handler component in the Live555 multimedia streaming library relates to writing beyond buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.8CVSS8AI score0.01612EPSS
Exploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability in the implementation of the Wayland protocol for X.Org XWayland, which is related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Wayland protocol for X.Org XWayland, which is implemented by the X.Org Server, is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.0036EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the library for working with the DICOM format in DCMT, related to the repeated memory release, allows a perpetrator to trigger a service failure.

The vulnerability of the library for working with the DICOM format in DCMT is related to the repeated memory release. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.5CVSS6.8AI score0.01277EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the library for working with the DICOM format in DCMT, related to improper memory release before deleting the last reference, allows a violator to trigger a service failure.

The vulnerability of the library for working with the DICOM format in DCMT is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause service failures...

7.5CVSS6.8AI score0.01277EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the Python RSA cryptographic library, which stems from the use of cryptographic algorithms with defects, allows a perpetrator to gain access to confidential data.

The vulnerability of the Python RSA cryptographic library is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data remotely...

7.8CVSS7.1AI score0.01359EPSS
Exploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of HashiCorp’s Vault and Vault Enterprise storage platforms, which stem from lack of access control mechanisms, allows attackers to gain access to potentially confidential information.

The vulnerability of the HashiCorp Vault and Vault Enterprise archiving platforms for corporate information lies in their lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to potentially confidential information...

9.4CVSS7.7AI score0.0076EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

Microsoft Edge browser’s vulnerability, related to errors in data type mixing, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge is related to type conversion errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.00855EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the SetSysEmailSettings module in D-Link DIR-853 A1 router software allows a hacker to execute arbitrary code.

The vulnerability of the SetSysEmailSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the AccountPassword parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.3AI score0.00578EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the SetDynamicDNSSettings module in D-Link DIR-853 A1 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SetDynamicDNSSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

10CVSS7.3AI score0.00548EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the application software interface of the Cisco Meeting Management subsystem allows a perpetrator to escalate their privileges.

The vulnerability of the application programming interface of the Cisco Meeting Management subsystem relates to the improper handling of insufficient privileges. Exploiting this vulnerability allows a malicious actor to enhance their privileges through specially created requests...

9.9CVSS8.1AI score0.01153EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the Go programming language’s net/http package, related to deficiencies in HTTP request processing, allows attackers to execute arbitrary code.

The vulnerability of the net/http package in the Go programming language is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.4CVSS7.3AI score0.00682EPSS
Exploits0References6Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.4 views

The vulnerability of the rand() function in the Crypt-Random random number generation module for Perl allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rand function in the Crypt-Random random number generation module for Perl is related to errors in the code of the pseudo-random number generator. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

10CVSS5.6AI score0.00376EPSS
Exploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 lies in the lack of measures to neutralize special elements, allowing a violator to execute arbitrary codes.

The vulnerability of the software for multifunctional measuring instruments used to measure parameters of electrical networks from Siemens SENTRON 7KT PAC1260 is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to...

9.1CVSS6.4AI score0.00749EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment, related to unlimited resource distribution, allows attackers to trigger service failures.

The vulnerability of the ASP.NET Core software platform and the Microsoft Visual Studio development environment is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS7.2AI score0.01267EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the GLPI system for managing requests, incidents, and inventory of computer equipment, related to insufficient protection of operational data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GLPI system for requests, incidents, and inventory management is related to insufficient protection of operational data. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information...

5.8CVSS5.8AI score0.00393EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise products is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.5AI score0.00988EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.01024EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from incorrect restrictions on the path to the restricted catalog. This allows attackers to disclose protected information.

The vulnerability of Websoft HCM’s automation software for HR processes is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to disclose protected information...

6.8CVSS5.5AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.12 views

The vulnerability of Websoft HCM’s automation software for HR processes stems from insufficient validation of input data, allowing attackers to execute arbitrary HTML code.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code remotely...

7.5CVSS5.8AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the slim_do_transfer() function in the driver’s code (drivers/slimbus/messaging.c) in Linux kernel allows a hacker to cause a service failure.

The vulnerability of the slimdotransfer function in the driver’s code drivers/slimbus/messaging.c in Linux operating systems is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.8AI score0.00183EPSS
Exploits0References16Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the ColdFusion software platform, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

9.4CVSS8.4AI score0.01679EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.5 views

The vulnerability of the ColdFusion software platform, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to errors in access control. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS8AI score0.00276EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of Websoft HCM’s automation software for HR processes lies in insufficient validation of input data, allowing attackers to execute arbitrary codes.

The vulnerability of Websoft HCM’s automation software for HR processes is related to insufficient verification of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS5.9AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the authentication system for microprogrammed Ethernet switch FortiSwitch lies in the lack of necessary checks when changing passwords via the graphical user interface. This allows attackers to escalate their privileges.

The vulnerability of the authentication system for Microprogrammed Ethernet switches of FortiSwitch lies in the lack of necessary checks during password changes in the graphical user interface. Exploiting this vulnerability allows a malicious actor to enhance their privileges by altering the...

10CVSS8.1AI score0.11324EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the child_cfs_rq_on_list() function in the kernel/sched/fair.c module of Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the childcfsrqonlist function in the kernel/sched/fair.c module of Linux operating systems is related to the occurrence of out-of-buffer situations due to incorrect pointer handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS7.2AI score0.00175EPSS
Exploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

Vulnerability of the nbd_disconnect_and_put() function in the drivers/block/nbd.c module – This driver for Linux kernel-based block devices allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the nbddisconnectandput function in the drivers/block/nbd.c module – The Linux kernel’s block device support driver is vulnerable due to the repeated reuse of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.8CVSS7AI score0.00201EPSS
Exploits0References20Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the af_inet.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the afinet.c component in the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

3.3CVSS6.5AI score0.00301EPSS
Exploits0References17Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the readDataVar() function in the hdf/dataobject.c component of the Libmysofa library for audio processing allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failure.

The vulnerability of the readDataVar function in the hdf/dataobject.c component of the Libmysofa audio library involves copying buffers without checking the input data. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even...

8.8CVSS6.7AI score0.02255EPSS
Exploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability in the fs/quota/dquot.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the fs/quota/dquot.c component of the Linux operating system is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS6.6AI score0.00189EPSS
Exploits0References19Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the pgtable.h component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the pgtable.h component in the Linux operating system’s kernel is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00212EPSS
Exploits0References16Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the ipvlan component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ipvlan component in the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.7AI score0.00265EPSS
Exploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to improper code generation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to improper code generation. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...

7.8CVSS7.4AI score0.00626EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

10CVSS8AI score0.00826EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to information disclosure due to inconsistencies, allows attackers to compromise data integrity.

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules is related to the disclosure of information through incompatibility. Exploiting this vulnerability can allow a remote attacker to compromise data integrity through a specially created web page...

7.8CVSS7.1AI score0.00732EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the x86/mm kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the x86/mm kernel component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.4CVSS6.2AI score0.00253EPSS
Exploits0References16Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the Yelp review system lies in the fact that functions from an unreliable and uncontrolled area are integrated during the processing of documents using the ghelp scheme. This allows a malicious actor to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the Yelp review system lies in the inclusion of functions from an unreliable and uncontrolled area during the processing of documents using the ghelp scheme. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information and...

7.8CVSS7.5AI score0.10259EPSS
Exploits1References19Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

The vulnerability of the C/C++ Libstb library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the C/C++ Libstb library lies in reading data beyond the allowed buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a specially created file...

5.3CVSS6.7AI score0.0056EPSS
Exploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the library for developing web applications – Werkzeug, related to writing beyond the buffer boundaries, allows attackers to trigger a service failure.

The vulnerability of the Werkzeug library for developing web applications relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.1AI score0.01063EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the bfd_mach_o_get_synthetic_symtab() function in the bfd/mach-o.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdmachogetsyntheticsymtab function in the bfd/mach-o.c component of the GNU Binutils development environment is related to errors during variable initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

4.7CVSS5.7AI score0.00384EPSS
Exploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the bfd_getl32 function in the GNU Binutils development environment allows a attacker to trigger a service failure.

The vulnerability of the bfdgetl32 function in the GNU Binutils development environment is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.7AI score0.00698EPSS
Exploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.1 views

The vulnerability of the library for working with the DICOM format in DCMT, related to pointer assignment errors, allows a perpetrator to trigger a service failure.

The vulnerability of the library for working with the DICOM format in DCMT is related to pointer assignment errors. Exploiting this vulnerability could allow an attacker to cause service failures...

7.5CVSS6.8AI score0.01351EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability of the Live555 multimedia streaming library, related to the use of memory after it is freed, allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the Live555 multimedia streaming library lies in the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to trigger a Denial-of-Service attack...

6.5CVSS6.8AI score0.0119EPSS
Exploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.3 views

Vulnerability of software for managing IBM Engineering Requirements Management DOORS: Next, the issue related to the loading of code without checking its integrity, allowing attackers to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IBM Engineering Requirements Management DOORS Next software lies in the fact that code is loaded without any checks for its integrity. Exploiting this vulnerability could allow a malicious actor to influence the confidentiality, integrity, and accessibility of the protect...

10CVSS5.5AI score0.00177EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:0 a.m.2 views

The vulnerability in the web console of the network device Ivanti Cloud Services Application allows a hacker to execute arbitrary code.

The vulnerability of the web console of the network device Ivanti Cloud Services Application exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.5AI score0.21975EPSS
Exploits0References2Affected Software1
Total number of security vulnerabilities74701