Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.1 views

The vulnerability of the veth_xmit() function in the drivers/net/veth.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the vethxmit function in the drivers/net/veth.c module of the Linux kernel is related to improper error handling. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.2AI score0.00008EPSS
Exploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.3 views

The vulnerability of the cachefiles_set_volume_xattr() function in the fs/cachefiles/namei.c module of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the cachefilessetvolumexattr function in the fs/cachefiles/namei.c module of the Linux kernel is related to a memory overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00019EPSS
Exploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.2 views

The vulnerability of the formDhcpv6s interface in the BOA microprogramming software of TOTOLINK A3002R routers allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the formDhcpv6s interface in the boa microprogramming software of TOTOLINK A3002R routers is related to buffer overflow during the processing of the addrPoolStart parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of th...

5.4CVSS5.8AI score0.00185EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.1 views

The vulnerability of the smb2_sess_setup function in the fs/smb/server/smb2pdu.c module of the ksmbd component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smb2sesssetup function in the fs/smb/server/smb2pdu.c module of the ksmbd component in the Linux operating system lies in the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

10CVSS6.9AI score0.00058EPSS
Exploits2References18Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.2 views

The vulnerability of the Service Account Audit Data component of the Windows Active Directory (AD) management and reporting software Zoho ManageEngine ADAudit Plus allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the “Service Account Audit Data” component of the Windows Active Directory AD management and reporting software Zoho ManageEngine ADAudit Plus is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker,...

8.7CVSS5.6AI score0.05251EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.1 views

The vulnerability of the geneve_xmit_skb() function in the drivers/net/geneve.c module of the network device support driver for Linux kernel allows a hacker to cause a service failure.

The vulnerability of the genevexmitskb function in the drivers/net/geneve.c module of the Linux kernel’s network device support driver is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause service failures...

5.5CVSS6.5AI score0.00007EPSS
Exploits0References15Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.2 views

The vulnerability in the script/cgi-bin/adm.cgi of the Wavlink WL-WN579A3 router’s microprogramming system, which allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi-bin/adm.cgi file in the microprogramming software for Wavlink WL-WN579A3 is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary command...

10CVSS5.9AI score0.14457EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.2 views

The vulnerability of the cachefiles_set_volume_xattr() function in the fs/cachefiles/xattr.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cachefilessetvolumexattr function in the fs/cachefiles/xattr.c module of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7AI score0.00018EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.1 views

The vulnerability of the btrfs_get_blocks_direct_write() function in the file system of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the btrfsgetblocksdirectwrite function in the file system of the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS5.8AI score0.00094EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.3 views

The vulnerability of the SATA_DWC_QCMD_MAX() function in the Linux kernel driver/ata/sata_dwc_460ex.c file allows a hacker to cause a service failure.

The vulnerability of the SATADWCQCMDMAX function in the Linux kernel’s drivers/ata/satadwc460ex.c file is related to read errors outside of the allowed range. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.8CVSS6.5AI score0.00019EPSS
Exploits0References13Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.1 views

The vulnerabilities of the functions gic_dist_base() and gic_do_wait_for_rwp() in the Linux operating system allow a hacker to trigger a service failure.

The vulnerabilities of the functions gicdistbase and gicdowaitforrwp in the Linux operating system are related to resource management errors. Exploiting these vulnerabilities can allow an attacker to cause service failures...

5.5CVSS6.5AI score0.00009EPSS
Exploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.2 views

The vulnerability in the JavaScript script handlers of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of JavaScript script handlers in Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the issue of writing beyond the buffer boundaries in memory during the processing of Promise objects. Exploiting this vulnerability allows an attacker to execute arbitrary cod...

10CVSS8.5AI score0.00994EPSS
Exploits1References21Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability of the HttpServletRequest.getParameter() function in the centralized multimedia content management system MagicINFO 9 allows a hacker to execute arbitrary code.

The vulnerability of the HttpServletRequest.getParameter function in the MagicINFO 9 centralized multimedia content management system is related to the improper creation of a file system path by combining a permanent directory, a temporary marker, and the fileName parameter. Exploiting this...

9CVSS8.5AI score0.7443EPSS
Exploits3References9Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of the configuration @EnableMethodSecurity(mode=ASPECTJ) or spring-security-aspects in the Java framework for securing Spring-based industrial applications allows attackers to bypass the authentication process.

The vulnerability of the @EnableMethodSecurity'mode=ASPECTJ configuration or the spring-security-aspects Java framework for securing Spring-based industrial applications is related to a flaw in the data protection mechanism. Exploiting this vulnerability could allow an attacker to bypass...

9.4CVSS7.1AI score0.00351EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the web_acl_ipv4BasedAceAdd() function in PLANET Technology’s microprogrammed switching software allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the webaclipv4BasedAceAdd function in PLANET Technology’s microprogrammed switching software is related to buffer overflows in the stack when processing the ipv4Aclkey parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integri...

6.5CVSS5.7AI score0.00282EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

Vulnerability of the VS6EditData!CDataRomErrorCheck::MacroCommandCheck() function in the HMI configuration software for Monitouch V-SFT: This vulnerability allows an attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the VS6EditData!CDataRomErrorCheck::MacroCommandCheck function in the HMI configuration software for Monitouch V-SFT lies in the possibility of the operation exceeding the buffer limits in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...

7.8CVSS7.7AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the VS6File!CTxSubFile::get_ProgramFile_name() function in the HMI configuration software for Monitouch V-SFT allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause service failure.

The vulnerability of the VS6File!CTxSubFile::getProgramFilename function in the HMI configuration software for Monitouch V-SFT relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

7.8CVSS7.8AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the VS6MemInIF.dll!set_plc_type_default() function in the HMI configuration software for Monitouch V-SFT allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause service failure.

The vulnerability of the VS6MemInIF.dll!setplctypedefault function in the HMI configuration software for Monitouch V-SFT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

7.8CVSS7.8AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.4 views

The vulnerability of the DataHandler class in the TYPO3 content management system allows attackers to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of the DataHandler class in the TYPO3 content management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and gain unauthorized access to protected information...

9CVSS5.4AI score0.00316EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of the PCMan FTP Server relates to the occurrence of operations beyond the buffer boundaries in memory. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FTP server PMan FTP Server relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.5CVSS7.6AI score0.00479EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.4 views

The vulnerability of the Quiz Maker plugin of the WordPress content management system, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Quiz Maker plugin of the WordPress content management system is related to the lack of protection for the SQL query structure when processing the id parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

7.8CVSS8.2AI score0.00166EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the aysavegoogle_credentials() function in the Quiz Maker plugin of the WordPress content management system allows a hacker to gain unauthorized access to protected information and perform cross-site scripting attacks.

The vulnerability of the aysavegooglecredentials function in the Quiz Maker plugin of the WordPress content management system is related to deficiencies in the authentication process when processing the clientid parameter. Exploiting this vulnerability could allow an attacker, operating remotely,...

7.2CVSS7.6AI score0.00236EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability of the VBI libzvbi library’s capture and decoding function, related to a numerical overflow in the bi_strndup_iconv_ucs2() function, allows attackers to trigger a service denial.

The vulnerability of the VBI libzvbi library’s capture and decoding function is related to a numerical overflow in the bistrndupiconvucs2 function. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

5.3CVSS6.6AI score0.00178EPSS
Exploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the VBI libzvbi library’s capture and decoding function is related to a numerical overflow in the _vbi_strndup_iconv() function. This allows an attacker to cause a service failure.

The vulnerability of the VBI libzvbi library’s capture and decoding functions is related to a numerical overflow in the vbistrndupiconv function. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

5CVSS6.4AI score0.0009EPSS
Exploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the VBI capture and decoding library libzvbi, related to integer overflow in the vbi_capture_sim_load_caption() function, allows attackers to cause a service failure.

The vulnerability of the VBI capture and decoding library, libzvbi, is related to a numerical overflow in the vbicapturesimloadcaption function. Exploiting this vulnerability can allow an attacker to cause a service failure...

7.5CVSS7.2AI score0.00075EPSS
Exploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability of the Backup Plus (ns_backup) extension of the TYPO3 content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Backup Plus nsbackup extension of the TYPO3 content management system is related to errors in the access control for saved backup files and configurations. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

8.6CVSS5.5AI score0.00295EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of the webACLBindEdit_post() function in PLANET Technology’s microcontroller software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webACLBindEditPost function in PLANET Technology’s microprogramming devices is related to buffer overflows in the stack during the processing of the bindEditMACName parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

10CVSS5.7AI score0.00448EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the web_rmon_alarm_post_rmon_alarm() function in PLANET Technology’s microcontroller software allows a intruder to compromise the confidentiality and integrity of the protected information.

The vulnerability of the webrmonalarmpostrmonalarm function in PLANET Technology’s microcontroller software is related to buffer overflows in the stack when processing the ownekey parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of t...

6.5CVSS5.7AI score0.00282EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the web_radiusSrv_dftParam_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webRadiusSrvdftParampost function in the microprogramming software for PLANET Technology is related to buffer overflows in the stack during the processing of the radDftParamKey parameter. Exploiting this vulnerability could allow an attacker to compromise the...

10CVSS5.8AI score0.00448EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability of the web_tool_upgradeManager_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webtoolupgradeManagerpost function in PLANET Technology’s microcontroller software is related to buffer overflow during the processing of the bytftpsrvip parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

10CVSS5.8AI score0.00448EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

Vulnerability of the VS6EditData.dll function!CWinFontInf::WinFontMsgCheck() of the HMI configuration software for Monitouch V-SFT interfaces. This vulnerability allows an attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the VS6EditData.dll function!CWinFontInf::WinFontMsgCheck in the HMI configuration software for Monitouch V-SFT is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information, execu...

7.8CVSS7.5AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

Vulnerability of the VS6EditData!CDrawSLine::GetRectArea() function of the HMI configuration software for Monitouch V-SFT: This vulnerability allows an attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the VS6EditData!CDrawSLine::GetRectArea function of the HMI configuration software for Monitouch V-SFT is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

7.8CVSS7.7AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

Vulnerability of the VS6EditData!CGamenDataRom::set_mr400_strc() function in the programming tool for configuring HMI interfaces of Monitouch V-SFT: This allows an attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the VS6EditData!CGamenDataRom::setmr400strc function in the HMI configuration software for Monitouch V-SFT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

7.8CVSS7.8AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the MagicINFO 9 centralized multimedia content management system lies in the improper restriction on the path name to the restricted catalog. This allows a malicious actor to gain access and add arbitrary files.

The vulnerability of the MagicINFO 9 multi-media content centralized management system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain access and add arbitrary files...

10CVSS8.2AI score0.42603EPSS
Exploits4References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of the webExcptypemanFilter function in the Tenda FH451 router software allows a hacker to execute arbitrary code.

The vulnerability of the webExcptypemanFilter function in the Tenda FH451 router software lies in the reading of data beyond the buffer boundaries in memory during the processing of the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a special...

9CVSS8.3AI score0.01176EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the iommufdHWPT_nested_alloc() function in the Linux operating system’s IOMMU kernel driver allows a hacker to cause a service failure.

The vulnerability of the iommufdHWPTnestedalloc function in the Linux operating system’s IOMMU support driver is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00019EPSS
Exploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of software for managing traffic in hybrid and multi-cloud environments, such as VMware Avi Load Balancer, stems from insufficient measures taken to protect the SQL query structure. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the software for managing traffic in hybrid and multi-cloud environments of VMware Avi Load Balancer is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized acce...

6.8CVSS5.6AI score0.003EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability of the IBM Security Verify Bridge software lies in the modification of assumed immutable data, allowing attackers to write arbitrary files or trigger service failures.

The vulnerability of the IBM Security Verify Bridge software is related to changes in the assumed immutable data. Exploiting this vulnerability could allow an attacker to write arbitrary files or cause service failures...

6.2CVSS5.6AI score0.00036EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of the SSH protocol implementation in D-Link DWR-M972V router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the SSH protocol implementation in D-Link DWR-M972V router microprogramming devices lies in the possibility of resetting settings to their factory defaults due to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6AI score0.42064EPSS
Exploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability in the module drivers/gpu/drm/v3d/v3d_submit.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/gpu/drm/v3d/v3dsubmit.c kernel module of the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS6.5AI score0.00017EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability in the command-line utility BusyBox, related to the release of an incorrect pointer, allows a hacker to execute arbitrary code.

The vulnerability of the BusyBox command-line utility set is related to the release of an incorrect pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.5AI score0.02855EPSS
Exploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability in the command-line utility BusyBox, related to improper input validation, allows a hacker to trigger a service failure.

The vulnerability of the BusyBox command-line utility set is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.9AI score0.00061EPSS
Exploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The vulnerability of the femanager extension of the TYPO3 content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the femanager extension of the TYPO3 content management system is related to the use of insecure direct links to objects. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.4AI score0.0025EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability of the Backup Plus (ns_backup) extension of the TYPO3 content management system allows a hacker to execute arbitrary commands.

The vulnerability of the Backup Plus nsbackup extension of the TYPO3 content management system exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

5.3CVSS5.9AI score0.01245EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of the Front End User Registration (sr_feuser_register) extension of the TYPO3 content management system allows a hacker to execute arbitrary code.

The vulnerability of the Front End User Registration srfeuserregister extension of the TYPO3 content management system is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6AI score0.02182EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of the telnetd service in D-Link router microprogramming systems such as DIR-605L and DIR-816L allows a hacker to execute arbitrary code.

The vulnerability of the telnetd service in D-Link router microprogramming systems like DIR-605L and DIR-816L lies in the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by using the built-in login credentials...

7.5CVSS6AI score0.00378EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.3 views

The vulnerability of the VS6MemInIF!set_temp_typedefault() function in the HMI configuration software for Monitouch V-SFT allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause service failure.

The vulnerability of the VS6MemInIF!settemptypedefault function in the HMI configuration software for Monitouch V-SFT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information,...

7.8CVSS7.8AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.4 views

The vulnerability of the VS6ComFile!MakeItemGlidZahyou() function in the HMI configuration software for Monitouch V-SFT allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the VS6ComFile!MakeItemGlidZahyou function in the HMI configuration software for Monitouch V-SFT lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

7.8CVSS7.8AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.1 views

The vulnerability of the VS6EditData!Conv_Macro_Data() function of the HMI configuration software for Monitouch V-SFT allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause service failure.

The vulnerability of the VS6EditData!ConvMacroData function of the HMI configuration software for Monitouch V-SFT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execu...

7.8CVSS7.8AI score0.00129EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/26 12:0 a.m.2 views

The VS6EditData!VS4_SaveEnvFile() function of the programming tool for configuring HMI interfaces of Monitouch V-SFT is vulnerable. This vulnerability allows a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the VS6EditData!VS4SaveEnvFile function of the HMI configuration software for Monitouch V-SFT lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

7.8CVSS7.7AI score0.00129EPSS
Exploits0References3Affected Software1
Total number of security vulnerabilities74701