Lucene search
K
Bdu FstecRecent

74701 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/16 12:0 a.m.2 views

The vulnerability of the ThinServer.exe executable file of the ThinServer component of the Rockwell Automation ThinManager centralized application management platform allows a attacker to load arbitrary files.

The vulnerability of the ThinServer.exe executable file of the ThinServer component of Rockwell Automation’s ThinManager application platform is related to errors in processing the relative path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to...

7.8CVSS7.2AI score0.7613EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/16 12:0 a.m.2 views

The vulnerability of the CommuniGate Pro mail server, related to errors in processing the relative path to the directory, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the CommuniGate Pro mail server is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by increasing privileges...

6.8CVSS5.5AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/16 12:0 a.m.2 views

The vulnerability of the CommuniGate Pro mail server, related to the swapping of the zero pointer, allows a hacker to disclose protected information.

The vulnerability of the CommuniGate Pro mail server is related to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

7.8CVSS5.5AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the nghttp2_on_stream_close_callback() function in the nghttp2 library allows a attacker to cause a service failure.

The vulnerability of the nghttp2onstreamclosecallback function in the nghttp2 library is related to uncontrolled use of resources. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.01106EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Secure Kernel Mode mode in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

7CVSS7.7AI score0.00216EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of operating systems visionOS, macOS Ventura, tvOS, iPadOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma is related to a logical error in the operator precedence, which allows attackers to disclose sensitive information.

The vulnerability of operating systems visionOS, macOS Ventura, tvOS, iPadOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma is related to a logical operator precedence error. Exploiting this vulnerability can allow attackers to disclose sensitive information...

5.5CVSS5.4AI score0.00269EPSS
Exploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of MacOS operating systems, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of MacOS operating systems is related to uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.4AI score0.00247EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Active Directory Certificate Services (AD CS) service, which manages the distribution and usage of certificates, allows a perpetrator to cause a service failure.

The vulnerability of the Active Directory Certificate Services AD CS service, which manages distribution and utilization of certificates on Windows operating systems, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...

6.8CVSS7.7AI score0.01548EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the personal assistant Siri in operating systems such as MacOS, iPadOS, and iOS allows attackers to disclose confidential information.

The vulnerability of the personal assistant Siri in operating systems such as MacOS, iPadOS, and iOS is related to lack of access control. Exploiting this vulnerability can allow attackers to disclose confidential information...

5.5CVSS5.4AI score0.00257EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the integrated development environment Xcode for MacOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the integrated development environment Xcode for MacOS operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS6.1AI score0.0021EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the sips component in the macOS Sequoia, macOS Sonoma, and macOS Ventura operating systems allows a hacker to execute arbitrary code.

The vulnerability of the sips component in the macOS Sequoia, macOS Sonoma, and macOS Ventura operating systems is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.5CVSS7.8AI score0.00172EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a hacker to disclose protected information.

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

7.8CVSS8.1AI score0.01027EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Remote Access Connection Manager (RASMan) service for Windows operating systems allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Remote Access Connection Manager RASMan service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

7.8CVSS8.1AI score0.01006EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.3 views

The vulnerability of the Microsoft Outlook client for Microsoft Office programs and 365 Apps for Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Outlook client and Microsoft Office programs, as well as 365 Apps for Enterprise, is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00391EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.4CVSS8.4AI score0.00368EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the Microsoft Visual Studio software lies in its lack of measures to neutralize special elements used in the operating system command line, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Visual Studio software lies in the lack of measures taken to neutralize special elements used in the operating system command line. Exploiting this vulnerability allows an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00443EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.7AI score0.00534EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.3 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00493EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Windows operating system’s kernel allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the Windows operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...

6.1CVSS8AI score0.00544EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to incorrect handling of symbolic links before accessing files. This allows attackers to exploit their privileges.

The vulnerability of the Windows Microsoft PC Manager software for maintenance, cleaning, and security operations is related to incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow attackers to increase their privileges...

7.8CVSS7.4AI score0.00444EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the Web Threat Defense (WTD.sys) driver for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Web Threat Defense WTD.sys driver for Windows operating systems is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS8AI score0.56984EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, and Microsoft 365 Apps for Enterprise, related to the possibility of using freed memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office products and Microsoft 365 Apps for Enterprise, is related to the ability to utilize freed memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code by sending a specially crafted...

7.8CVSS8.2AI score0.00576EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of software for electrical system design, simulation, and automation from ABB e-Design, related to incorrect default settings, allows a perpetrator to trigger a service failure.

The vulnerability of software for electrical system design, simulation, and automation provided by ABB e-Design is related to incorrect default settings. Exploiting this vulnerability can allow attackers to trigger service failures...

6.1CVSS6AI score0.00274EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of Windows operating system installers, allowing a hacker to disclose protected information

The vulnerability of Windows operating system installers is related to incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6.8AI score0.00514EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of operating systems visionOS, iOS, iPadOS, tvOS, and macOS Sequoia is related to lack of access control, allowing attackers to disclose protected information.

The vulnerability of operating systems visionOS, iOS, iPadOS, tvOS, and macOS Sequoia is related to lack of access control. Exploiting this vulnerability can allow attackers to disclose protected information...

5.5CVSS5.4AI score0.00257EPSS
Exploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of operating systems visionOS, macOS Ventura, tvOS, iPadOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma is related to a logical error in the operator precedence, which allows attackers to disclose sensitive information.

The vulnerability of operating systems visionOS, macOS Ventura, tvOS, iPadOS, iOS, iPadOS, macOS Sequoia, and macOS Sonoma is related to a logical operator precedence error. Exploiting this vulnerability can allow attackers to disclose sensitive information...

5.5CVSS5.4AI score0.00271EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.5 views

The vulnerability in the Accessibility component of operating system frameworks like iPadOS, iOS, and MacOS allows attackers to disclose protected information.

The vulnerability of the Accessibility component in iPadOS, iOS, and MacOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information...

5.5CVSS5.4AI score0.00237EPSS
Exploits0References4Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the Kernel Memory Handler component in the MacOS operating system allows attackers to enhance their privileges.

The vulnerability of the Kernel Memory Handler component in the MacOS operating system is related to buffer overflows that occur without proper input data validation. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

9CVSS5.7AI score0.00638EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Safari browser on iPadOS and iOS operating systems allows attackers to execute XSS attacks.

The vulnerability of the Safari browser on iPadOS and iOS operating systems relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to carry out XSS attacks...

6.4CVSS6.8AI score0.00508EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of operating systems iPadOS and iOS, related to access control errors, allows attackers to disclose confidential information.

The vulnerability of iPadOS and iOS operating systems is related to access control errors. Exploiting this vulnerability can allow a malicious actor to disclose confidential information by connecting to the device...

5.3CVSS8AI score0.00437EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.5 views

The vulnerability of the libnetcore library in MacOS, tvOS, visionOS, iPadOS, and iOS systems allows attackers to gain increased privileges.

The vulnerability of the libnetcore library in MacOS, tvOS, visionOS, iPadOS, and iOS operating systems is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

9CVSS5.5AI score0.00649EPSS
Exploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.3 views

The vulnerability of the UrlMon component in Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of the UrlMon component in Windows operating systems relates to the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

7.6CVSS7.7AI score0.00358EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability in the implementation of the LDAP service protocol for Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in Microsoft Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

5.9CVSS7.7AI score0.01065EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.01225EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Windows Common Log File System (CLFS) driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Common Log File System CLFS driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.7AI score0.00419EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.4 views

The vulnerability of the ExecutionContext Drivers in Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the ExecutionContext Drivers in Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.4CVSS7.7AI score0.00321EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the Brokering File System (BFS) of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Brokering File System BFS in the Windows operating system is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.6AI score0.0043EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...

7.8CVSS8.5AI score0.00588EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of Microsoft Office and 365 Apps for Enterprise applications relates to the possibility of exploiting memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.1AI score0.00377EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the Graphics component of Windows operating systems, which allows a hacker to execute arbitrary code

The vulnerability of the Graphics component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.7AI score0.0289EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability in the implementation of the Server Message Block (SMB) protocol in Windows operating systems allows a perpetrator to disclose protected information.

The vulnerability of the Server Message Block SMB protocol in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the protocol...

5.6CVSS8AI score0.008EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.3 views

The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a hacker to disclose protected information.

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

7.8CVSS8.1AI score0.01057EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of Adobe Substance 3D Modeler software lies in its uncontrolled search mechanism, which allows attackers to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

7.8CVSS5.8AI score0.00206EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Substance 3D Modeler software-related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00181EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Substance 3D Stager software lies in its ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

7.8CVSS5.8AI score0.00216EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.4 views

The vulnerability of the Substance 3D Stager software lies in its ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

7.8CVSS5.8AI score0.00216EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Substance 3D Stager software lies in its ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

7.8CVSS5.8AI score0.00216EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.3 views

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00181EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.2 views

The vulnerability of the Windows RRAS operating system’s routing and remote access service allows a hacker to disclose protected information.

The vulnerability of the Windows RRAS operating system’s routing and remote access service is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

7.8CVSS8.1AI score0.01006EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.1 views

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.00849EPSS
Exploits0References2
Total number of security vulnerabilities74701