Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.4AI score0.00243EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs allows a hacker to trigger a service failure.

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.3CVSS5.5AI score0.00241EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs allows a hacker to trigger a service failure.

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA Toolkit graphics processors is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker to cause a service failure...

2.8CVSS5.5AI score0.00219EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs allows a hacker to trigger a service failure.

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA Toolkit graphics processors is related to incorrect input of configuration data. Exploiting this vulnerability can allow an attacker to cause a service failure...

2.8CVSS5.5AI score0.00177EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the formSetFirewallCfg function in the web interface of the Tenda AC7 router’s software, allowing a hacker to execute arbitrary code.

The vulnerability of the formSetFirewallCfg function in the web interface of the Tenda AC7 router’s microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST reque...

9CVSS8.5AI score0.0099EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the microprogramming-based BIOS software in Dell Edge Gateway 5200 and 3200 allows unauthorized access to protected information by exploiting a flaw in the software.

The vulnerability of the microprogrammed BIOS software in Dell Edge Gateway 5200 and 3200 models relates to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.0021EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the software for adjusting performance with the Intel Extreme Tuning Utility (Intel XTU) involves an uncontrolled search path element, allowing attackers to enhance their privileges.

The vulnerability of the software for configuring Intel Extreme Tuning Utility Intel XTU is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00183EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of IBM Engineering Lifecycle Optimization - Publishing software relates to incorrect restrictions on the path to the restricted access catalog, allowing attackers to gain unauthorized access to protected information.

The vulnerability of IBM Engineering Lifecycle Optimization - Publishing software relates to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.00577EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.5 views

The vulnerability of the set_ftp_cfg() function in the nas.cgi script of the Wavlink AC3000 router’s microprogramming system allows a hacker to circumvent existing security restrictions.

The vulnerability of the setftpcfg function in the nas.cgi script of the Wavlink AC3000 WL-WN533A8 router’s microprogramming system is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending...

9.1CVSS7.7AI score0.01457EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the bar files in the control panel of the software integration for IBM App Connect Enterprise allows a perpetrator to write any files into the file system.

The vulnerability of the bar files in the control panel of the IBM App Connect Enterprise software relates to incorrect path name restrictions for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write any files into the file system remotely...

6.8CVSS5.4AI score0.00459EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the IBM Security Verify Access access control system, related to errors in privilege management, allows attackers to elevate their privileges.

The vulnerability of the IBM Security Verify Access access control system is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.5AI score0.00228EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, are related to the possibility of using memory after it is freed, allowing an attacker to cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

10CVSS7.8AI score0.01163EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

Vulnerability of the development, debugging, and optimization tools for FPGA applications. The Intel oneAPI DPC++/C++ compiler’s support package is vulnerable due to an uncontrolled search path element, allowing attackers to exploit this vulnerability to gain enhanced privileges.

The vulnerability of the FPGA Support Package for the Intel oneAPI DPC++/C++ Compiler relates to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00183EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.4 views

The vulnerability of the parallel programming library for clusters, the Intel MPI Library, and the Intel oneAPI HPC Toolkit software development tools lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the parallel programming library for clusters, the Intel MPI Library, and the Intel oneAPI HPC Toolkit software development tools, is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.7CVSS5.5AI score0.00183EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the QUIC and HTTP/3 implementations in the C language package NGTCP2 lies in the improper implementation of control flow management, allowing a attacker to execute arbitrary code.

The vulnerability of the QUIC and HTTP/3 implementations in the C language package NGTCP2 is related to the implementation of incorrect flow control. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.5CVSS7AI score0.00787EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the IBM Engineering Lifecycle Optimization - Publishing software lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to protected information.

The vulnerability of IBM Engineering Lifecycle Optimization - Publishing software relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.5CVSS5.6AI score0.00303EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the Ivanti Avalanche device management system, related to incorrect restrictions on the path name to the restricted access catalog, allows a perpetrator to gain access to read, modify, or delete data.

The vulnerability of the Ivanti Avalanche device management system is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain read, modify, or delete access to data...

7.8CVSS7.2AI score0.26522EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of Veeam Backup’s backup for virtual machines deployed in Microsoft Azure allows a attacker to perform an SSRF attack.

The vulnerability of Veeam Backup’s backup for virtual machines deployed in Microsoft Azure cloud environments is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

7.2CVSS7.1AI score0.00328EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the set_add_routing function in the internet.cgi script of the Wavlink AC3000 (WL-WN533A8) router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the setaddrouting function in the internet.cgi script of the Wavlink AC3000 WL-WN533A8 router microprogramming system is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9.1CVSS5.9AI score0.04156EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the qosSettings() function in the qos.cgi script of the Wavlink AC3000 (WL-WN533A8) router’s script allows a hacker to execute arbitrary code.

The vulnerability of the qosSettings function in the qos.cgi script of the Wavlink AC3000 WL-WN533A8 router software lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.3AI score0.01212EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs allows a hacker to trigger a service failure.

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.3CVSS5.5AI score0.0024EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs allows a hacker to trigger a service failure.

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.3CVSS5.5AI score0.0024EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the nvdisasm file in the NVIDIA CUDA Toolkit software for parallel computing on Graphics Processing Units allows a hacker to induce a service failure.

The vulnerability of the nvdisasm file in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processing Units is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

3.3CVSS5.5AI score0.0024EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the EDECCSSA function in the Software Guard eXtensions (SGX) technology of Intel microprocessor software allows a hacker to induce a service failure.

The vulnerability of the EDECCSSA function in the Software Guard eXtensions SGX microprogramming software for Intel processors is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to cause service failures...

6.5CVSS6.4AI score0.00232EPSS
Exploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the Ivanti Avalanche device management system, related to bypassing the authentication process by using an alternative path or channel, allows a perpetrator to circumvent the authentication process.

The vulnerability of the Ivanti Avalanche device management system relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process...

7.5CVSS7.2AI score0.60202EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the IPSec component of the Ivanti Connect Secure network access control tool allows a hacker to trigger a service failure.

The vulnerability of the IPSec component in the Ivanti Connect Secure network access control tool is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.8AI score0.01495EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.00547EPSS
Exploits0References19Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5CVSS5.4AI score0.00267EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5CVSS7.4AI score0.00478EPSS
Exploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the Unmarshal function in the Go YAML library, related to deficiencies in the deserialization mechanism, allows attackers to trigger a denial-of-service attack.

The vulnerability of the Unmarshal function in the Go YAML library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

7.8CVSS5.6AI score
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerabilities of Intel System Resources Defense and Intel System Security software related to Intel processor microsoftware are associated with synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

7.5CVSS5.5AI score0.00147EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.6 views

The vulnerability of VMware ESXi and VMware Workstation relates to synchronization errors when using shared resources, allowing a hacker to execute arbitrary code.

The vulnerability of VMware ESXi and VMware Workstation lies in synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

9.3CVSS8.4AI score0.01524EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.4 views

The vulnerability of the Model Loading API component in NVIDIA Triton Inference Server (previously known as TensorRT Inference Server) allows a malicious actor to trigger a service failure.

The vulnerability of the Model Loading component of NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.8CVSS5.5AI score0.0045EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the sch_reboot() function in the adm.cgi script of the Wavlink AC3000 (WL-WN533A8) router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the schreboot function in the adm.cgi script of the Wavlink AC3000 WL-WN533A8 router’s microprogramming system is related to the lack of measures taken to manage data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

9.1CVSS8.2AI score0.04469EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the add_dir() function in the nas.cgi script of the Wavlink AC3000 router’s microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the adddir function in the nas.cgi script of the Wavlink AC3000 WL-WN533A8 router’s microprogramming system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sendi...

9.1CVSS8.1AI score0.06193EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the set_ftp_cfg() function in the nas.cgi script of the Wavlink AC3000 router’s microprogramming system allows a hacker to circumvent existing security restrictions.

The vulnerability of the setftpcfg function in the nas.cgi script of the Wavlink AC3000 WL-WN533A8 router’s microprogramming system is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending...

9.1CVSS7.7AI score0.01457EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the openvpn_server_setup() function in the openvpn.cgi scenario of the Wavlink AC3000 (WL-WN533A8) router microprogramming software allows a hacker to circumvent existing security restrictions.

The vulnerability of the openvpnserversetup function in the openvpn.cgi script of the Wavlink AC3000 WL-WN533A8 router software is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending...

9.1CVSS7.7AI score0.0183EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the add_dir() function in the nas.cgi script of the Wavlink AC3000 router’s microprogramming system allows a hacker to circumvent existing security restrictions.

The vulnerability of the adddir function in the nas.cgi script of the Wavlink AC3000 WL-WN533A8 router microprogramming system is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to bypass existing security...

9.1CVSS7.7AI score0.0243EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the set_ftp_cfg() function in the nas.cgi script of the Wavlink AC3000 router’s microprogramming system allows a hacker to circumvent existing security restrictions.

The vulnerability of the setftpcfg function in the nas.cgi script of the Wavlink AC3000 WL-WN533A8 router’s microprogramming system is related to errors in system configuration or settings. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by sending...

9.1CVSS5.5AI score0.01027EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the IPSec component of the Ivanti Connect Secure network access control tool allows a hacker to trigger a service failure.

The vulnerability of the IPSec component in the Ivanti Connect Secure network access control tool is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.2AI score0.01858EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control devices, related to the handling of the zero pointer, allows a violator to trigger a service failure.

The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.7AI score0.01345EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client relates to improper limitation of the number of user interface layers or frames displayed. This allows attackers to perform spoofing attacks.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to improper restrictions on the layers or frames that are displayed in the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

7.5CVSS6AI score0.00384EPSS
Exploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability in the WebAssembly component of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, allows a attacker to trigger a service failure.

The vulnerability of the WebAssembly component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause service interruptions...

10CVSS7.8AI score0.00585EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the virtual learning environment Moodle, related to lack of access control, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the virtual learning environment Moodle is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.4AI score0.00275EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerabilities of Intel System Resources Defense and Intel System Security Report, microprogramming software for Intel processors, allow attackers to enhance their privileges.

The vulnerabilities of Intel System Resources Defense and Intel System Security software related to Intel processor microsoftware are associated with insufficient validation of input data. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

7.5CVSS5.5AI score0.00207EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.3 views

The vulnerability of the web interface of NAKIVO Backup and Replication systems for virtual machines allows a perpetrator to disclose protected information.

The vulnerability of the web interface of NAKIVO Backup and Replication systems for virtual machines involves access control deficiencies. Exploiting this vulnerability allows an attacker to disclose protected information by sending specially crafted HTTP requests...

7.8CVSS8.1AI score0.93995EPSS
Exploits2References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the Intel oneAPI Base Toolkit, related to an uncontrolled element in the search process, allows attackers to enhance their privileges.

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the set of development tools Intel oneAPI Base Toolkit, is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow attackers to enhance their...

6.7CVSS5.5AI score0.00182EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.14 views

The vulnerability of IBM Engineering Lifecycle Optimization - Publishing software, related to the use of cryptographic algorithms containing defects, allows attackers to gain unauthorized access to protected information.

The vulnerability of IBM Engineering Lifecycle Optimization - Publishing software relates to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

5.9CVSS5.5AI score0.00195EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.2 views

The vulnerability of the Ivanti Avalanche device management system, related to bypassing the authentication process by using an alternative path or channel, allows a perpetrator to circumvent the authentication process.

The vulnerability of the Ivanti Avalanche device management system relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process...

7.5CVSS7.2AI score0.31041EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.1 views

The vulnerability of the set_qos() function in the internet.cgi script of the Wavlink AC3000 router microprogramming system allows a hacker to execute arbitrary commands.

The vulnerability of the setqos function in the internet.cgi script of the Wavlink AC3000 WL-WN533A8 router microprogramming system is related to the escape of operations from the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending...

9.1CVSS8.3AI score0.01212EPSS
Exploits1References3Affected Software1
Total number of security vulnerabilities74701