Lucene search
+L
Bdu FstecRecent

95883 matches found

BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.9 views

The vulnerability of the axios library, related to uncontrolled resource consumption, allows attackers to compromise the accessibility of protected information.

The vulnerability of the axios library is related to an uncontrolled resource consumption when processing the maxBodyLength parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of the protected information...

5.8CVSS5.5AI score0.00429EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.83 views

The vulnerability of Google Chrome’s FileSystem component, which allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s FileSystem component is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.4CVSS5.7AI score0.00255EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.10 views

The vulnerability of the Azure Active Directory identity management and protection platform, related to the execution of a loop with an unavailable exit condition, allows a perpetrator to trigger a service failure.

The vulnerability of the Azure Active Directory identity management and protection platform is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

7.8CVSS5.7AI score0.01174EPSS
SaveExploits0References2Affected Software8
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.11 views

The vulnerability of Microsoft Word, a component of the Microsoft Office 365 suite of programs, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS5.9AI score0.00571EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.83 views

The vulnerability of Google Chrome’s user interface allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s user interface is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

5.4CVSS6.3AI score0.00205EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.21 views

The vulnerability of the shouldBypassProxy.js module from the axios library allows a hacker to disclose protected information.

The vulnerability of the shouldBypassProxy.js library from axios is related to incorrect validation of data entered by users. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.8CVSS5.4AI score0.00331EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.88 views

The vulnerability of Google Chrome’s SwiftShader library allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s SwiftShader library is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5CVSS6.3AI score0.00251EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.10 views

The vulnerability of the Font component in Google Chrome’s browser allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Font component is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.00311EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.25 views

The vulnerability of the JIT-compiler of Mozilla Firefox allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JIT-compiler of Mozilla Firefox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8.3AI score0.00331EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.6 views

Vulnerability of .NET and Microsoft .NET Framework software frameworks, related to insufficient data authenticity verification, allows attackers to bypass existing security mechanisms.

Vulnerabilities of .NET software platforms and the Microsoft .NET Framework are related to insufficient validation of data authenticity. Exploitation of these vulnerabilities can allow attackers to bypass existing security mechanisms remotely...

10CVSS6AI score0.00216EPSS
SaveExploits0References3Affected Software13
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.10 views

The vulnerability of the GDI component in Windows operating systems, which allows attackers to exploit their privileges

The vulnerability of the GDI component in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS5.8AI score0.00333EPSS
SaveExploits0References2Affected Software22
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.13 views

The vulnerability of the dedoc/scramble package for the Laravel PHP framework allows a hacker to execute arbitrary code.

The vulnerability of the dedoc/scramble package for the Laravel PHP framework is related to incorrect code generation practices. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.7CVSS6.1AI score0.0586EPSS
SaveExploits3References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.9 views

The vulnerability of Google Chrome’s user interface allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s user interface relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.9AI score0.00176EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.10 views

The vulnerability of the axios library lies in the uncontrolled modification of object prototype attributes, which allows attackers to compromise the integrity of the protected information.

The vulnerability of the axios library is related to uncontrolled changes in the attributes of the object’s prototype. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

3.7CVSS5.5AI score0.00354EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.41 views

The vulnerability of the `gix_worktree_state::checkout()` function in the Rust library for working with Git repositories like gitoxide, allows a malicious actor to execute arbitrary code.

The vulnerability of the gixworktreestate::checkout function in the Rust library for working with Git repositories like gitoxide is related to an incorrect definition of symbolic references before accessing files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary co...

5.4CVSS6AI score
SaveExploits0References3Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.8 views

Vulnerability of the JavaScript component: Mozilla Firefox’s WebAssembly browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

7.6CVSS7.2AI score0.00498EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.10 views

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS5.5AI score0.00279EPSS
SaveExploits0References2Affected Software18
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.83 views

The vulnerability of Google Chrome’s GPU component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s GPU component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

3.1CVSS5.9AI score0.00158EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.87 views

The vulnerability of the SiteIsolation component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s SiteIsolation component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5CVSS5.9AI score0.00196EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/08/03 12:00 a.m.83 views

The vulnerability of Google Chrome’s GPU component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s GPU component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

5.4CVSS5.9AI score0.00195EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.10 views

The vulnerability of the Windows App Store application store for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows App Store application store for Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

8.1CVSS5.5AI score0.00542EPSS
SaveExploits0References2Affected Software14
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.10 views

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00571EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.12 views

The vulnerability of Google Chrome’s FileSystem component allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s FileSystem component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.9AI score0.00207EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.12 views

The vulnerability of the ANGLE library in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome browsers is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.3CVSS6.3AI score0.00229EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.10 views

The vulnerability of the Unbound DNS server, related to insufficient validation of input data and improper implementation of functions, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS5.3AI score0.00583EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.12 views

The vulnerability of the Pillow image processing library, related to the execution of a loop with an unreachable exit condition, allows a intruder to cause a service failure.

The vulnerability of the Pillow image processing library lies in the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

4CVSS5.7AI score0.00126EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.9 views

The vulnerability of the s:stepmatch() function in the Vim text editor, which allows a hacker to execute arbitrary code.

The vulnerability of the s:stepmatch function in the Vim text editor is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

6.5CVSS6AI score0.00135EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.10 views

The vulnerability of the Unbound DNS server, related to the computational complexity, allows attackers to cause service failures.

The vulnerability of the Unbound DNS server is related to the computational complexity of the algorithms involved. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

5.3CVSS5.4AI score0.00339EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.9 views

The vulnerability of the Python library for working with Git Dulwich repositories lies in the incorrect pathname limitation for the restricted access directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Python library for working with Git Dulwich repositories is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...

3.3CVSS5.5AI score0.00139EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.19 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

5.5CVSS5.5AI score0.00583EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.14 views

The vulnerability of Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise arises from the operation beyond buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00571EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.8 views

The vulnerability of the FORBID_TAGS() function in the JavaScript library for secure cleaning and protection of HTML code by DOMPurify allows a attacker to execute arbitrary code.

The vulnerability of the FORBIDTAGS function in the JavaScript library for secure cleaning and protection of HTML code by DOMPurify is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

6.4CVSS6AI score0.00313EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.13 views

The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility allows a intruder to execute arbitrary code.

The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to generate arbitrary codes...

9.4CVSS5.8AI score0.0157EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.8 views

The vulnerability of the lz4-java data compression library, related to the disclosure of information during data transmission, allows attackers to disclose protected information.

The vulnerability of the lz4-java data compression library is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

7.8CVSS5.4AI score0.00605EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.10 views

The vulnerability of the YAML syntax analysis and parsing library js-yaml lies in the uncontrolled modification of object prototype attributes, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the YAML parsing library js-yaml is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

5.3CVSS5.5AI score0.00408EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.8 views

The vulnerability of the brace-expansion library in the Node.js software platform, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability of the brace-expansion library on the Node.js software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

7.8CVSS5.5AI score0.0043EPSS
SaveExploits0References10Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.11 views

The vulnerability of the instrument-based library for generating unique UUIDs lies in the possibility of writing beyond the buffer boundaries, allowing an attacker to cause memory corruption.

The vulnerability of the instrument-based library for generating unique UUIDs is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause memory corruption...

7.8CVSS5.6AI score0.0035EPSS
SaveExploits1References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.11 views

The vulnerability of the usbtmc_release() function in the drivers/usb/class/usbtmc.c module of the Linux operating system’s USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the usbtmcrelease function in the drivers/usb/class/usbtmc.c module of the Linux device driver framework is related to the pointer being reclaimed after its expiration. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS5.5AI score0.00126EPSS
SaveExploits0References14Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.13 views

The vulnerability of the zynqmp_efuse_access() function in the drivers/nvmem/zynqmp_nvmem.c file of the NVMEM device driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the zynqmpefuseaccess function in the drivers/nvmem/zynqmpnvmem.c file of the NVMEM device driver in the Linux operating system is related to incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.11 views

The vulnerability in the net/netfilter/nf_conntrack_netlink.c module of the Linux kernel’s netfilter component allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the net/netfilter/nfconntracknetlink.c module of the Linux kernel’s netfilter component is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

7.8CVSS5.5AI score0.00131EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.10 views

The vulnerability of the authentication mechanism of the Vangene deltaFlow electronic document management platform, which allows a hacker to increase their privileges

The vulnerability of the authentication mechanism of the Vangene deltaFlow electronic document management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges...

10CVSS5.5AI score0.0118EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.8 views

The vulnerability of the smc_special_trylock() function in the drivers/net/ethernet/smc91x.c file of the Linux kernel’s Ethernet network adapter driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smcspecialtrylock function in the drivers/net/ethernet/smc91x.c file of the Linux kernel’s Ethernet network adapter driver is related to the violation of context restrictions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7CVSS5.5AI score0.00273EPSS
SaveExploits0References15Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.11 views

The vulnerability of the drm_compat_ioctl() function in the drivers/gpu/drm/drm_ioc32.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmcompatioctl function in the drivers/gpu/drm/drmioc32.c file of the Direct Rendering Infrastructure DRI driver in the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to compromise the...

7CVSS4.5AI score0.00123EPSS
SaveExploits0References14Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.12 views

The vulnerability of GitLab Workhorse’s HTTP request handler on the git-based software platform, which is used for collaborative code development in GitLab CE/EE, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of GitLab Workhorse’s HTTP request handler, a software platform based on git for collaborative code development in GitLab CE/EE, relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to compromise the...

8.5CVSS5.6AI score0.0042EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.11 views

The vulnerability of the libtiff library, related to integer overflow, allows an attacker to cause a service failure.

The vulnerability of the libtiff library is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.8AI score0.00553EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.10 views

The vulnerability of the Unbound DNS server, related to improper blocking of resources, allows a hacker to trigger a service failure.

The vulnerability of the Unbound DNS server is related to improper blocking of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.9CVSS5.5AI score0.00255EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.7 views

The vulnerability of the Pillow image processing library, related to integer overflow, allows an attacker to cause a service failure.

The vulnerability of the Pillow image processing library is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

8.4CVSS5.6AI score0.0015EPSS
SaveExploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.12 views

The vulnerability of the Python library for working with Git repositories in Dulwich, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the Python library for working with Git repositories in Dulwich is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.1CVSS5.5AI score0.00188EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.11 views

The vulnerability of the mechanism for checking OAuth2 scopes in the Gitea repository management system allows a hacker to increase their privileges.

The vulnerability of the mechanism for checking the scopes of OAuth2 tokens in the Gitea Git repository management system is related to access control errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

8.5CVSS5.5AI score0.00551EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/07/31 12:00 a.m.10 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

8.7CVSS5.5AI score0.00946EPSS
SaveExploits0References2Affected Software3
Total number of security vulnerabilities95883