Lucene search
+L
Bdu FstecRecent

92298 matches found

BDU FSTEC
BDU FSTEC
added 5 days ago6 views

The vulnerability of the http_proxy_connect() function in the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the httpproxyconnect function in the RDP client FreeRDP is related to the lack of handling for CRLF sequences in HTTP headers when processing the variable ServerHostname. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

10CVSS5.5AI score0.0038EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 5 days ago7 views

The vulnerability of the “file opening helper” function in the Markdown Preview extension of the Visual Studio Code editor allows a attacker to execute arbitrary code.

The vulnerability of the file opening helper function in the Markdown Preview extension of the Visual Studio Code editor is related to the failure to implement measures to neutralize special elements. Exploiting this vulnerability may allow an attacker operating remotely to execute arbitrary code...

10CVSS5.9AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 5 days ago7 views

The vulnerability of the functions free_reader_states_a() and free_reader_states_w() in the RDP client FreeRDP, which allows a intruder to cause a service failure.

The vulnerability of the freereaderstatesa and freereaderstatesw functions in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow a remote attacker to cause service failure...

7.8CVSS5.5AI score0.00354EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 5 days ago5 views

Vulnerability of the functions update_process_glyph_fragments() and glyph_cache_fragment_put() in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP, allowing a intruder to cause a service failure

The vulnerabilities of the updateprocessglyphfragments and glyphcachefragmentput functions in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP are related to reading beyond the allowed range of memory. Exploiting these vulnerabilities could allow a remote attacker to cause service...

7.8CVSS5.6AI score0.00339EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 5 days ago6 views

Vulnerability of the http_response_recv_body() function in the libfreerdp/core/gateway/http.c file of the RDP client FreeRDP, which allows a hacker to trigger a service failure.

The vulnerability of the httpresponserecvbody function in the libfreerdp/core/gateway/http.c file of the RDP client FreeRDP is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS5.5AI score0.00343EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the Azure Active Directory identity management and protection platform, related to deserialization mechanism flaws, allows attackers to trigger a service failure.

The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS5.6AI score0.01149EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the RDP client FreeRDP, related to buffer overflow in dynamic memory, allows a hacker to trigger a service failure.

The vulnerability of the RDP client FreeRDP is related to overflow in the buffer in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.6CVSS5.8AI score0.00238EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago76 views

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

3.1CVSS5.5AI score0.00186EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 6 days ago4 views

Vulnerability of .NET, Microsoft .NET Framework, and Microsoft Visual Studio software platforms, which allows for unlimited distribution of resources, enabling attackers to cause service failures.

The vulnerabilities of.NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

7.8CVSS5.5AI score0.01029EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the Active Directory Federation Services (ADFS) for Windows operating systems allows a perpetrator to induce a service failure.

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.8CVSS5.8AI score0.0078EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7AI score0.00229EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago7 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7AI score0.0025EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago70 views

The vulnerability of the Downloads component in the Google Chrome browser allows attackers to perform spear-phishing attacks.

The vulnerability of the Downloads component in the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

4.7CVSS5.5AI score0.00134EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Runtime component in Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.8CVSS5.5AI score0.00199EPSS
SaveExploits0References2Affected Software6
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

9CVSS5.7AI score0.00922EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of the quote() function in the shell-quote npm package, which allows a hacker to execute arbitrary code.

The vulnerability of the quote function in the shell-quote npm package is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.1CVSS6AI score0.00848EPSS
SaveExploits1References5Affected Software11
BDU FSTEC
BDU FSTEC
added 6 days ago7 views

The vulnerability of Google Chrome’s Codecs component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Codecs component is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.00301EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago74 views

The vulnerability of Google Chrome’s ViewTransitions component, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the ViewTransitions component in Google Chrome browser is related to the use of an unauthorized intermediate policy file. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

5CVSS5.5AI score0.0018EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago75 views

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to trigger a service failure.

The vulnerability of the Google Chrome browser’s Media component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.4CVSS6AI score0.00189EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of the Downloads component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Downloads component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.0028EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago7 views

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.0028EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago8 views

Vulnerability of .NET, Microsoft .NET Framework, and Microsoft Visual Studio software platforms, which allows for unlimited distribution of resources, enabling attackers to cause service failures.

The vulnerabilities of.NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

7.8CVSS5.5AI score0.00604EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to writing beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.3CVSS8AI score0.00207EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of Google Chrome’s GPU component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s GPU component is related to errors in handling HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.9AI score0.00207EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the axios library, related to uncontrolled resource consumption, allows attackers to compromise the accessibility of protected information.

The vulnerability of the axios library is related to an uncontrolled resource consumption when processing the maxBodyLength parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of the protected information...

5.8CVSS5.5AI score0.00356EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of the fetch library for axios allows attackers to compromise the accessibility of protected information.

The vulnerability of the axios library’s fetch adapter is related to the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

5.8CVSS5.5AI score0.00359EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the axios library lies in the uncontrolled modification of object prototype attributes, which allows attackers to compromise the integrity of the protected information.

The vulnerability of the axios library is related to uncontrolled changes in the attributes of the object’s prototype. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

4CVSS5.5AI score0.00258EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the lib/helpers/toFormData.js module from the axios library allows a hacker to cause a service failure.

The vulnerability of the lib/helpers/toFormData.js module from the axios library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause service failures...

5.3CVSS5.5AI score0.00291EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago78 views

The vulnerability of Google Chrome’s GPU component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s GPU component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

5.4CVSS5.7AI score0.00205EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of Google Chrome’s Codecs component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Codecs component is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

8.3CVSS6.1AI score0.00246EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 6 days ago4 views

The vulnerability of Microsoft Word, a component of the Microsoft Office 365 suite of programs, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.9AI score0.00461EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of Microsoft Word, the Microsoft Office 365 suite of programs, related to numerical truncation errors, allows a perpetrator to disclose protected information.

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.4AI score0.0042EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 6 days ago4 views

The vulnerability affects Markdown preview extensions in enhanced code editors such as Visual Studio Code, Pulsar, and Atom. This allows attackers to execute arbitrary code.

The vulnerability of Markdown extension Preview Enhanced code editors like Visual Studio Code, Pulsar, and Atom is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS6AI score0.0034EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago78 views

The vulnerability of Google Chrome’s FileSystem component, which allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s FileSystem component is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.4CVSS5.7AI score0.00255EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 6 days ago4 views

Vulnerabilities of .NET, Microsoft .NET Framework, and Microsoft Visual Studio software platforms, related to improper code generation management, allow attackers to escalate their privileges.

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to improper code generation management. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

7.8CVSS5.6AI score0.0029EPSS
SaveExploits0References2Affected Software10
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin allows a attacker to execute arbitrary code.

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

8.6CVSS5.9AI score0.00224EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago4 views

The vulnerability of the Azure Active Directory identity management and protection platform, related to the execution of a loop with an unavailable exit condition, allows a perpetrator to trigger a service failure.

The vulnerability of the Azure Active Directory identity management and protection platform is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.8CVSS5.7AI score0.0078EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of Microsoft Word, Microsoft Office products, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...

7.8CVSS5.9AI score0.00371EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 6 days ago4 views

The vulnerability of Microsoft Word, Microsoft Office products, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...

7.8CVSS5.9AI score0.00371EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of the JSON Script Runner component of the cross-platform application for viewing and modifying database data in the DbGate browser allows a perpetrator to execute arbitrary code.

The vulnerability of the JSON Script Runner component in a cross-platform application for browsing and modifying database data in the DbGate browser is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS6AI score0.04339EPSS
SaveExploits3References9Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of the XML component of the Google Chrome browser, allowing a hacker to execute arbitrary code.

The vulnerability of the Google Chrome XML browser component is related to errors in handling http requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.0028EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago77 views

The vulnerability of Google Chrome’s Compositing component allows attackers to gain unauthorized access to protected information.

The vulnerability of the Compositing component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a malicious actor to gain unauthorized access to protected information...

3.1CVSS5.8AI score0.00161EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago4 views

The vulnerability of the formDataToJSON function in the axios library allows a attacker to cause a service failure.

The vulnerability of the formDataToJSON function in the axios library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.3CVSS5.5AI score0.00338EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 6 days ago4 views

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.9AI score0.00207EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago6 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.00306EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago77 views

The vulnerability of the Google Chrome browser’s Navigation function allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Navigation function is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5CVSS5.4AI score0.00187EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago76 views

The vulnerability of Google Chrome’s fullscreen mode allows attackers to carry out spoofing attacks.

The vulnerability of Google Chrome’s fullscreen mode is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

6.4CVSS6AI score0.00184EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.0028EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago5 views

The vulnerability of the Accessibility component in Google Chrome allows a perpetrator to execute arbitrary code.

The vulnerability of the Accessibility component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.6CVSS7.6AI score0.00207EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 6 days ago79 views

The vulnerability of the SiteIsolation component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the SiteIsolation component in Google Chrome relates to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5CVSS5.5AI score0.00196EPSS
SaveExploits0References9Affected Software4
Total number of security vulnerabilities92298