Lucene search
+L

652 matches found

BDU FSTEC
BDU FSTEC
added 2023/12/01 12:00 a.m.10 views

The vulnerability of Intradesk’s request tracking system arises from the lack of measures taken to protect its web page structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Intradesk’s request tracking system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

6.8CVSS5.1AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.29 views

The vulnerability of the Symfony software platform for developing and managing web applications allows attackers to exploit it to disclose sensitive information, perform phishing attacks, and carry out diskloading attacks.

The vulnerability of the Symfony software platform for developing and managing web applications exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to disclose sensitive information, perform phishing attacks, and...

6.4CVSS6.6AI score0.00682EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/11/23 12:00 a.m.12 views

The vulnerability of the ColdFusion software platform arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the ColdFusion software platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...

6.4CVSS6.3AI score0.84811EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:00 a.m.13 views

Microsoft Edge browser’s vulnerability, related to the lack of protection for website structure, allows attackers to enhance their privileges.

The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

7.5CVSS7.2AI score0.01096EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/15 12:00 a.m.15 views

The vulnerability of the getserviceproviders.php component in the software network interface card based on the FreeBSD Netgate pfSense operating system allows a intruder to increase their privileges.

The vulnerability of the getserviceproviders.php component in the software network interface layer based on the FreeBSD Netgate pfSense operating system is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious...

5.3CVSS6.2AI score0.55356EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/15 12:00 a.m.10 views

The vulnerability of the OPNsense operating system, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the OPNsense operating system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks using the “sequence” parameter...

6.4CVSS5.7AI score0.00501EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/13 12:00 a.m.10 views

The vulnerability of the jQuery library lies in its lack of protection for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the jQuery library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting using AJAX requests...

6.4CVSS6.4AI score0.08632EPSS
SaveExploits6References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.11 views

The vulnerability of the Libxml2 library, related to the lack of measures taken to protect the structure of web pages, allows attackers to access confidential data and compromise its integrity.

The vulnerability of the Libxml2 library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.4CVSS6.6AI score0.00896EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:00 a.m.11 views

The vulnerability of the ViewVC online repository system, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the ViewVC online repository viewing system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.2AI score0.00694EPSS
SaveExploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/10 12:00 a.m.10 views

PT-2023-7020 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to the browser's failure to properly enforce web page structure protections. This can allow a remote attacker to elevate their privileges...

7.5CVSS6.6AI score0.01121EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/11/10 12:00 a.m.15 views

The vulnerability in the web application for managing phpMyAdmin’s database management systems exists due to the lack of measures taken to protect the structure of the web page. This vulnerability allows attackers to execute XSS attacks.

The vulnerability in the web application for managing phpMyAdmin exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5.5CVSS5.8AI score0.01163EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/11/04 12:00 a.m.17 views

The vulnerability of the CMS system Backdrop CMS, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the CMS system Backdrop CMS is related to the failure to take measures to protect the structure of a web page as a result of performing the “Publish” action in the “Content” section. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attack...

4.9CVSS5.3AI score0.02016EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/04 12:00 a.m.15 views

The vulnerability of the software for implementing the hypertext environment MediaWiki, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the software for implementing the hypertext environment MediaWiki exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

10CVSS7.1AI score0.01151EPSS
SaveExploits1References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:00 a.m.17 views

The vulnerability of the SEO plugin developed by 10Web, a content management system for WordPress, allows attackers to perform cross-site scripting attacks.

The vulnerability of the SEO plugin of the 10Web content management system for WordPress is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.4CVSS6.3AI score0.00909EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/31 12:00 a.m.10 views

The vulnerability of the Go programming language’s net/html library allows attackers to perform cross-site scripting attacks.

The vulnerability of the net/html library in the Go programming language exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6AI score0.00844EPSS
SaveExploits0References9Affected Software14
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:00 a.m.18 views

The vulnerability of the IceWarp Server, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the IceWarp Server web server is related to the lack of measures taken to protect the structure of the web page when processing the color parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6AI score0.01173EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:00 a.m.15 views

The vulnerability of Firefox’s Reader Mode, which allows a hacker to perform cross-site scripting attacks

The vulnerability of Firefox’s Reader Mode is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

5CVSS6.1AI score0.00433EPSS
SaveExploits0References4Affected Software1
Redos
Redos
added 2023/10/26 12:00 a.m.29 views

ROS-20231025-01

Vulnerability of program/lib/Roundcube/rcubewashtml.php component of RoundCube mail client is related to failure to take measures to protect the structure of the web page. Exploitation of the vulnerability could allow an attacker, acting remotely, to download arbitrary JavaScript code...

6.1CVSS7.2AI score0.75873EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:00 a.m.52 views

The vulnerability of the FortiMail email protection system lies in the lack of measures taken to protect the structure of the web page, allowing attackers to execute arbitrary codes.

The vulnerability of the FortiMail email protection system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary codes remotely...

5.5CVSS6.2AI score0.00389EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/13 12:00 a.m.14 views

The vulnerability of the license_details_view function in the ScanCode.io software, which allows a hacker to perform XSS attacks.

The vulnerability of the licensedetailsview function in the ScanCode.io software exists because measures to protect the structure of web pages have not been implemented. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.2AI score0.00506EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder