Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability in the form2RepeaterSetup.cgi script of the D-Link DIR-816A router’s software allows a hacker to execute arbitrary code.

The vulnerability of the form2RepeaterSetup.cgi script in the D-Link DIR-816A2 router microprogramming software is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTP POST request...

10CVSS8.2AI score0.00551EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to access control errors, allows attackers to gain unauthorized access to protected information.

The vulnerabilities of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to access control errors. Exploiting these vulnerabilities can allow attackers to bypass security restrictions and gain unauthorized...

9CVSS5.5AI score0.00851EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows attackers to perform...

8.9CVSS5.2AI score0.00656EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of the Kernel Streaming WOW Thunk Service Driver (ksthunk.sys) in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Kernel Streaming WOW Thunk Service Driver ksthunk.sys in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS8.1AI score0.00568EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the form_fast_setting_wifi_set function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formfastsettingwifiset function in the Tenda AC18 router’s microprogramming software is related to buffer overflow during the processing of the ssid parameter. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary codes...

10CVSS6.2AI score0.00763EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of the Microsoft Message Queuing (MSMQ) service on Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Microsoft Message Queuing MSMQ service on Microsoft Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.7AI score0.02921EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00686EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability of Git’s version control extension for large Git files arises from improper elimination of special elements in the output data used by the incoming component. This allows a malicious actor to gain unauthorized access to user credentials.

The vulnerability of Git’s version control extension for large Git files is related to incorrect elimination of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to user...

10CVSS7.4AI score0.0104EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability in the driver set of the Siveillance Video Device Pack software for video surveillance control by Milestone XProtect allows a intruder to disclose protected information.

The vulnerability of the Siveillance Video Device Pack software for video surveillance control by Milestone XProtect relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose protected information...

7.8CVSS5.4AI score0.00145EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.5 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows attackers to perform...

8.9CVSS5.2AI score0.00656EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of the Resilient File System (ReFS) Deduplication Service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Resilient File System ReFS Deduplication Service in Windows operating systems is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.4CVSS7.7AI score0.00467EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00739EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.4 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise programs lies in the ability to read data outside of the allowed range in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

7.8CVSS7.7AI score0.00858EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability of the formSetFirewallCfg function in the microprogramming software for Tenda AC18 allows a hacker to trigger a service failure.

The vulnerability of the formSetFirewallCfg function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the firewallEn parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

10CVSS8.4AI score0.00725EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the formSetPPTPServer function in the Tenda AC18 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetPPTPServer function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the startIP parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of th...

10CVSS8.3AI score0.00725EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the Core Messaging service in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Core Messaging service in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7CVSS8AI score0.00535EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS7.8AI score0.00882EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.6 views

The vulnerability of the Windows Win32 Kernel subsystem in operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Win32 Kernel subsystem in operating systems involves the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.6AI score0.00568EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in buffer overflows in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.4AI score0.00739EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability in the web interface for managing micro-program software on Cisco Expressway allows a attacker to perform XSS attacks.

The vulnerability in the web interface for managing microprogramming software in Cisco Expressway is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00365EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS7.8AI score0.00879EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.4 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00826EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to incorrect handling of symbolic links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.7AI score0.00602EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser allows attackers to execute arbitrary commands.

The vulnerability of the Web Inspector tool for checking web pages on operating systems like iOS, iPadOS, macOS, and the Safari browser is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

10CVSS7.7AI score0.02777EPSS
Exploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the 7Z File Parser component, a archive file processor for the WinZip archive manager, allows a hacker to execute arbitrary code.

The vulnerability of the 7Z File Parser component, a archive file processor for the WinZip archive manager, is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, by sending a...

7.8CVSS8.1AI score0.09694EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the get_canonical_dev_path() function in the fs/btrfs/volumes.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the getcanonicaldevpath function in the fs/btrfs/volumes.c module of the Linux kernel is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.5CVSS6.7AI score0.00163EPSS
Exploits0References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.4 views

The vulnerability in the `drivers/net/ethernet/broadcom/bnxt/bnxt.c` module of Linux kernel allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/broadcom/bnxt/bnxt.c module of Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00199EPSS
Exploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain access and modify arbitrary files.

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to gain acces...

7.8CVSS5.6AI score0.01278EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of the System Settings component in MacOS operating systems allows a hacker to overwrite arbitrary files.

The vulnerability of the System Settings component in MacOS operating systems is related to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to overwrite arbitrary files...

5.5CVSS7.5AI score0.00215EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.4 views

The vulnerability of the Image Handler component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows a hacker to trigger a service failure.

The vulnerability of the Image Handler component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS7.7AI score0.00262EPSS
Exploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the AppleMobileFileIntegrity component in the MacOS operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the AppleMobileFileIntegrity component in the MacOS operating system is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.4AI score0.00231EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability of the Kernel component in operating systems such as MacOs, iPadOS, iOS, watchOS, and tvOS allows attackers to elevate their privileges to a root level.

The vulnerability of the Kernel component in macOS, iPadOS, iOS, watchOS, and tvOS is related to permission handling errors. Exploiting this vulnerability can allow an attacker to elevate their privileges to a root level...

7.8CVSS7.7AI score0.00209EPSS
Exploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of the proxy server of the Fortinet FortiManager device management software, as well as the FortiAnalyzer security event monitoring and analysis tools, allows a perpetrator to execute arbitrary codes or commands.

The vulnerability of the proxy server of the Fortinet FortiManager device management software, as well as the FortiAnalyzer event monitoring and analysis tools, relates to an escape from the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or...

9CVSS6.3AI score0.00639EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.12 views

The vulnerability in the form2WlAc.cgi script of the D-Link DIR-816A router’s software allows a hacker to execute arbitrary code.

The vulnerability of the form2WlAc.cgi script of the D-Link DIR-816A2 router’s microprogramming software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTP POST request...

10CVSS8.2AI score0.00419EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of the formSetSambaConf function in the Tenda AC18 router microprogramming system allows a attacker to execute arbitrary commands.

The vulnerability of the formSetSambaConf function in the Tenda AC18 router microprogramming system exists due to the lack of measures taken to neutralize special elements during the processing of the usbName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

9.4CVSS6AI score0.01477EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to improper authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to improper authentication. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized...

8.5CVSS5.4AI score0.00627EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability of the d_status.asp component of the D-Link DIR-816A router’s microprogramming system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the dstatus.asp component of the D-Link DIR-816A2 router’s microprogramming system is related to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially...

7.8CVSS7.8AI score0.00451EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.4 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows attackers to perform...

8.7CVSS5.2AI score0.00656EPSS
Exploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.5 views

The vulnerability of the Microsoft Digest Authentication (wDigest) authentication mechanism in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Digest Authentication wDigest authentication mechanism in Windows operating systems is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.2AI score0.02078EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.4 views

The vulnerability of the Internet Connection Sharing (ICS) function in Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the Internet Connection Sharing ICS function in Windows operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

6.5CVSS7.8AI score0.00882EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.5 views

The vulnerability of Windows operating system DHCP clients allows a perpetrator to trigger a service failure.

The vulnerability of DHCP clients of Windows operating systems is related to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

4.8CVSS7.8AI score0.00631EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability of the application software interface of the BIG-IP Next Central Manager lies in insufficient validation of input data, allowing a perpetrator to trigger a service failure.

The vulnerability of the application software interface of the BIG-IP Next Central Manager is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

6.8CVSS6.2AI score0.0036EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability in the kernel of operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper code generation. Exploiting this vulnerability can allow attackers to increase their privileges and execute arbitrary code...

7.8CVSS8.1AI score0.00316EPSS
Exploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability of the Contacts component in MacOS operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the Contacts component in MacOS operating systems is related to access control errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.3CVSS5.4AI score0.00195EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.4 views

The vulnerability of the SharedFileList component in MacOS operating systems allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the SharedFileList component in MacOS operating systems is related to improper storage of permissions. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

3.3CVSS7.1AI score0.00148EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability of the websURLFilterAddDel component of the D-Link DIR-816A router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the websURLFilterAddDel component of the D-Link DIR-816A2 router’s microprogramming software is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created HTTP POST request...

7.8CVSS8.2AI score0.00516EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.3 views

The vulnerability in the form2WlanBasicSetup.cgi script of the D-Link DIR-816A router’s software allows a hacker to execute arbitrary code.

The vulnerability of the form2WlanBasicSetup.cgi microprogramming system of the D-Link DIR-816A2 router is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTP POST request...

7.8CVSS8.2AI score0.00419EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability of the Kernel component in operating systems such as MacOs, tvOs, watchOs, iPadOs, and iOS allows attackers to influence data integrity.

The vulnerability of the Kernel component in macOS, tvOS, watchOS, iPadOS, and iOS is related to deficiencies in access control within isolated environments. Exploiting this vulnerability could allow attackers to compromise data integrity...

8.2CVSS7.2AI score0.0019EPSS
Exploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.1 views

The vulnerability in the form2alg.cgi script of the D-Link DIR-816A router’s software allows a hacker to execute arbitrary code.

The vulnerability of the form2alg.cgi script in the microprogramming software of the D-Link DIR-816A2 router is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTP POST request...

10CVSS8.2AI score0.00492EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/13 12:0 a.m.2 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows attackers to perform...

8.9CVSS5.2AI score0.00656EPSS
Exploits0References2Affected Software3
Total number of security vulnerabilities74701