FSTEC (BDU)
organizationRU01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
fstec_bduRU vulnerability@fstec.ru
03
assessed vulnerabilities (89,503)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-109619US | high8.1 | Exploit | ||
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The g… | ||||
| CVE-2026-109618US | critical9.8 | Exploit | ||
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave… | ||||
| CVE-2026-108097US | — | Exploit | ||
Уязвимость веб-интерфейса Field UI ( field_ui) ядра CMS-системы Drupal связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующ… | ||||
| CVE-2026-111758US | — | — | ||
markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) with… | ||||
| CVE-2026-113725US | — | — | ||
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash… | ||||
| CVE-2026-113723US | — | — | ||
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An… | ||||
| CVE-2026-113718US | — | — | ||
virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write printable non-ASCII prompt or destinat… | ||||
| CVE-2026-111756US | — | — | ||
follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive c… | ||||
| CVE-2026-112373US | medium6.5 | — | ||
A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based… | ||||
| CVE-2026-105810US | — | Exploit | ||
Tapo C320WS
V2.0 contains an authenticated stack-based buffer overflow in the local
onboarding Wi-Fi configuration path. An authenticated attacker on the
adjacent network can submi… | ||||
| CVE-2026-112195US | medium4.7 | Exploit | ||
A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Di… | ||||
| CVE-2026-111058US | —OT elevated | Exploit | ||
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupy… | ||||
| CVE-2026-111057US | — | — | ||
Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab an… | ||||
| CVE-2026-84181US | — | Exploit | ||
Improper Authentication vulnerability in Apache Camel Shiro component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.
The Shiro security… | ||||
| CVE-2026-80344US | — | Exploit | ||
Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.
In the AS2 p… | ||||
| CVE-2026-80343US | — | Exploit | ||
Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component.
This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.… | ||||
| CVE-2026-78165US | — | Exploit | ||
Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component.
This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1.… | ||||
| CVE-2026-78163US | — | Exploit | ||
Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive Information to an Unauthorized Actor vu… | ||||
| CVE-2026-109553US | — | — | ||
Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When Gitea trusts a user certificate authorit… | ||||
| CVE-2026-111898US | high7.5 | — | ||
phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching preferred_username or emai… | ||||