Lucene search
+L
Bdu FstecRecent

92434 matches found

BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of the memcmp function in the Node.js software platform, related to insufficient comparison, allows attackers to gain unauthorized access to protected information.

The vulnerability of the memcmp function in the Node.js software platform is related to insufficient comparison. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.9CVSS6.8AI score0.00385EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, arises from the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks (XSS).

The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

5.5CVSS5.6AI score0.00223EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of the cupsd server daemon in the CUPS printing system allows a hacker to execute arbitrary code.

The vulnerability of the cupsd server printing service in CUPS is related to deficiencies in the mechanism for verifying input data when processing the parameter “textWithoutLanguage”. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted...

7.6CVSS6.6AI score0.00502EPSS
SaveExploits2References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.11 views

The vulnerability of the setGameSpeedCfg function in the microprogramming software of TOTOLink A7100RU allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setGameSpeedCfg function in the microprogramming software of TOTOLink A7100RU relates to the lack of measures taken to protect data at the control level. Exploiting this vulnerability can allow an attacker operating remotely to compromise the confidentiality, integrity, a...

7.5CVSS7.1AI score0.01429EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.9 views

The vulnerability in the Telemetry component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Telemetry component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

10CVSS5.8AI score0.00539EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.5 views

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to writing beyond the buffer limit. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.2AI score0.00257EPSS
SaveExploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.7 views

The vulnerability of embedded software developed by Qualcomm, related to the use of a pointer offset that is outside the allowed range, allows attackers to cause memory corruption.

The vulnerability of embedded software developed for Qualcomm chips lies in the use of a pointer offset that is out of range. Exploiting this vulnerability can allow an attacker to cause memory corruption...

7.8CVSS5.8AI score0.001EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.5 views

The vulnerability of the Node.js software platform, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Node.js software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

5.9CVSS6.8AI score0.00283EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

Vulnerability of the ngx_http_mp4_module in HTTP-servers of NGINX Plus and NGINX Open Source, allowing attackers to cause service failures or execute arbitrary code.

The vulnerability of the ngxhttpmp4module in NGINX Plus and NGINX Open Source HTTP servers is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

7.8CVSS7.7AI score0.00918EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.6 views

The vulnerability of the Node.js software platform, related to the exhaustion of file descriptors, allows attackers to compromise the integrity of protected information.

The vulnerability of the Node.js software platform is related to the exhaustion of file descriptors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

3.3CVSS6.7AI score0.00159EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.4 views

The vulnerability of the Node.js software platform, related to uncontrolled resource consumption, allows attackers to compromise the accessibility of protected information.

The vulnerability of the Node.js software platform is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

5.3CVSS6.8AI score0.00454EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.11 views

The vulnerability of the WebCodecs component in Google Chrome allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of Google Chrome’s WebCodecs component relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure by using a specially created HTML page...

10CVSS7.8AI score0.00248EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.7 views

The vulnerability in the Layout component: Text and Fonts of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Layout component: Texts and fonts in Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility o...

10CVSS7AI score0.00483EPSS
SaveExploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.5 views

Vulnerability of the ngx_mail_smtp_module module in NGINX Plus and NGINX Open Source HTTP servers, allowing attackers to compromise the integrity of protected information.

The vulnerability of the ngxmailsmtpmodule module in NGINX Plus and NGINX Open Source servers is related to the failure to take measures to neutralize CRLF sequences. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

3.7CVSS5.8AI score0.00264EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.9 views

The vulnerability of the formConfigCliForEngineerOnly() function in the UTT 520W router software allows a hacker to cause a service failure.

The vulnerability of the formConfigCliForEngineerOnly function in the UTT 520W router’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

5.5CVSS6.1AI score0.00229EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of embedded software developed by Qualcomm, related to the use of dangerous methods or functions, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of embedded software developed by Qualcomm relates to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

7.1CVSS5.8AI score0.00106EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.9 views

The vulnerability of the analytics and automation platform for managing cloud data centers of Cisco Nexus, related to errors in the certificate validation process, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Cisco Nexus Dashboard analytics and cloud computing platform relates to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

8.5CVSS6AI score0.00293EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, arises from the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks (XSS).

The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

5.5CVSS5.6AI score0.00237EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.10 views

The vulnerability of Dell EMC AppSync’s data storage and protection software lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.

The vulnerability of the Dell EMC AppSync data storage and protection software is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.3CVSS5.8AI score0.00127EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.6 views

Vulnerability of the Audio/Video component: Playback in browsers Mozilla Firefox, Firefox ESR, and email client Thunderbird, allowing attackers to cause service failures.

Vulnerability of the Audio/Video component: Playback in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploitation of this vulnerability may allow a remote attacker to cause service failures...

7.8CVSS7.2AI score0.00687EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.9 views

The vulnerability of the ConfigAdvideo() function in the microprogramming software for UTT HiPER 810G allows a hacker to induce a service failure.

The vulnerability of the ConfigAdvideo function in the UTT HiPER 810G router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

5.5CVSS5.7AI score0.00229EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.7 views

The vulnerability of the formArpBindConfig() function in the UTT 1200GW network device software allows a attacker to cause a service failure.

The vulnerability of the formArpBindConfig function in the UTT 1200GW network device software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

5.5CVSS5.8AI score0.00235EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.9 views

The vulnerability of embedded software developed by Qualcomm, related to the execution of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

8.5CVSS6AI score0.00251EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.7 views

The vulnerability of the Quantum DXi6702 backup device lies in the improper limitation of XML links to external objects, allowing attackers to read arbitrary files.

The vulnerability of the Quantum DXi6702 backup device is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

5.5CVSS5.9AI score0.00707EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.7 views

The vulnerability of Dell EMC AppSync’s data storage and protection software lies in its lack of mechanisms for handling symbolic links. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Dell EMC AppSync data storage and protection software is related to deficiencies in the mechanism for handling symbolic links. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

7.3CVSS5.8AI score0.00165EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.5 views

The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the WebRender component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

7.6CVSS7.2AI score0.00352EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.6 views

The vulnerability in the JavaScript Engine component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript Engine component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to access to resources through incompatible types. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility ...

10CVSS7.3AI score0.00755EPSS
SaveExploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.4 views

Vulnerability of the Audio/Video component: Web codecs in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, which allows a hacker to cause a service failure.

Vulnerability of Audio/Video components: Mozilla Firefox, Firefox ESR, and Thunderbird’s email client use web codecs. This vulnerability is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.2AI score0.00687EPSS
SaveExploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.9 views

The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, arises from the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks (XSS).

The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

5.5CVSS5.6AI score0.0017EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of the ngx_stream_ssl_module module in NGINX Plus and NGINX Open Source HTTP servers allows attackers to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the ngxstreamsslmodule module in NGINX Plus and NGINX Open Source HTTP servers is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information...

5.5CVSS5.8AI score0.00133EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of the /goform/formConfigDnsFilterGlobal function in the UTT 1200GW network device software, which allows a attacker to cause a service failure.

The vulnerability of the /goform/formConfigDnsFilterGlobal function in the UTT 1200GW network device software is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause service interruptions...

5.5CVSS6.1AI score0.00246EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.7 views

The vulnerability of the ngx_http_mp4_module in NGINX open-source web servers allows a hacker to cause a service failure.

The vulnerability of the ngxhttpmp4module module in NGINX Open Source web servers is related to integer overflow. Exploiting this vulnerability can allow attackers to cause service failures...

7.8CVSS6AI score0.01031EPSS
SaveExploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.7 views

The vulnerability of embedded software developed by Qualcomm, related to copying buffers without checking the size of the input data, allows a violator to cause memory corruption.

The vulnerability of embedded Qualcomm software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause memory corruption...

7.8CVSS5.8AI score0.001EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.6 views

The vulnerability of the icmp_tag_validation() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the icmptagvalidation function in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure by sending specially crafted ICMP packets...

7.8CVSS5.8AI score0.0012EPSS
SaveExploits2References12Affected Software8
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.9 views

The vulnerability of the analytics and automation platform for managing cloud data centers of Cisco Nexus Dashboard lies in insufficient validation of requests on the server side. This allows a malicious actor to carry out an SSRF attack.

The vulnerability of the Cisco Nexus Dashboard, a platform for analytics and automation of cloud-based data centers, lies in insufficient testing of requests on the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

6.4CVSS5.8AI score0.00242EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.6 views

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.2AI score0.00702EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of the WebGPU component in the Mozilla Firefox browser and the Thunderbird email client allows a hacker to execute arbitrary code.

The vulnerability of the WebGPU component in Mozilla Firefox and the Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.7AI score0.00304EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.12 views

The vulnerability of the update function of the analytics and automation platform for Cisco Nexus Dashboard involves an incorrect path limitation to the catalog. This allows a malicious user to write arbitrary files into the system with root privileges.

The vulnerability of the metadata update function of the analytics and automation platform for Cisco Nexus Dashboard involves an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system with root privileg...

6.8CVSS5.9AI score0.00489EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.9 views

The vulnerability in the XPCOM component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the XPCOM component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

10CVSS5.8AI score0.00665EPSS
SaveExploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.6 views

The vulnerability of the formFtpServerDirConfig() function in the UTT 520W router software allows a hacker to cause a service failure.

The vulnerability of the formFtpServerDirConfig function in the UTT 520W router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

5.5CVSS5.7AI score0.00229EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.16 views

The vulnerability of embedded Qualcomm microprogramming software, related to deficiencies in authentication procedures, allows attackers to compromise the confidentiality of protected information.

The vulnerability of embedded Qualcomm software programs is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to compromise the confidentiality of the protected information...

6.2CVSS5.8AI score0.00108EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.10 views

The vulnerability of the TrueConf Client software lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the TrueConf Client software is related to an uncontrolled element in the search process. Exploiting this vulnerability allows a perpetrator to execute arbitrary code by introducing a specially crafted DLL file...

5.7CVSS6.1AI score0.00159EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.10 views

The vulnerability of the Compositing component in the Google Chrome browser allows attackers to execute arbitrary code or trigger a service denial.

The vulnerability of the Compositing component in the Google Chrome browser is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

10CVSS7.6AI score0.00248EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.10 views

The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, arises from the lack of protective measures for the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Cisco Integrated Management Controller, a software tool for remote server management, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.4CVSS5.6AI score0.00184EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.12 views

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure allows a perpetrator to execute arbitrary code.

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created SQL que...

8.7CVSS6.2AI score0.00271EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.4 views

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

7.8CVSS7.2AI score0.00687EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.6 views

The vulnerability in the XPCOM component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the XPCOM component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

10CVSS5.8AI score0.00773EPSS
SaveExploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of embedded software developed by Qualcomm, related to buffer overflows due to integer overflows, allows attackers to cause memory corruption.

The vulnerability of microprogramming software in embedded Qualcomm chips is related to buffer overflows due to integer overflows. Exploiting this vulnerability can allow attackers to cause memory corruption...

7.8CVSS6AI score0.001EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.6 views

Vulnerability of the ngx_mail_auth_http_module module in NGINX Plus and NGINX Open Source servers, allowing attackers to cause service interruptions.

The vulnerability of the ngxmailauthhttpmodule module in NGINX Plus and NGINX Open Source is related to the use of the NULL pointer. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

7.8CVSS5.8AI score0.00938EPSS
SaveExploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:0 a.m.8 views

The vulnerability of the ngx_http_dav_module module in NGINX Plus and NGINX Open Source servers allows a hacker to cause a service failure.

The vulnerability of the ngxhttpdavmodule module in NGINX Plus and NGINX Open Source servers is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

8.5CVSS6.2AI score0.21747EPSS
SaveExploits2References9Affected Software6
Total number of security vulnerabilities92434