Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.2 views

The vulnerability of Adobe Illustrator’s graphic editor lies in its numerical loss of significance, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

7.8CVSS5.9AI score0.00251EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.2 views

The vulnerability of Adobe Illustrator’s graphic editor lies in its numerical loss of significance, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe Illustrator’s graphic editor is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

7.8CVSS5.9AI score0.00251EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.17 views

The vulnerability in the implementation of the cc_SendCcImsInfoIndMsg function in the cc_MmConManagement.c file of the Android operating system of Pixel phones allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the ccSendCcImsInfoIndMsg function in the ccMmConManagement.c file of the Android operating system for Pixel phones is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute...

10CVSS6.1AI score0.00329EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.3 views

The vulnerability of the Adobe Photoshop graphic editor, related to a countable loss of significance, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to a countable loss of significance. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created malicious file...

7.8CVSS5.9AI score0.00274EPSS
Exploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:0 a.m.3 views

The vulnerability of the Extensions component of Google Chrome and Microsoft Edge browsers allows attackers to enhance their privileges.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

10CVSS7.5AI score0.00445EPSS
Exploits1References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.1 views

The vulnerability of the sub_422eb8 function in the Linksys E8450 Wi-Fi router’s microprogramming system allows a intruder to trigger a service failure.

The vulnerability of the sub422eb8 function in the Linksys E8450 Wi-Fi router’s microprogramming system is related to the copying of buffers without checking the size of the input data during the strncpy operation. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.4AI score0.00426EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the S1AP protocol implementation in the NextEPC module allows a violator to enhance their privileges.

The vulnerability of the S1AP protocol implementation in the NextEPC module is related to the execution of operations outside the stack buffer. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending a specially crafted NAS message...

10CVSS5.7AI score0.00381EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.4 views

The vulnerability of the device management consoles (AMS) and central control consoles (SMM) of the SonicWall SMA 1000 series microprogrammed network interface controllers allows attackers to execute arbitrary operating system commands.

The vulnerability of the device management consoles AMS and central control consoles SMM of SonicWall’s SMA 1000 series microprogrammed network interface controllers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute...

10CVSS8.5AI score0.22252EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the interface of Siglent SDS1104X-E digital oscilloscopes’ microprogramming software allows a perpetrator to execute arbitrary code.

The vulnerability of the SCPI interface of Siglent SDS1104X-E digital oscilloscopes lies in the lack of authentication due to insufficient verification of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0172EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.3 views

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a malicious individual to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application relates to deficiencies in the authorization process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, modify, add, or delete data...

5.5CVSS7.7AI score0.00179EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.1 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools, a resource management system for enterprises, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves insufficient validation of input data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

5.3CVSS7.7AI score0.00457EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.1 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete files.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to the manipulation of inter-site requests. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete file access rights...

5.5CVSS7.6AI score0.00179EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the command-line interface (CLI) of FortiWeb web applications allows a hacker to bypass security restrictions and execute arbitrary commands.

The vulnerability of the command-line interface CLI of FortiWeb web applications relates to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to bypass security restrictions and execute arbitrary commands...

6.4CVSS6.2AI score0.00218EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.1 views

The vulnerability of the sub_422eb8() function in Linksys E8450 Wi-Fi router software allows a hacker to induce a service failure.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogrammed software involves copying buffers without checking the size of the input data during the strcopy parameter processing. Exploiting this vulnerability can allow an attacker to cause service interruptions...

5.5CVSS5.4AI score0.004EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.3 views

The vulnerability of the sub_422eb8 function in Linksys E8450 Wi-Fi routers allows a hacker to induce a service failure.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data during the strcopy parameter processing. Exploiting this vulnerability can allow an attacker to cause service...

5.5CVSS5.4AI score0.004EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component: The Optimizer of the Oracle MySQL Server system, which allows a hacker to cause a service failure.

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases and the Server component of the Oracle MySQL Server management system are related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service...

6.8CVSS7AI score0.00992EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.3 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete files.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system relates to the manipulation of inter-site requests. Exploiting this vulnerability could allow an attacker to gain read, modify, and delete file access rights...

6.8CVSS7.6AI score0.00185EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.3 views

The vulnerability of the Mark-of-the-Web protection mechanism in the 7-Zip compressor allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the Mark-of-the-Web protection mechanism in the 7-Zip compressor is related to a breach of the data protection mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...

7CVSS7.9AI score0.65887EPSS
Exploits8References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.3 views

The vulnerability of the platform for monitoring, managing, and improving LLM applications, related to deficiencies in access control, allows attackers to gain unauthorized access to protected information and enhance their privileges.

The vulnerability of the platform for monitoring, managing, and improving LLM applications is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information and enhance their privileges...

8.5CVSS7.2AI score0.00437EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the sdnproxy module of the FortiAnalyzer security monitoring and event analysis tool, as well as the FortiManager device management software, allows a perpetrator to execute arbitrary code and gain increased privileges.

The vulnerability of the sdnproxy module of the FortiAnalyzer security monitoring and event analysis tool, as well as the FortiManager device management software, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...

7.1CVSS6.1AI score0.0079EPSS
Exploits0References4Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the sub_422eb8 function in Linksys E8450 Wi-Fi router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS5.9AI score0.0184EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.3 views

The vulnerability of the sub_422eb8 function in Linksys E8450 Wi-Fi routers allows a hacker to induce a service failure.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data during the strcopy parameter processing. Exploiting this vulnerability can allow an attacker to cause service...

5.5CVSS5.4AI score0.004EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the OLE2 form file analysis component in the Clam Antivirus anti-virus program allows a hacker to trigger a service failure.

The vulnerability of the OLE2 form file analysis component in the Clam Antivirus antivirus program lies in the overflow of memory buffers. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted file...

6.2CVSS6.7AI score0.01458EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system, which allows a hacker to trigger a service failure.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS7.7AI score0.00634EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system, which allows a hacker to trigger a service failure.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.8CVSS7.7AI score0.00634EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.2 views

The vulnerability of the Agile Integration Services component of the Oracle Agile PLM Framework’s product lifecycle management software allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Agile Integration Services component of the Oracle Agile PLM Framework’s product lifecycle management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

9.9CVSS8.1AI score0.00592EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.1 views

The vulnerability of the kubelet utility, a management tool for clusters of virtual machines in Kubernetes, for Windows operating systems allows a hacker to execute arbitrary commands.

The vulnerability of the kubelet utility in the Kubernetes cluster management software for Windows operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.6CVSS7AI score0.01394EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:0 a.m.3 views

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management allows a perpetrator to gain access to read, modify, and delete files.

The vulnerability of the Web Runtime SEC component of the JD Edwards EnterpriseOne Tools system for resource management involves deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to gain access to read, modify, and delete files...

4.3CVSS7.7AI score0.00374EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.4 views

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS8.1AI score0.00493EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.2 views

The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.3AI score0.01087EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.3 views

The vulnerability of the sub_422eb8 function in Linksys E8450 Wi-Fi routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the sub422eb8 function in Linksys E8450 Wi-Fi routers’ microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the strncpy parameter. Exploiting this vulnerability allows an attacker to execute...

9CVSS6AI score0.00665EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.1 views

The vulnerability of the Microsoft Update Catalog’s update website, related to deserialization mechanism flaws, allows attackers to escalate their privileges.

The vulnerability in the Microsoft Update Catalog’s update website is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

9.3CVSS7.8AI score0.01299EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.3 views

The vulnerability of the IBM DevOps Velocity lifecycle management platform (formerly known as IBM UrbanCode Velocity) relates to the use of cryptographic algorithms that contain defects, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the IBM DevOps Velocity formerly IBM UrbanCode Velocity lifecycle management platform is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to...

5.9CVSS5.5AI score0.00311EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.4 views

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, allows a hacker to trigger a service failure.

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause...

7.8CVSS5.4AI score0.00605EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.3 views

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system allows a hacker to gain unauthorized access for reading, modifying, and deleting data, or to cause service failures.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access for reading, modifyin...

7.5CVSS6.7AI score0.0043EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.2 views

The vulnerability of the Microsoft Office software package and the Microsoft Outlook email client arises from incorrect restrictions on file names and other resources, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office software and the Microsoft Outlook email client is related to incorrect restrictions on file names and other resources. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00732EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.2 views

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, allows a attacker to execute a “slowloris” type attack.

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, is related to unlimited resource distribution. Exploiting this vulnerability can allow a malicious actor to execute a...

7.8CVSS5.5AI score0.00721EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.4 views

The vulnerability in Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise is related to the use of an untrusted pointer. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

7.8CVSS7.8AI score0.00755EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.4 views

The vulnerability of the Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system’s Telephony Service is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.01128EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.4 views

The vulnerability of the Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system’s Telephony Service is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.01067EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.2 views

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.6AI score0.01177EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.3 views

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.7AI score0.00928EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.3 views

The vulnerability of the Windows operating system’s Telephony Service allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system’s Telephony Service is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.01067EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.2 views

Vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: Security: Privileges of the Oracle MySQL Server database management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker to cause service interruptions...

4.9CVSS6.6AI score0.00793EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.1 views

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.3AI score0.01185EPSS
Exploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.1 views

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to deficiencies in the authentication process due to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.8CVSS6.4AI score0.00878EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.3 views

Vulnerability of the Server component: The Oracle MySQL Server database management system’s DDL functions allow attackers to cause service interruptions.

Vulnerability of the Server component: The DDL system for managing databases, Oracle MySQL Server, has a vulnerability related to unlimited resource allocation. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

6.8CVSS6.6AI score0.00944EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.2 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deserialization mechanism flaws, which allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

7.8CVSS7.8AI score0.01565EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.3 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00917EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.3 views

The vulnerability of the trusted execution environment of the Virtualization-Based Security (VBS) Enclave in Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the trusted execution environment for the Virtualization-Based Security VBS Enclave in Microsoft Windows operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.9AI score0.00465EPSS
Exploits0References2
Total number of security vulnerabilities74701