Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the cckeckKeepAlive() function in the microprogramming software of the TOTOLink T6 system allows a hacker to execute arbitrary commands.

The vulnerability of the cckeckKeepAlive function in the TOTOLink T6 mesh-system’s software lies in the lack of measures taken to neutralize special elements during the processing of the ipAddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.5CVSS6.9AI score0.07606EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the Condeon CMS system, related to the storage of confidential information in open text, allows a hacker to intercept sessions and gain access to the user’s account.

The vulnerability of the Condeon CMS system relates to the storage of confidential information in open text within the memory dump file. Exploiting this vulnerability could allow a malicious actor to intercept sessions and gain access to the user account...

10CVSS5.5AI score
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the centralized control system for network devices and ports of Advantech iView is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00126EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the centralized control system for network devices and ports of Advantech iView is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00126EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the `xmlSchematronGetNode` function in the Libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlSchematronGetNode function in the Libxml2 library is related to the pointer being dereferenced when its validity period has expired. Exploiting this vulnerability could allow a malicious actor to cause service failures...

9.4CVSS6.7AI score0.00445EPSS
Exploits0References15Affected Software10
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the fromSafeUrlFilter() function in the /goform/SafeUrlFilter file of the Tenda FH451 router microsystem’s software, which allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeUrlFilter function in the /goform/SafeUrlFilter file of the Tenda FH451 router microprogramming system is related to buffer overflows based on a stack-based mechanism when processing the Go parameter. Exploiting this vulnerability could allow an attacker to execut...

9CVSS8.4AI score0.01566EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.3 views

Vulnerability of the technology platform “1C:Enterprise 8,” due to deficiencies in the authorization process, allows unauthorized users to gain access to the system.

Vulnerability of the technology platform “1C:Enterprise 8” is vulnerable due to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the system under the identity of any user...

9CVSS5.5AI score
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the `core::fmt::write()` function in the arch/x86/Kconfig module of Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the core::fmt::write function in the arch/x86/Kconfig module of Linux kernels is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00049EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability in the module drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.cc of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.cc module of Linux operating systems is related to the execution of several interrelated actions in the wrong order. Exploiting this vulnerability can allow an attacker to cause service failures...

7CVSS6.7AI score0.00052EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.3 views

The vulnerability of the formWebTypeLibrary() function in the Tenda FH451 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWebTypeLibrary function in the Tenda FH451 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the webSiteId parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code o...

9CVSS8.3AI score0.01669EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the Apache HTTP Server’s web server, related to memory leaks, allows attackers to cause service interruptions.

The vulnerability of the Apache HTTP Server web server is related to a memory leak. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.3CVSS6.8AI score0.04605EPSS
Exploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

Vulnerability of the NetworkServlet.archiveTrapRange() function in the system for centrally managing network devices and ports of Advantech iView. This vulnerability allows a attacker to execute arbitrary code.

The vulnerability of the NetworkServlet.archiveTrapRange function in the system for managing network devices and ports of Advantech iView is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS6AI score0.00874EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.3 views

The vulnerability of the uploadFWBinary method in the network management system for monitoring industrial networks of Siemens SINEC NMS allows a intruder to gain unauthorized access to file writing and execute arbitrary code.

The vulnerability of the uploadFWBinary method in the network management system for monitoring industrial networks of Siemens SINEC NMS is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating...

9CVSS7.9AI score0.0172EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the network management system for monitoring industrial networks in Siemens SINEC NMS lies in the lack of measures taken to protect the SQL query structure. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Siemens SINEC NMS network management system for monitoring industrial networks is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibili...

9CVSS5.6AI score0.00261EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the vSockets library in VMware ESXi, VMware Workstation, and VMware Fusion allows a hacker to gain unauthorized access to protected information.

The vulnerability of the vSockets library in VMware ESXi, VMware Workstation, and VMware Fusion hypervisors is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.1CVSS6.5AI score0.00204EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the fromNatStaticSetting() function in the Tenda FH451 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromNatStaticSetting function in the Tenda FH451 router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code ...

9CVSS8.5AI score0.01566EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.3 views

The vulnerability of the UMIP function in AMD’s microprogramming software allows attackers to disclose protected information.

The vulnerability of the UMIP function in AMD’s microprogramming software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose protected information...

3.8CVSS6.8AI score0.00072EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the xmlSchematronFormatReport() function in the libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlSchematronFormatReport function in the libxml2 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures through a specially created XML file...

9.4CVSS7.2AI score0.01777EPSS
Exploits0References17Affected Software10
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the setparentcontrolinfo() function in Tenda AC6 router software allows a hacker to trigger a service failure.

The vulnerability of the setparentcontrolinfo function in Tenda AC6 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

9CVSS8.1AI score0.01094EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the Apache Tomcat application server, related to synchronization errors when using a shared resource (“Race Condition”), allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

5.6CVSS7.7AI score0.01205EPSS
Exploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the Apache Tomcat application server, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of the Apache Tomcat application server is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.6CVSS7.8AI score0.01247EPSS
Exploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the regs_get_kernel_stack_nth() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the regsgetkernelstacknth function in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

7CVSS7.3AI score0.00067EPSS
Exploits0References18Affected Software10
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the updateWifiInfo() function in the MQTT service of the TOTOLink T6 mesh-system’s microprogramming system allows a intruder to execute arbitrary code.

The vulnerability of the updateWifiInfo function in the MQTT service of the TOTOLink T6 mesh-system’s microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

9CVSS8.3AI score0.01357EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the sprintf() function in the JHTTPD web server of D-Link’s router software DI-8100 allows a hacker to execute arbitrary code.

The vulnerability of the sprintf function in the JHTTPD web server of the D-Link DI-8100 router microprogramming system is related to the execution of operations outside the buffer during the processing of the mx parameter. Exploiting this vulnerability allows a remote attacker to execute arbitra...

9CVSS8.4AI score0.00733EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the setTelnetCfg() function in the /cgi-bin/cstecgi.cgi script of the telnet service in the mesh-system software TOTOLink T6 allows a hacker to bypass security restrictions and execute arbitrary code.

The vulnerability of the setTelnetCfg function in the /cgi-bin/cstecgi.cgi script of the telnet service in the mesh-system software TOTOLink T6 is related to deficiencies in the authentication process when processing the telnetEnabled parameter. Exploiting this vulnerability allows a malicious...

7.5CVSS7.5AI score0.00337EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the Condeon CMS system, related to deficiencies in access control, allows a hacker to intercept sessions and gain access to the user account.

The vulnerability of the Condeon CMS system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to intercept sessions and gain access to the user account...

9CVSS5.5AI score
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of microprogrammed software in Canon’s imageRUNNER ADVANCE, imageRUNNER, imagePRESS V, imagePRESS, Satera series printers relates to insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of microprogrammed software in Canon’s imageRUNNER ADVANCE, imageRUNNER, imagePRESS V, imagePRESS, and Satera series printers relates to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

8.7CVSS8AI score0.00301EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the Apache HTTP Server’s kernel allows attackers to compromise the integrity of the protected information.

The vulnerability of the Apache HTTP Server’s kernel is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

6.8CVSS6.8AI score0.00916EPSS
Exploits0References14Affected Software10
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the fromP2pListFilter() function in the software for Tenda FH451 routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function in the Tenda FH451 router’s software lies in the fact that the operation exceeds the buffer limits in memory when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

9CVSS8.3AI score0.18164EPSS
Exploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the fromPptpUserAdd() function in the Tenda FH451 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failure.

The vulnerability of the fromPptpUserAdd function in the Tenda FH451 router’s microprogramming software is related to the issue where the operation exits the buffer boundaries into memory when processing the username parameter. Exploiting this vulnerability allows a remote attacker to execute...

9CVSS8.4AI score0.01566EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the upnp_ctrl_asp() function in the JHTTPD web server of the D-Link DI-8100 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the upnpctrlasp function in the JHTTPD web server of the D-Link DI-8100 microprogrammed router software is related to the execution of operations outside the buffer in memory when processing the removeextproto and removeextport parameters. Exploitation of this vulnerability...

9CVSS8AI score0.00865EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the Apache HTTP Server web server, related to insufficient validation of incoming requests, allows attackers to perform SSRF attacks.

The vulnerability of the Apache HTTP Server is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

7.8CVSS7.3AI score0.00242EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the formSetAPCfg() function (/goform/setWtpData) in the Tenda AC500 router’s microprogramming software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the formSetAPCfg/goform/setWtpData function in the Tenda AC500 router’s microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the parameter radio2g1. Exploiting this vulnerability could allow a remote...

9CVSS8.4AI score0.01566EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the centralized control system for network devices and ports of Advantech iView is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00126EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

Vulnerability of the NetworkServlet.archiveTrap() function in the system for centrally managing network devices and ports of Advantech iView. This vulnerability allows a hacker to execute arbitrary code.

The vulnerability of the NetworkServlet.archiveTrap function in the system for managing network devices and ports of Advantech iView is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS6.1AI score0.00874EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the mod_ssl function in the Apache HTTP Server web server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the modssl function in the Apache HTTP Server is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

9.4CVSS7.5AI score0.00058EPSS
Exploits1References16Affected Software12
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.4 views

The vulnerability of the Java VM component of the Oracle Database Server system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Java VM component of the Oracle Database Server management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

7.7CVSS7.2AI score0.00299EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.3 views

The vulnerability in the module drivers/media/usb/cx231xx/cx231xx-417.c of Linux kernel allows a hacker to cause a service failure.

The vulnerability in the module drivers/media/usb/cx231xx/cx231xx-417.c of Linux operating systems is related to incorrect handling of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...

4.7CVSS6.6AI score0.00092EPSS
Exploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the fromSafeClientFilter() function in the file /goform/SafeClientFilter of the Tenda FH451 router’s microprogramming system allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSafeClientFilter function in the /goform/SafeClientFilter module of the Tenda FH451 router’s software is related to buffer overflows based on a stack-based mechanism when processing the Go parameter. Exploiting this vulnerability allows an attacker to execute arbitrar...

9CVSS8.4AI score0.01566EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of microprogrammed software in Canon’s imageRUNNER ADVANCE, imageRUNNER, imagePRESS V, imagePRESS, Satera series printers relates to insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of microprogrammed software in Canon’s imageRUNNER ADVANCE, imageRUNNER, imagePRESS V, imagePRESS, and Satera series printers relates to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

8.7CVSS8AI score0.00301EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the xmlSchematronFormatReport() function in the Schematron Schema Report component of the libxml2 library allows a attacker to trigger a service failure.

The vulnerability of the xmlSchematronFormatReport function in the Schematron Schema Report component of the libxml2 library is related to the use of a null pointer during the processing of XPath expressions. Exploiting this vulnerability could allow an attacker to cause service failures by sendi...

7.8CVSS7.1AI score0.00834EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the ClassUtils.getClass() function in the Apache Commons Lang library for the Java programming language allows a attacker to trigger a denial-of-service attack.

The vulnerability of the ClassUtils.getClass method in the Apache Commons Lang library for the Java programming language is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

5.3CVSS6.4AI score0.00099EPSS
Exploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the set_boost() function in the drivers/cpufreq/amd-pstate.c kernel module of Linux operating systems allows a hacker to cause a system failure.

The vulnerability of the setboost function in the drivers/cpufreq/amd-pstate.c kernel module of Linux operating systems is related to insufficient resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

7CVSS6.5AI score0.00049EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the fromPptpUserSetting() function in the /goform/PPTPUserSetting file of the Tenda FH451 router’s software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromPptpUserSetting function in the /goform/PPTPUserSetting file of the Tenda FH451 router’s microprogramming system is related to buffer overflow during the processing of the delno parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or...

9CVSS8.4AI score0.01566EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the formSetWanNonLogin() function in the embedded web server software of D-Link DIR-513 routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetWanNonLogin function in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could allow a remote attacker to execu...

9CVSS8.3AI score0.01985EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the ssdpcgi_main() function (/htdocs/cgibin) in the ssdpcgi component of D-Link DIR-645 router microprogramming software, allowing a hacker to execute arbitrary commands

The vulnerability of the ssdpcgimain function /htdocs/cgibin of the ssdpcgi component in the D-Link DIR-645 router microprogramming system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

6.5CVSS6.9AI score0.02067EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of the unZipJarFilestoLocation method in the network management system allows a intruder to gain unauthorized access to file recording and execute arbitrary code. This vulnerability is present in Siemens SINEC NMS systems used for monitoring industrial networks.

The vulnerability of the unZipJarFilestoLocation method in the network management system for monitoring industrial networks of Siemens SINEC NMS is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operati...

9CVSS7.9AI score0.0172EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the WARN_ON() function in the drivers/net/ethernet/mellanox/mlx5/core/en_main.c kernel of Linux operating systems allows an attacker to compromise the accessibility of protected information.

The vulnerability of the WARNON function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c file of the Linux kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

4.1CVSS6.5AI score0.00052EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.1 views

The vulnerability of the eir_create_adv_data() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the eircreateadvdata function in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.6CVSS6.2AI score0.00065EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:0 a.m.2 views

The vulnerability of AMD’s microprogramming software for processors lies in the insufficient protection of operational data, which allows attackers to disclose protected information.

The vulnerability of AMD’s microprogramming software is related to insufficient protection of operational data. Exploiting this vulnerability can allow attackers to disclose protected information...

3.8CVSS6.8AI score0.00072EPSS
Exploits0References2
Total number of security vulnerabilities74701