Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.3 views

The vulnerability of the KVM kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kvmvcpuonspin function in the Linux kernel-based KVM component is related to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.0019EPSS
Exploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the crypto-elliptic programming language Golang component, which allows a hacker to access confidential information

The vulnerability of the crypto-elliptic programming language in Golang relates to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

4CVSS6.4AI score0.00266EPSS
Exploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.1 views

The vulnerability of the OpenJPEG library for image encoding and decoding, related to buffer overflow in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the OpenJPEG library for image encoding and decoding is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

5.6CVSS7.5AI score0.00291EPSS
Exploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.3 views

The vulnerability of the raptor_uri_normalize_path() function in the Raptor library allows a hacker to execute any code.

The vulnerability of the raptorurinormalizepath function in the Raptor library is related to integer overflow when processing URIs in PDF files. Exploiting this vulnerability could allow an attacker to access confidential data...

9.3CVSS7.5AI score0.00315EPSS
Exploits1References12Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.1 views

The vulnerability of the udf_current_aext() function in the fs/udf/inode.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the udfcurrentaext function in the fs/udf/inode.c module of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.8CVSS7.2AI score0.00268EPSS
Exploits0References27Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the nsim_dev_trap_report_work() function in the drivers/net/netdevsim/dev.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nsimdevtrapreportwork function in the drivers/net/netdevsim/dev.c module of the Linux kernel is related to code errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS6.7AI score0.0023EPSS
Exploits0References19Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.1 views

The vulnerability of the SMB2_ioctl_init() function in the fs/cifs/smb2pdu.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the SMB2ioctlinit function in the fs/cifs/smb2pdu.c module of the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.6AI score0.00281EPSS
Exploits0References24Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the `reqsk_queue_unlink()` function in the `net/ipv4/inet_connection_sock.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the reqskqueueunlink function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7CVSS7.2AI score0.00243EPSS
Exploits0References19Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.1 views

Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure

The vulnerability of the net/mlx5 components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00231EPSS
Exploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.5 views

The vulnerability of DRM/MSM components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of DRM/SMM components in the Linux operating system is related to the dereferencing of the NULL pointer. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.00216EPSS
Exploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.3 views

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00239EPSS
Exploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.3 views

The vulnerability of the secretmem component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the secretmem component in the Linux operating system’s kernel is related to memory corruption. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00222EPSS
Exploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.3 views

The vulnerability of the Telnet protocol implementation in the microprogramming-based router software Tenda AC7 allows a hacker to execute arbitrary commands.

The vulnerability of the Telnet protocol implementation in the Tenda AC7 microprogramming router software lies in the lack of measures taken to clean data at the management level when processing the lanip parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

6.5CVSS7AI score0.01786EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the sub_410C80() function in the cstecgi.cgi script of the TOTOLINK X18 router’s microprogramming system, which allows a hacker to execute arbitrary commands.

The vulnerability of the sub410C80 function in the cstecgi.cgi script of the TOTOLINK X18 router’s microprogramming system is related to the lack of data cleaning measures at the control level when processing the mtkhnatEnable parameter. Exploiting this vulnerability allows an attacker to execute...

6.5CVSS6.9AI score0.11413EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the formDelWewifiPic() function in the microprogramming software for Tenda W15E routers allows a hacker to induce a service failure.

The vulnerability of the formDelWewifiPic function in the Tenda W15E router software is related to the operation of writing data outside the buffer in memory when processing the picName parameter. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a speciall...

7.8CVSS7.4AI score0.00896EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.4 views

Vulnerability of components of the Linux operating system’s kernel, net/mlx5e, which allows a hacker to cause a service failure

The vulnerability of the net/mlx5e components in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00231EPSS
Exploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.3 views

The vulnerabilities of the iommu/vt-d components of the Linux operating system’s kernel, which allow a hacker to cause a service failure

The vulnerability of the iommu/vt-d components of the Linux operating system’s kernel is related to improper validation of input data in the function domaincontextclearonecb within drivers/iommu/intel/iommu.c. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00235EPSS
Exploits0References17Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the `bnxt_qplib_alloc_init_hwq()` function in the drivers/infiniband/hw/bnxt_re/qplib_res.c module of the Linux kernel allows a hacker to gain elevated privileges within the system.

The vulnerability of the bnxtqpliballocinithwq function in the drivers/infiniband/hw/bnxtre/qplibres.c module of the Linux kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the...

5.5CVSS7.1AI score0.0022EPSS
Exploits0References18Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the objdump.c component of the GNU Binutils development environment allows a hacker to execute arbitrary code.

The vulnerability of the objdump.c component of the GNU Binutils development environment is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.6CVSS6.8AI score0.00689EPSS
Exploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.3 views

The vulnerability of the nfs_fattr_init() function in the fs/nfs/inode.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nfsfattrinit function in the fs/nfs/inode.c module of the Linux kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00253EPSS
Exploits0References19Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the ZRAM component in the Linux operating system’s kernel allows a hacker to gain access to confidential information.

The vulnerability of the ZRAM component in the Linux operating system’s kernel is related to improper validation of input data in the function zramDestroyComps in drivers/block/zram/zramdrv.c. Exploiting this vulnerability can allow an attacker to access confidential information...

5.5CVSS6.7AI score0.00218EPSS
Exploits0References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.4 views

The vulnerability of the cachefiles_daemon_open() function in the cachefiles component of the Linux operating system allows a hacker to gain elevated privileges within the system.

The vulnerability of the cachefilesdaemonopen function in the cachefiles component of the Linux kernel is related to a memory leak. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

5.5CVSS6.7AI score0.00259EPSS
Exploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.4 views

The vulnerability of the KVM kernel component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the KVM kernel component in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.00166EPSS
Exploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.5 views

The vulnerability of Eclipse Jetty servlet containers, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Eclipse Jetty servlet containers is related to uncontrolled resource consumption in the ThreadLimitHandler.getRemote function. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

6.8CVSS6.5AI score0.01037EPSS
Exploits1References7Affected Software11
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:0 a.m.2 views

The vulnerability of the logi_dj_recv_switch_to_dj_mode() function in the HID component of the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the logidjrecvswitchtodjmode function in the HID component of the Linux operating system is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00259EPSS
Exploits0References17Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.37 views

The vulnerability of Adobe InDesign’s automation tool for computer design lies in the ability to write beyond the buffer limit in memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.2AI score0.00258EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the pm8001_phy_control() function in the Linux kernel SCSI driver allows a hacker to cause a service failure.

The vulnerability of the pm8001phycontrol function in the Linux kernel SCSI driver is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00208EPSS
Exploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the mt7921_ipv6_addr_change() function in the Linux kernel driver allows a hacker to induce a service failure.

The vulnerability of the mt7921ipv6addrchange function in the Linux kernel driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.1AI score0.00204EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of the ABC Notation plugin for WordPress’ content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the ABC Notation plugin in the WordPress content management system is related to errors in processing the relative path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.8CVSS7.7AI score0.00616EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of Adobe Illustrator’s graphic editor lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.4AI score0.0022EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, and Adobe Acrobat 2020, related to memory usage after it is freed, allow attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow...

7.8CVSS7.7AI score0.00345EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of Adobe Illustrator, related to the use of an insecure search path, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to the use of an insecure search path. Exploiting this vulnerability allows a hacker to execute arbitrary code using a specially created malicious file...

7.8CVSS5.9AI score0.00219EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.4 views

The vulnerability of the Win32 kernel subsystem in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Win32 kernel subsystem in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.6AI score0.00544EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the client for remote desktop clients on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Remote Desktop Client for Windows operating systems in handling relative pathnames to directories involves errors in processing those paths. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.03227EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.5 views

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (Drivers\ksthunk.sys) on Windows operating systems allows a hacker to elevate their privileges to a system level.

The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to a system level...

7.8CVSS8AI score0.00533EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerability of the mlx5_eswitch_set_vepa() function in the Mellanox Ethernet adapter driver for Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the mlx5eswitchsetvepa function in the Mellanox Ethernet network adapter driver for Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00206EPSS
Exploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to increase their privileges and execute arbitrary commands.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands...

7.8CVSS5.8AI score0.00765EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerability of the File Sharing function on the administrator web panel of microprogramming router software GL.iNet GL-MT3000 allows a hacker to read arbitrary files.

The vulnerability of the File Sharing function on the administrator web panel of the GL.iNet GL-MT3000 router software relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to read arbitrary files...

7.8CVSS5.6AI score0.0044EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerability of the Tutor LMS plugin for the WordPress content management system lies in its authentication procedures’ flaws, which allow attackers to escalate their privileges.

The vulnerability of the Tutor LMS plugin for WordPress content management systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

9CVSS5.4AI score0.01023EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

Vulnerability of the Premium Package: Selling Digital Products securely through the WordPress content management system. This vulnerability is related to the lack of measures taken to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Premium Package plugin – enabling secure sales of digital products through a WordPress website’s content management system – is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely t...

7.6CVSS8.2AI score0.00892EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of Adobe InDesign’s automation tool for computer design lies in the possibility of buffer overflow in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS5.9AI score0.00312EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.4 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to writing beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.2AI score0.00258EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, and Adobe Acrobat 2020, related to access to an uninitialized pointer, allow attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2024, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the access to an uninitialized pointer. Exploiting this vulnerability can allow a...

7.8CVSS7.6AI score0.00314EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of Adobe Illustrator, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious file...

7.8CVSS6.2AI score0.00266EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of the `load_elf_binary()` function in the Linux kernel file system allows a hacker to trigger a service failure.

The vulnerability of the loadelfbinary function in the Linux kernel file system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00249EPSS
Exploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of the SmartFabric OS10 network operating system, related to deficiencies in access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SmartFabric OS10 network operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.00153EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of the SmartFabric OS10 network operating system, related to the lack of data cleaning at the management level, allows a perpetrator to execute arbitrary code.

The vulnerability of the SmartFabric OS10 network operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS5.9AI score0.01209EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.3 views

The vulnerability of the SmartFabric OS10 network operating system, related to insufficient validation of incoming requests, allows a hacker to execute an SSRF attack.

The vulnerability of the SmartFabric OS10 network operating system is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

6.8CVSS5.7AI score0.00398EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.2 views

The vulnerability of monitoring and management tools for Dell Chassis Management Controllers (CMC) for Dell PowerEdge FX2 and Dell Chassis Management Controllers (CMC) for PowerEdge VRTX lies in the fact that operations are executed outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of monitoring and management tools for Dell Chassis Management Controllers CMC for Dell PowerEdge FX2 and Dell Chassis Management Controllers CMC for PowerEdge VRTX lies in the fact that operations are executed outside the buffer in memory. Exploiting this vulnerability allows a...

9.7CVSS6.1AI score0.00549EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/26 12:0 a.m.1 views

The vulnerability of the reviewdog/action-setup component of the GitHub collaborative development platform allows a hacker to disclose protected information.

The vulnerability of the reviewdog/action-setup component of the GitHub collaborative development platform is related to the presence of undeclared capabilities. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

8.6CVSS7.8AI score0.02196EPSS
Exploits2References4Affected Software1
Total number of security vulnerabilities74701