The vulnerability of D-Link DSL-3782 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of D-Link DSL-3782 router’s microprogramming software is related to the lack of measures taken to protect the structure of the web page during the processing of IP address fields by the router. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability in the web interface of Supermicro X112 series BMC IPMI servers relates to the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability in the web interface of BMC IPMI Supermicro X11 series servers exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using specially crafted GET requests...

The vulnerability of the centralized security management tool for end points, WithSecure Policy Manager, arises due to the lack of measures taken to protect the web page structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the centralized security management tool for end points, WithSecure Policy Manager, exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to carry out a cross-site scripting attack...

The vulnerability of the software for working with the IceWarp Web Client email system, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the software for working with the IceWarp Web Client email client is related to the lack of measures taken to protect the structure of the web page during the processing of the mid parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripti...

The vulnerability in the web interface of the ArubaOS operating system arises from the lack of protective measures for the website structure, allowing attackers to carry out XSS attacks.

The vulnerability in the ArubaOS operating system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to carry out XSS attacks...

The vulnerability in the web interface of the LuCI, a built-in operating system called OpenWrt, allows attackers to execute cross-site scripting attacks.

The vulnerability in the LuCI web interface of the embedded operating system OpenWrt is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the graphical interface of FortiOS operating systems and the proxy server used for protecting against Internet attacks, FortiProxy, arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute arbitrary JavaScript code.

The vulnerability of the graphical interface of FortiOS operating systems and the proxy server used for protecting against Internet attacks FortiProxy exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the software for managing identities and access control in Keycloak arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute arbitrary code.

The vulnerability of the software for managing identities and access on Keycloak exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the doRTAAccessCTConfig method in the software for testing and monitoring network quality by Visualware MyConnection Server allows a hacker to circumvent existing security restrictions.

The vulnerability of the doRTAAccessCTConfig method exists in the software used for testing and monitoring network quality by Visualware MyConnection Server. This vulnerability arises due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in its lack of protection for website structures. This allows attackers to insert arbitrary information into wiki projects.

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to insert arbitrary information into the wiki project remotely...

PT-2023-5302 · Unknown · Modulys Gp

Name of the Vulnerable Software and Affected Versions: MODULYS GP MOD3GP-SY-120K affected versions not specified Description: The issue exists due to a lack of protection for the web page structure, allowing a remote attacker to perform cross-site scripting XSS attacks. This could enable an...

The vulnerability of the application development environment and the Angular development platform, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the application development environment and the Angular single-page application platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of CKEditor’s WYSIWYG editor, related to the lack of protection for website structure, allows attackers to execute XSS attacks.

The vulnerability of the CKEditor WYSIWYG editor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability in the Splunk Web interface of the Splunk Enterprise operational analytics platform is related to the lack of protection for the web page structure during the processing of the final endpoint /app/search/table. Exploiting this vulnerability allows a malicious actor to perform...

The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of protection for website structures. This allows attackers to replace the displayed URLs with malicious ones.

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to replace the displayed URL...

PT-2023-6886 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: NagiosXI affected versions not specified Description: The issue is related to the lack of protection of the web page structure in NagiosXI, which can be exploited by a remote attacker to perform a reflected XSS attack. Recommendations: At the...

PT-2023-7554

Name of the Vulnerable Software and Affected Versions OpenCMS affected versions not specified Description The issue is related to the lack of protection for the web page structure in OpenCMS, allowing a remote attacker to conduct cross-site scripting attacks. Recommendations At the moment, there ...

PT-2023-7553

Name of the Vulnerable Software and Affected Versions OpenCMS affected versions not specified Description The issue is related to the lack of protection for the web page structure in OpenCMS, allowing a remote attacker to conduct cross-site scripting attacks. Recommendations At the moment, there ...

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform allows attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP NetWeaver Enterprise Portal software platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...