Lucene search
+L

8616 matches found

BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•19 views

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

5.4CVSS6.2AI score0.01763EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•14 views

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

6.1CVSS6.7AI score0.02441EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•14 views

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

6.1CVSS6.7AI score0.02441EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•16 views

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

6.1CVSS6.7AI score0.02441EPSS
SaveExploits0References3Affected Software1
Hacker One
Hacker One
•added 2021/02/05 10:52 a.m.•19 views

ExpressionEngine: Stored XSS filter bypass on discussion forum.

A vulnerability was identified and fixed that could have allowed attackers to bypass the XSS filter in the discussion forum, enabling arbitrary JavaScript execution in the victim's browser...

6.3AI score
SaveExploits0
CNVD
CNVD
•added 2021/02/04 12:00 a.m.•20 views

Pryaniki Cross-Site Scripting Vulnerability

Pryaniki is a website building system for building a corporate communication platform from the Russian company Pryaniky. The platform is used for organizing communication within the company, motivational planning, idea management projects and other business processes. Pryaniki 6.44.3 suffers from...

5.4CVSS6AI score0.0075EPSS
SaveExploits0References1
Hacker One
Hacker One
•added 2021/02/02 6:49 a.m.•73 views

U.S. Dept Of Defense: Self stored Xss + Login Csrf

Description: User can set username between 8-20 alphanumeric characters, but with the help of inspect element attacker can manipulate ██████= & can insert a xss payload resulting in self stored xss & with the help of login csrf attacker can force the victim into attacker's account causing...

SaveExploits0
CNNVD
CNNVD
•added 2021/02/02 12:00 a.m.•19 views

Apple iOS Input Validation Error Vulnerability

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system. A security vulnerability exists in a number of Apple products, which arises from the handling of...

8.8CVSS7.5AI score0.02738EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2021/02/02 12:00 a.m.•14 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser using a specially crafted...

9CVSS8.1AI score0.02566EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2021/02/01 4:15 p.m.•33 views

CVE-2020-13562

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

6.1CVSS6.2AI score
SaveExploits0References1
OSV
OSV
•added 2021/02/01 4:15 p.m.•30 views

CVE-2020-13564

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

6.1CVSS6.2AI score
SaveExploits0References1
NVD
NVD
•added 2021/02/01 4:15 p.m.•34 views

CVE-2020-13562

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

9.6CVSS6.5AI score0.77745EPSS
SaveExploits1References1
NVD
NVD
•added 2021/02/01 4:15 p.m.•39 views

CVE-2020-13563

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template groupid parameter...

9.6CVSS6.5AI score0.75856EPSS
SaveExploits1References1
NVD
NVD
•added 2021/02/01 4:15 p.m.•34 views

CVE-2020-13564

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

9.6CVSS6.5AI score0.75856EPSS
SaveExploits1References1
Prion
Prion
•added 2021/02/01 4:15 p.m.•35 views

Cross site scripting

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

4.3CVSS6AI score0.77745EPSS
SaveExploits1References1Affected Software2
Prion
Prion
•added 2021/02/01 4:15 p.m.•30 views

Cross site scripting

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template groupid parameter...

4.3CVSS6AI score0.75856EPSS
SaveExploits1References1Affected Software2
Mend
Mend
•added 2021/02/01 3:07 p.m.•2 views

CVE-2020-13564

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

9.6CVSS0.75856EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/02/01 3:07 p.m.•49 views

CVE-2020-13564

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template aclid parameter...

9.6CVSS6AI score0.75856EPSS
SaveExploits1References1
Mend
Mend
•added 2021/02/01 3:06 p.m.•2 views

CVE-2020-13563

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnerability in the phpGACL template groupid parameter...

9.6CVSS0.75856EPSS
SaveExploits1References1
Mend
Mend
•added 2021/02/01 3:05 p.m.•3 views

CVE-2020-13562

A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter...

9.6CVSS0.77745EPSS
SaveExploits1References1
Rows per page
Query Builder