Lucene search
+L

652 matches found

Positive Technologies
Positive Technologies
added 2025/01/08 12:00 a.m.10 views

PT-2025-7268 · Weeek · Weeek

Name of the Vulnerable Software and Affected Versions: WEEEK affected versions not specified Description: The issue is related to the lack of protection for the web page structure in the WEEEK task and project management service. This could allow a remote attacker to execute arbitrary JavaScript...

8.7CVSS7.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/27 12:00 a.m.26 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute XSS attacks by injecting malicious scripts into form fields...

5.5CVSS5.6AI score0.00394EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/27 12:00 a.m.19 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute XSS attacks by injecting malicious scripts into form fields...

5.5CVSS5.6AI score0.00394EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/26 12:00 a.m.17 views

PT-2024-10255 · Linksys · Linksys E8450

Name of the Vulnerable Software and Affected Versions: Linksys E8450 version 1.2.00.360516 Description: A command injection issue was discovered, allowing attackers to inject malicious commands via the id email check btn field. This could potentially grant unauthorized access or control. The...

8.8CVSS8AI score0.01764EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.14 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the web page structure when processing DOM elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00877EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/18 12:00 a.m.13 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the web page structure when processing DOM elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00624EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/18 12:00 a.m.14 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the web page structure when processing DOM elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00624EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/18 12:00 a.m.12 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the web page structure when processing DOM elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00624EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.11 views

The vulnerability of Adobe Connect web conference software lies in the lack of protective measures for website structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

6.4CVSS5.8AI score0.00326EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.16 views

The vulnerability of Adobe Connect web conference software lies in the lack of protective measures for website structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

5.5CVSS5.8AI score0.00326EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.13 views

The vulnerability of Adobe Connect web conference software lies in the lack of protective measures for website structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

5.5CVSS5.8AI score0.00439EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.11 views

The vulnerability of Adobe Connect web conference software lies in the lack of protective measures for website structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

8.5CVSS5.8AI score0.00708EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/12 12:00 a.m.12 views

The Naumen Service Management Platform’s vulnerability regarding automation of business processes arises from insufficient filtering of input data and lack of measures to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The Naumen Service Management Platform is vulnerable to automation of business processes due to insufficient filtering of input data and lack of measures to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by loading a specially...

8CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/06 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software (formerly known as Cisco Firepower Management Center) allows a attacker to carry out XSS attacks.

The vulnerability in the web interface of the Cisco Secure Firewall Management Center formerly known as Cisco Firepower Management Center exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS...

5.5CVSS5.4AI score0.00391EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/03 12:00 a.m.8 views

PT-2024-10317 · 1с · Битрикс24 +1

Name of the Vulnerable Software and Affected Versions: 1С-Битрикс: Управление сайтом affected versions not specified Description: The issue is related to the UI module of the Битрикс24 business management service and the 1С-Битрикс site management system CMS, which fails to protect the web page...

7.5CVSS7.9AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/02 12:00 a.m.15 views

The vulnerability of the URL Handler component in the Zimbra Collaboration Suite email management system allows attackers to execute arbitrary code, as a result of insufficient measures taken to protect the structure of the web page.

The vulnerability of the URL Handler component in the Zimbra Collaboration Suite corporate email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created...

5.5CVSS5.9AI score0.0026EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/02 12:00 a.m.17 views

The vulnerability of the RenderTune rendering tool, related to the lack of measures taken to protect website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the RenderTune rendering tool is related to the lack of measures taken to protect the structure of web pages when processing the Upload Title parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

7.5CVSS5.3AI score0.01485EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/02 12:00 a.m.14 views

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence, related to the lack of protection for website structure, allows attackers to enhance their privileges.

The vulnerability of the graphical tool for creating and supporting artificial intelligence in Microsoft Copilot Studio relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to enhance their privileges remotely...

9.4CVSS8AI score0.00959EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/29 12:00 a.m.10 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the lack of security measures for protecting the structure of web pages. This allows attackers to execute DOM-Based XSS attacks.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the lack of security measures for protecting the structure of web pages. Exploiting these vulnerabilities can allow attackers to execute DOM-Based XSS attacks...

5CVSS7.1AI score0.00489EPSS
SaveExploits0References19Affected Software8
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.5AI score0.00359EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder