Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.12 views

The vulnerability of the multi-media library Ffmpeg, related to reading data beyond the buffer boundary in memory, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the FFmpeg multimedia library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

4.1CVSS6.5AI score0.00165EPSS
Exploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.3 views

The vulnerability of the Kubernetes Helm package manager, related to buffer overflows in the stack, allows a attacker to cause a service failure.

The vulnerability of the package manager for Kubernetes Helm is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to trigger a service failure...

7.8CVSS6.9AI score0.00012EPSS
Exploits0References6Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the package manager for Kubernetes Helm, related to the lack of control over user-input data, allows a malicious actor to trigger a service failure.

The vulnerability of the package manager for Kubernetes Helm is related to the lack of control over data entered by users. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

7.8CVSS6.5AI score0.00022EPSS
Exploits0References6Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the kmem_cache_alloc() function in the mm/mempolicy.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kmemcachealloc function in the mm/mempolicy.c module of the Linux operating system’s kernel is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00007EPSS
Exploits0References13Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerabilities of the functions nla_alloc_flow_actions() and ovs_nla_free_set_action() in the net_openvswitch/flow_netlink.c module of the Linux kernel allow a attacker to cause a service failure.

The vulnerabilities of the functions nlaallocflowactions and ovsnlafreesetaction in the netopenvswitch/flownetlink.c module of the Linux kernel are related to memory leaks. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.0001EPSS
Exploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the web_aaa_loginAuthlistEdit() function in PLANET Technology’s microcontroller software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webaaaloginAuthlistEdit function in PLANET Technology’s microcontroller software is related to buffer overflow during the processing of the theauthName parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

10CVSS5.8AI score0.00448EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the LogPager.Php file of the MediaWiki software allows unauthorized access to protected information by attackers.

The vulnerability of the RevertAction.Php and ApiFileRevert.Php files, which are part of the MediaWiki software used for implementing a wiki-based environment, is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker who operates remotely to...

5CVSS5.5AI score0.00418EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software lies in the improper limitation of the path name in the restricted access catalog, which allows attackers to restore backup copies within the system.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to incorrect restrictions on the name of the path to the restricted-access catalog. Exploiting this vulnerability could allow an attacker to restore backup copies within the system...

4.6CVSS5.5AI score0.00129EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the SINEMA Remote Connect Edge Client microprogramming software for industrial switches from Siemens, model Scalance LPE9403, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SINEMA Remote Connect Edge Client microprogramming software for Siemens Scalance LPE9403 industrial switches in remote connection mode is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability can allow an attacker to...

7.8CVSS5.9AI score0.00069EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the j1939_session_new() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the j1939sessionnew function in the Linux operating system is related to a countable amount of significance loss. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00008EPSS
Exploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.3 views

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to buffer overflow in the stack. This allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure or execute arbitrary code...

6.7CVSS6.2AI score0.00051EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the ip6_negative_advice() function in the net/ipv6/route.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the ip6negativeadvice function in the net/ipv6/route.c module of the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00008EPSS
Exploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to the insufficient use of the assert function. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00036EPSS
Exploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.7 views

The vulnerability of the sock_put() function in the net/ipv4/tcp_bpf.c module of the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the sockput function in the net/ipv4/tcpbpf.c module of the Linux kernel relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS6.5AI score0.00022EPSS
Exploits0References17Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the dr_domain_add_vport_cap() function in the drivers/net/ethernet/mellanox/mlx5/core/steering/sws/dr_domain.c file of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the drdomainaddvportcap function in the drivers/net/ethernet/mellanox/mlx5/core/steering/sws/drdomain.c file of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00017EPSS
Exploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the can_set_termination() function in the drivers/net/can/dev/dev.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the cansettermination function in the drivers/net/can/dev/dev.c module of the Linux kernel is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00028EPSS
Exploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.3 views

The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Mojo library for Google Chrome and Microsoft Edge browsers stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS8.5AI score0.00033EPSS
Exploits1References14Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.5 views

The vulnerability of the reNgine software tool for automated web application reconnaissance, related to insufficient protection of operational data, allows a perpetrator to disclose protected information.

The vulnerability of the reNgine software tool for automated web application reconnaissance is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

6.8CVSS5.4AI score0.00543EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability in the software for automatic checking of updates for the Microsoft Edge Update browser lies in the improper handling of symbolic links before accessing the file. This allows a malicious actor to elevate their privileges to a system level.

The vulnerability in the software for automatic checking of updates for the Microsoft Edge Update browser is related to an incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability could allow a malicious individual to elevate their privileges to a system lev...

8.8CVSS5.4AI score0.01158EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the fact that data is written beyond the buffer limit in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the writing beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.00277EPSS
Exploits0References21Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability in the fs/btrfs/extent_io.h module of the Linux operating system’s kernel allows a hacker to increase their privileges.

The vulnerability in the fs/btrfs/extentio.h module of the Linux operating system’s file system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

5.5CVSS6.8AI score0.00008EPSS
Exploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability in the avcodec/speexdec.c module of the Ffmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability in the avcodec/speexdec.c module of the FFmpeg multimedia library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

6.2CVSS6AI score0.0004EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the qede_build_skb() function in the drivers/net/ethernet/qlogic/qede/qede_fp.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qedebuildskb function in the drivers/net/ethernet/qlogic/qede/qedefp.c module of the Linux kernel is related to incorrect error handling. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00009EPSS
Exploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.3 views

The vulnerability of the spin_lock_irqsave() function in the drivers/infiniband/sw/rdmavt/qp.c module of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the spinlockirqsave function in the drivers/infiniband/sw/rdmavt/qp.c module of the Linux kernel is related to improper locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00007EPSS
Exploits0References13Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the secondary_start_kernel() function in the arch/arm64/kernel/smp.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the secondarystartkernel function in the arch/arm64/kernel/smp.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00043EPSS
Exploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the `opap_iommu_probe_device()` function in the drivers/iommu/omap-iommu.c kernel module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the opapiommuprobedevice function in the drivers/iommu/omap-iommu.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00036EPSS
Exploits0References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the vbi_strndup_iconv_ucs2() function in the VBI capture and decoding library libzvbi allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the vbistrndupiconvucs2 function in the VBI capture and decoding library libzvbi is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

5.3CVSS6.6AI score0.00277EPSS
Exploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the RevertAction.Php and ApiFileRevert.Php files, which are part of the MediaWiki software used for implementing hypertext environments, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the RevertAction.Php and ApiFileRevert.Php files, which are part of the MediaWiki software used for implementing hypertext environments, is related to improper saving of permissions. Exploiting this vulnerability could allow an attacker who operates remotely to gain...

4CVSS5.5AI score0.00245EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the Poppler library for displaying PDF files, related to reading beyond the buffer boundary in the JBIG2Bitmap::combine() function, allows a hacker to cause a service failure.

The vulnerability of the Poppler library for displaying PDF files relates to the reading beyond the buffer boundary in the JBIG2Bitmap::combine function. Exploiting this vulnerability can allow an attacker to cause a service failure...

4CVSS6.8AI score0.00065EPSS
Exploits1References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.3 views

The vulnerability of the sysfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sysfs component in the Linux operating system is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00027EPSS
Exploits0References15Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the fill_frame_info() function in the net/hsr/hsr_forward.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the fillframeinfo function in the net/hsr/hsrforward.c module of the Linux operating system is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00007EPSS
Exploits0References16Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.3 views

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software, related to the transmission of secret information in the form of open text, allows a intruder to gain unauthorized access to the protected information.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software relates to the transmission of secret information in the form of open text. Exploiting this vulnerability can allow an intruder to gain unauthorized access to the protected information...

4.6CVSS5.4AI score0.00047EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to buffer overflow in the stack. This allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to trigger a service failure or execute arbitrary code...

6.7CVSS6.2AI score0.00051EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the dcpd service in the microprogramming software of Siemens Scalance LPE9403 allows a hacker to trigger a maintenance failure.

The vulnerability of the dcpd service in Siemens Scalance LPE9403 microprogramming software is related to errors in pointer assignment. Exploiting this vulnerability can allow a malicious actor to trigger a service failure by sending specially crafted malware packages...

4.3CVSS5.5AI score0.0016EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

Vulnerabilities in functions imx8mq_soc_revision_from_atf(), imx8mq_soc_revision(), imx8mm Soc UID(), kasprintf(), imx8_soc_init(), and kfree() of the drivers/soc/imx/soc-imx8m.c module of the Linux kernel, which allows an attacker to cause a system failure.

The vulnerabilities of the functions imx8mqsocrevisionfromatf, imx8mqsocrevision, imx8mm Soc UID, kasprintf, imx8socinit, and kfree in the soc/imx/soc-imx8m.c module of the Linux kernel are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause syst...

5.5CVSS6.7AI score0.00025EPSS
Exploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the mdelay() function in the Linux operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the mdelay function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

5.5CVSS6.5AI score0.00006EPSS
Exploits0References18Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the `ocfs2_get_init inode()` function in the fs/ocfs2/namei.c module of the OCFS2 cluster file system in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ocfs2getinit inode function in the fs/ocfs2/namei.c module of the OCFS2 cluster file system in the Linux kernel is related to exception handling flaws. Exploiting this vulnerability could allow an attacker to cause service failures...

7.8CVSS6.7AI score0.00014EPSS
Exploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the sctp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sctp component in the Linux operating system’s kernel is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00029EPSS
Exploits0References15Affected Software9
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the `php_request_shutdown` function in the PHP programming language allows a hacker to execute arbitrary code.

The vulnerability of the phprequestshutdown function in the PHP programming language lies in the possibility of accessing memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.1CVSS7.9AI score0.00569EPSS
Exploits1References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the mm/mremap.c module in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mm/mremap.c module in the Linux operating system is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.9AI score0.00024EPSS
Exploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the __kmap_local_sched_out() and __kmap_local_sched_in() functions in the mm/highmem.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kmaplocalschedout and kmaplocalschedin functions in the mm/highmem.c module of the Linux operating system’s kernel is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.0002EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the demultiplexer for AVI files in the libavformat library of the Ffmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the demultiplexer for AVI files in the libavformat library of the FFmpeg multimedia library is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.2CVSS6.7AI score0.00037EPSS
Exploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.4 views

The vulnerabilities of the functions dpaa2_ptp_probe() and fsl_mc_free_irqs() in the module drivers/net/ethernet/freescale/dpaa2/dpaa2-ptp.c of the Linux kernel allow a hacker to cause a service failure.

The vulnerabilities of the functions dpaa2ptpprobe and fslmcfreeirqs in the module drivers/net/ethernet/freescale/dpaa2/dpaa2-ptp.c of the Linux kernel are related to a memory leak. Exploiting these vulnerabilities could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00015EPSS
Exploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the h_subpelilters_outer function in the multimedia library Ffmpeg allows a intruder to gain unauthorized access to protected information.

The vulnerability of the hsubpeliltersouter function in the FFmpeg multimedia library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

9.4CVSS7AI score0.00176EPSS
Exploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability of the vbi_search_new() function in the VBI capture and decoding library libzvbi allows a perpetrator to execute arbitrary code.

The vulnerability of the vbisearchnew function in the VBI capture and decoding library, libzvbi, is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS7.7AI score0.00075EPSS
Exploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the software for implementing the hypertext environment MediaWiki allows a hacker to carry out a cross-site scripting attack.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to carry out a cross-site scripting attack...

5.3CVSS5.2AI score0.00307EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.5 views

The vulnerability of the tar.vim plugin for the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the tar.vim plugin for the Vim text editor is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially created tar files...

7.1CVSS6.6AI score0.02083EPSS
Exploits0References8Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.1 views

The vulnerability in the HTMLMultiSelectField.Php file of the MediaWiki software environment allows a hacker to execute cross-site scripting attacks.

The vulnerability of the HTMLMultiSelectField.Php file, a software component used for implementing the hypertext environment in MediaWiki, is related to the lack of protective measures taken for the structure of the web page. Exploiting this vulnerability could allow an attacker to carry out a...

5.3CVSS5.1AI score0.00357EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of the include() function in Twig template rendering handlers allows attackers to circumvent existing security restrictions.

The vulnerability of the include function in Twig template rendering engines is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...

8.6CVSS7.7AI score0.00144EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.2 views

The vulnerability of Poppler’s PDF file rendering library, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability of the Poppler library for displaying PDF files is related to a numerical overflow in the PSStack::roll function. Exploiting this vulnerability could allow an attacker to cause a service failure...

4CVSS6.6AI score0.00071EPSS
Exploits1References13Affected Software8
Total number of security vulnerabilities74701