Lucene search
+L
Bdu FstecRecent

95883 matches found

BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.4 views

The vulnerability of Microsoft Fabric’s data management platform, related to the absence of authentication, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Fabric data management platform is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

8.5CVSS6.5AI score0.00427EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.5 views

The vulnerability of Microsoft Discovery Studio’s research environment arises from the improper elimination of special elements in data queries, allowing an intruder to disclose protected information.

The vulnerability of the Microsoft Discovery Studio research environment is related to the improper elimination of special elements in data queries. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...

7.8CVSS6.3AI score0.00666EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.5 views

The vulnerability of the DirectMusic component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the DirectMusic component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.00893EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.5 views

The vulnerability of the Microsoft Windows PDF document processing component on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Windows PDF document processing component on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS7.5AI score0.00996EPSS
SaveExploits0References2Affected Software16
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.6 views

The software’s vulnerability for providing secure remote access to data through the Palo Alto Networks GlobalProtect App allows a perpetrator to execute arbitrary commands.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...

8.8CVSS7.1AI score0.00105EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.4 views

The vulnerability of the EndPoint DLP module of the remote access user protection agent for corporate resources and applications provided by Palo Alto Networks’ Prisma Access Agent allows attackers to bypass existing security mechanisms and expose protected information.

The vulnerability of the EndPoint DLP module of the remote user access agent for corporate resources and applications in Palo Alto Networks Prisma Access Agent is related to a flaw in the data protection mechanism. Exploiting this vulnerability allows attackers to bypass existing security measure...

5.5CVSS6.4AI score0.00105EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.6 views

The vulnerability of the Internal Operations component of the application’s technical maintenance, repair, and major system overhauls in Oracle Complex Maintenance, Repair, and Overhaul allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Internal Operations component of the Oracle Complex Maintenance application regarding technical maintenance, repairs, and major system overhauls is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to...

7.5CVSS6.9AI score0.00311EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.5 views

The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms lies in insufficient validation of incoming requests. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of SAP NetWeaver Application Server ABAP software integration platforms is related to insufficient checking of incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

6.4CVSS6.4AI score0.00163EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.5 views

The vulnerability of the Mirasvit Full Page Cache Warmer extension for Magento 2 and Adobe Commerce stems from defects in the deserialization mechanism, allowing attackers to execute arbitrary code.

The vulnerability of the Mirasvit Full Page Cache Warmer extension for Magento 2 and Adobe Commerce lies in the shortcomings of its deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

10CVSS7.3AI score0.27546EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.4 views

The vulnerability of the Windows Message Queuing system allows a perpetrator to execute arbitrary code.

The vulnerability of Windows’ Message Queuing system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.3AI score0.00975EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.4 views

The vulnerability of the multimedia framework Media Foundation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the multimedia framework Media Foundation in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.00997EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.5 views

The vulnerability of the Checkov code analysis tool provided by Prisma Cloud lies in the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the Checkov code analysis tool by Prisma Cloud lies in the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows attackers to execute arbitrary commands...

3.2CVSS6.8AI score0.00824EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.7 views

The vulnerability of Wireshark, a protocol analyzer for analyzing computer network traffic, allows a hacker to cause a service failure.

The vulnerability of the SSH protocol analyzer and traffic sniffer software Wireshark is related to the use of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00122EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/09/14 12:00 a.m.6 views

Vulnerability of the web interface of the operating system PAN-OS, allowing a perpetrator to execute arbitrary code

The vulnerability of the PAN-OS operating system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS7.3AI score0.00265EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the decoder handlers in the BGP OPEN messages parser of the GoBGP edge gateway module pkg/packet/bbg protocol allows a attacker to cause a service failure.

The vulnerability of the decoder handlers for BGP OPEN messages in the GoBGP border gateway module’s pkg/packet/bbg protocol relates to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.9CVSS6.3AI score0.00333EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the gf_cenc_set_pssh() function in the isomedia/drm_sample.c file of the GPAC multimedia platform allows a perpetrator to cause a service failure.

The vulnerability of the gfcencsetpssh function in the isomedia/drmsample.c file of the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00286EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the audio stream parser of the GPAC multimedia platform, which allows a hacker to cause a service failure.

The vulnerability of the Opus audio stream parser on the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.6AI score0.00255EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the get_text_props() function in the src/textprop.c file of the Vim text editor allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the gettextprops function in the src/textprop.c file of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the...

6.1CVSS6.8AI score0.00161EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.6 views

The vulnerability of the Python omni-completion module’s autoload mechanism, runtime/autoload/python3complete.vim, allows a hacker to execute arbitrary code.

The vulnerability of the Python omni-completion module’s autoload mechanism, located in the runtime/autoload/python3complete.vim file, is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

9.3CVSS7.1AI score0.00224EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the netrw text editor plugin in Vim allows a hacker to execute arbitrary code.

The vulnerability of the netrw text editor plugin in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.8CVSS7.2AI score0.00159EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the RPC Runtime Library for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the RPC Runtime Library in Windows operating systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.4AI score0.00928EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the gf_hevc_read_sps_bs_internal() function in the media_tools/av_parsers.c file of the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the gfhevcreadspsbsinternal function in the mediatools/avparsers.c file of the GPAC multimedia platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.4AI score0.00467EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the ctts_box_write() function in the isomedia/box_code_base.c file of the GPAC multimedia platform allows a violator to trigger a service failure.

The vulnerability of the cttsboxwrite function in the isomedia/boxcodebase.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.1CVSS6.3AI score0.00345EPSS
SaveExploits1References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerabilities of MIH, MPEG DSM-CC, eDonkey, and MEGACO traffic analyzer Wireshark allow attackers to induce service failures.

The vulnerability of MIH, MPEG DSM-CC, eDonkey, and MEGACO protocol decoders, as well as the Wireshark traffic analyzer, is related to the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

7.8CVSS6.4AI score0.00184EPSS
SaveExploits0References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the GoBGP edge gateway protocol allows a attacker to cause a service failure.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the GoBGP edge gateway protocol is related to a single-bit offset error. Exploiting this vulnerability could allow an attacker to cause a service failure...

3.7CVSS5.9AI score0.00409EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the BGP OPEN Message Handler component of the GoBGP protocol allows a attacker to increase their privileges.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the BGP OPEN Message Handler component is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

3.7CVSS6.1AI score0.00293EPSS
SaveExploits0References12Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the DirectShow component in Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the DirectShow component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.00997EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.10 views

The vulnerability of the HTTP Print Provider component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the HTTP Print Provider component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.6AI score0.00909EPSS
SaveExploits0References2Affected Software20
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the EncryptInterceptor component of the Apache Tomcat application server allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the EncryptInterceptor component in the Apache Tomcat application server is related to insufficient technical documentation. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

9.4CVSS6.4AI score0.00506EPSS
SaveExploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the gf_isom_copy_sample_info() function in the isomedia/isom_write.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfisomcopysampleinfo function in the isomedia/isomwrite.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.2AI score0.00243EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the smooth_parse_stream_index() function in the src/media_tools/mpd.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the smoothparsestreamindex function in the src/mediatools/mpd.c file of the GPAC multimedia platform is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.0017EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the decodeSliceUnit_WPP() function in the libde265/decctx.cc file of the h.265 video codec implementation by Libde265, which allows a attacker to cause a service failure.

The vulnerability of the decodeSliceUnitWPP function in the libde265/decctx.cc file of the h.265 codec implementation, developed by Libde265, is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause...

5.3CVSS6.6AI score0.00426EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerabilities of the functions um_goto_line() and get_text_props() in the src/textprop.c file of the Vim text editor allow a hacker to induce a service failure.

The vulnerability of the umgotoline and gettextprops functions in the src/textprop.c file of the Vim text editor is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

6.1CVSS6.8AI score0.00169EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

Vulnerability of the vms_fixfilename() function in the Vim text editor’s vim/src/os_vms.c file, allowing an attacker to execute arbitrary code.

The vulnerability of the vmsfixfilename function in the Vim/src/osvms.c file of the Vim text editor is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.7CVSS7.2AI score0.00136EPSS
SaveExploits0References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the autodoppleing mechanism in the C omni-completion module of the runtime/autoload/ccomplete.vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.2AI score0.00137EPSS
SaveExploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the NetrwLocalRmFile() function in the runtime/pack/dist/opt/netrw/autoload/netrw.vim text editor allows a hacker to execute arbitrary commands.

The vulnerability of the NetrwLocalRmFile function in the runtime/pack/dist/opt/netrw/autoload/netrw.vim file of the Vim text editor is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability could allow an attacker to...

7.8CVSS7AI score0.00152EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.10 views

The vulnerability of the UpdatePathAttrs4ByteAs() function in the GoBGP edge gateway protocol’s internal/pkg/table/message.go file allows a attacker to cause a service failure.

The vulnerability of the UpdatePathAttrs4ByteAs function in the GoBGP edge gateway protocol’s internal/pkg/table/message.go file is related to unvalidated array indexing. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS7.5AI score0.00542EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the gf_opus_parse_packet_header() function in the media_tools/av_parsers.c file of the multimedia platform GPAC allows a hacker to cause a service failure.

The vulnerability of the gfopusparsepacketheader function in the mediatools/avparsers.c file of the multimedia platform GPAC is related to incorrect numerical calculations when processing values with a comma-separated format. Exploiting this vulnerability could allow an attacker to cause service...

7.1CVSS6.3AI score0.00296EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the gf_node_get_tag() function in the scenegraph/base_scenegraph.c file of the GPAC multimedia platform allows a attacker to cause a service failure.

The vulnerability of the gfnodegettag function in the scenegraph/basescenegraph.c file of the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.4AI score0.00243EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the gf_odf_vvc_cfg_write_bs() function in the odf/descriptors.c file of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfodfvvccfgwritebs function in the odf/descriptors.c file of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS6.2AI score0.00467EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the TrackWriter component of the GPAC multimedia platform, which allows a intruder to trigger a service failure

The vulnerability of the TrackWriter component of the GPAC multimedia platform relates to the assignment of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

5.5CVSS6.3AI score0.00243EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the filein_process() function in the in_file.c file of the GPAC multimedia platform allows a attacker to cause a service failure.

The vulnerability of the fileinprocess function in the infile.c file of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.7AI score0.005EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability in the built-in ZIP-plugin of the runtime/autoload/zip.vim text editor in Vim allows a hacker to execute arbitrary commands.

The vulnerability in the built-in ZIP-plugin of the Vim text editor’s runtime/autoload/zip.vim module is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

7.3CVSS6.8AI score0.00208EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the VimCrypt file decoding mechanism in Vim’s text editor, located in the src/crypt.c file, allows a hacker to cause a service failure.

The vulnerability of the VimCrypt file decoding mechanism in the src/crypt.c file of the Vim text editor lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

5.5CVSS6.4AI score0.00118EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the spell_soundfold_sal() function in the Vim text editor’s src/spell.c file allows a hacker to trigger a denial-of-service attack.

The vulnerability of the spellsoundfoldsal function in the src/spell.c file of the Vim text editor is related to the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability could allow a attacker to cause a system failure...

5.5CVSS6.5AI score0.0011EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.10 views

The vulnerability of the DecodeFromBytes() function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DecodeFromBytes function in the pkg/packet/bgp/bgp.go file of the AIGP Attribute Parser component of the GoBGP border gateway protocol is related to the operation of pushing data out of the buffer into memory. Exploiting this vulnerability could allow a malicious actor to...

7.5CVSS8AI score0.00361EPSS
SaveExploits0References13Affected Software3
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.8 views

The vulnerability of the ReadMultiple() function in the Storage REST API component of MinIO allows a attacker to gain unauthorized access to protected information.

The vulnerability of the ReadMultiple function in the Storage REST API of the MinIO object storage server is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

6.8CVSS6.3AI score0.09491EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the tree_count_words() function in the src/spellfile.c file of the Vim text editor allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the treecountwords function in the src/spellfile.c file of the Vim text editor is related to the operation of writing data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

7.8CVSS6.9AI score0.00124EPSS
SaveExploits0References10Affected Software8
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.7 views

The vulnerability of the autocompletion mechanism in Python’s omni-completion modules runtime/autoload/pythoncomplete.vim and runtime/autoload/python3complete.vim of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the Python omni-completion mechanisms for runtime/autoload/pythoncomplete.vim and runtime/autoload/python3complete.vim in the Vim text editor involves the integration of features from an unreliable control domain. Exploiting this vulnerability allows a remote attacker to...

8.5CVSS7.2AI score0.00201EPSS
SaveExploits0References10Affected Software8
BDU FSTEC
BDU FSTEC
added 2026/09/11 12:00 a.m.9 views

The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim allows a hacker to execute arbitrary code.

The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.2AI score0.00145EPSS
SaveExploits0References10Affected Software8
Total number of security vulnerabilities95883