Lucene search
+L
Bdu FstecRecent

96144 matches found

BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.17 views

The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00333EPSS
SaveExploits0References2Affected Software18
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.11 views

The vulnerability of the Cordon multi-purpose photoreceiver family, related to the failure to take measures to neutralize special elements, allows a intruder to execute arbitrary commands.

The vulnerability of the Cordon multi-purpose photoreceiver family is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability can allow a remote-operating intruder to execute arbitrary commands...

9.9CVSS5.7AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.11 views

The vulnerability of the ATMs system “BUK TS-G” arises from the lack of measures taken to neutralize special elements, allowing for arbitrary code execution.

The vulnerability of the ATMs system “BUK TS-G” is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

9.1CVSS6AI score
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.9 views

The vulnerability of the Cordon multi-purpose photoradar systems, related to the lack of protective measures for the website structure, allows attackers to execute arbitrary codes.

The vulnerability of the Cordon multi-purpose photoradar systems is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.5CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.14 views

Microsoft Edge browser vulnerability, related to incorrect elimination of special elements in output data, allows attackers to enhance their privileges.

The vulnerability of Microsoft Edge relates to incorrect elimination of special elements in output data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

6.4CVSS5.8AI score0.0024EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.20 views

The vulnerability of Microsoft Office packages, related to buffer overflows in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6AI score0.00437EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.20 views

The vulnerability of the Win32K component – ICOMP in Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the Win32K component – ICOMP in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.02014EPSS
SaveExploits0References2Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.17 views

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the DWM Core Library in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00284EPSS
SaveExploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.14 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6AI score0.00332EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.14 views

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in Android operating systems, related to access control errors, allows attackers to perform spearishing attacks.

The vulnerability of Microsoft 365 Copilot’s intelligent virtual assistant in Android operating systems is related to access control errors. Exploiting this vulnerability could allow attackers to carry out spear-phishing attacks...

4.4CVSS6.1AI score0.00249EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.15 views

The vulnerability of the command-line interface (CLI) of Fortinet’s FortiAP and FortiAP-W2 access points allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface CLI of Fortinet’s FortiAP and FortiAP-W2 microprogramming solutions lies in the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary comman...

6.8CVSS6AI score0.00561EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.10 views

The vulnerability of the command-line interface (CLI) of Fortinet’s FortiAP and FortiAP-W2 access points allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface CLI of Fortinet’s FortiAP and FortiAP-W2 microprogramming solutions lies in the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary comman...

6.8CVSS6AI score0.00561EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.12 views

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses stems from deficiencies in the authentication process, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft Dynamics 365 Business Central software for small and medium-sized businesses is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS5.8AI score0.00272EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.13 views

Microsoft Edge’s vulnerability, related to improper external management of file names or paths, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Edge relates to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS5.8AI score0.00652EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.14 views

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...

9.9CVSS6.4AI score0.01194EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.13 views

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

7.8CVSS5.7AI score0.00931EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.9 views

The vulnerability of the “Kordon” multi-purpose radar system family arises from an incorrect limitation on the name of the path to the catalog, allowing attackers to read arbitrary files.

The vulnerability of the Cordon multi-purpose photodetection systems is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files...

6.8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.17 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS6AI score0.00369EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.13 views

The vulnerability of Windows SMB operating systems for clients allows attackers to increase their privileges.

The vulnerability of SMB operating system clients in Windows systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.8AI score0.00243EPSS
SaveExploits0References2Affected Software19
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.7 views

S (Victor Lazarev Sayer OK) (No. 1 from May 14, 2026 at 13:56:05)

...

5.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.16 views

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.00138EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.11 views

The vulnerability of monitoring panels in the Git-based software platform allows attackers to perform cross-site scripting attacks during collaborative code development in GitLab Enterprise Edition.

The vulnerability of monitoring panels in the Git-based software platform for collaborative code development in GitLab Enterprise Edition is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripti...

8.7CVSS5.6AI score0.00256EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.15 views

The vulnerability of the Rich Text Edit Control text editor in the Windows operating system, which allows attackers to exploit their privileges.

The vulnerability of the Rich Text Edit Control text editor in the Windows operating system is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to increase their privileges...

6.7CVSS5.8AI score0.00319EPSS
SaveExploits0References3Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.12 views

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00154EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.7 views

The vulnerability of the Netlogon service in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Netlogon service in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

10CVSS6.5AI score0.79622EPSS
SaveExploits39References3Affected Software13
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.17 views

The vulnerability of the Windows Operating System’s Telephony Service allows attackers to exploit their privileges.

The vulnerability of the Windows Operating System’s Telephony Service relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00249EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.24 views

The vulnerability of the Microsoft Outlook email client on iOS operating systems, related to the lack of data cleaning at the management level, allows attackers to execute arbitrary commands.

The vulnerability of the Microsoft Outlook email client on iOS operating systems is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

7.8CVSS6.1AI score0.00399EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.13 views

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems, which allows attackers to escalate their privileges.

The vulnerability of the Windows Cloud Files Mini Filter Driver for operating systems affects synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

7.8CVSS5.8AI score0.00163EPSS
SaveExploits0References2Affected Software14
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.19 views

The vulnerability of the Native WiFi Miniport Driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Native WiFi Miniport Driver for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

7.5CVSS6AI score0.00297EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.16 views

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a perpetrator to cause service failures.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.4CVSS5.8AI score0.00528EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.31 views

Vulnerability of operating systems due to improper validation of specified input types, allowing attackers to execute arbitrary code.

The vulnerability of operating systems iPadOS, iOS, and macOS Tahoe is related to improper validation of the specified data type. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.7CVSS6AI score0.01214EPSS
SaveExploits1References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.20 views

The vulnerability of the Rich Text Edit Control text editor in Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the Rich Text Edit Control text editor in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

6.7CVSS5.8AI score0.00319EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.10 views

The vulnerability of the ATMs system “BUK TS-G” lies in the lack of measures taken to protect SQL queries. This allows attackers to send arbitrary queries and gain access to protected information.

The vulnerability of the “BUK TS-G” automation system is related to the lack of measures taken to protect SQL queries. Exploiting this vulnerability allows a malicious actor to send arbitrary queries and gain access to protected information...

9.3CVSS5.9AI score
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.14 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server’s software packages stems from deficiencies in the deserialization mechanism, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

9CVSS6.1AI score0.01967EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.22 views

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.8CVSS5.8AI score0.00219EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.9 views

The vulnerability of the Cordon multi-purpose photoradar systems, which stems from insufficient validation of requests on the server side, allows attackers to execute SSRF attacks.

The vulnerability of the Cordon multi-purpose photoradar systems is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...

8.5CVSS5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.13 views

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to the use of memory after it is released. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS5.8AI score0.00305EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.17 views

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise allows a perpetrator to enhance their privileges.

The vulnerability of the Click-to-Run package technology for Microsoft Office and Microsoft 365 Apps for Enterprise is related to the use of memory after it is released. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS5.8AI score0.00254EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/05/14 12:00 a.m.8 views

The vulnerability of the EMM solution WorksPad, related to access control errors, allows a perpetrator to perform arbitrary actions.

The vulnerability of the EMM solution WorksPad is related to access control errors. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...

8.7CVSS6.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.19 views

The vulnerability of the WebCodecs component in the Google Chrome web browser allows a perpetrator to access confidential data or cause service failures.

The vulnerability of the WebCodecs component in the Google Chrome web browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data or cause service failures through a specially creat...

9.4CVSS7.8AI score0.00243EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.15 views

The vulnerability of the WebCodecs component in the Google Chrome web browser, which allows a hacker to trigger a service failure

The vulnerability of the WebCodecs component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

7.5CVSS7.9AI score0.00385EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.9 views

The vulnerability of the msl.c component in the console-based image editing tool ImageMagick allows a hacker to gain access to confidential data or cause a service failure.

The vulnerability of the msl.c component in the console-based image editing tool ImageMagick is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain access to confidential data or cause service interruptions...

7.4CVSS7.4AI score0.00283EPSS
SaveExploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.15 views

The vulnerability of the GetAlertData() function on the security monitoring and threat detection platform Wazuh allows a malicious actor to trigger a service failure.

The vulnerability of the GetAlertData function on the security monitoring and threat detection platform Wazuh is related to a violation of the buffer’s initial limit. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.5CVSS5.8AI score0.00169EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.9 views

The vulnerability of the ReadYUVImage function in the coders/yuv.c file of the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the ReadYUVImage function in the coders/yuv.c file of the ImageMagick console graphics editor is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

5.3CVSS6.8AI score0.004EPSS
SaveExploits0References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.11 views

The vulnerability of the AppID service for operating systems Windows allows attackers to increase their privileges.

The vulnerability of the AppID service for operating systems running on Windows lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.9AI score0.00326EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.16 views

The vulnerability of the Win32K component – GRFX in Windows operating systems – allows attackers to enhance their privileges.

The vulnerability of the Win32K component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS5.8AI score0.0019EPSS
SaveExploits0References2Affected Software21
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.15 views

The vulnerability of the Cisco IOS XE operating system, which allows a perpetrator to access confidential information

The vulnerability of the Cisco IOS XE operating system is related to the transmission of critical information in plaintext. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information...

6.1CVSS5.8AI score0.00152EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.17 views

The vulnerability of the Cisco IOS XE operating system’s command-line interface allows a hacker to trigger a service failure.

The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.5CVSS6.1AI score0.00092EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.24 views

The vulnerability in the web interface of the Cisco IOx software platform allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability in the Cisco IOx software platform’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a remote attacker to perform cross-site scripting attacks XSS...

5.5CVSS6AI score0.00194EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/05/13 12:00 a.m.22 views

The vulnerability of the Cisco IoT Field Network Director software interface allows a intruder to trigger a service failure.

The vulnerability of the Cisco IoT Field Network Director software interface is related to access control errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.7CVSS5.8AI score0.00272EPSS
SaveExploits0References2Affected Software1
Total number of security vulnerabilities96144