Lucene search
+L

651 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/21 12:00 a.m.17 views

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in the lack of security measures for handling web page structures. This allows attackers to carry out XSS attacks.

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity by JetBrains is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.4AI score0.00708EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:00 a.m.12 views

The vulnerability of the Safari browser on iPadOS and iOS operating systems allows attackers to execute XSS attacks.

The vulnerability of the Safari browser on iPadOS and iOS operating systems relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to carry out XSS attacks...

6.4CVSS6.8AI score0.00562EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:00 a.m.12 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of Adobe Connect web conferencing software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS by injecting malicious scripts into form fields...

9.4CVSS5.2AI score0.00488EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.13 views

The vulnerability of the Latex Proof-Reading module in the Python software repository PyPi allows attackers to carry out XSS attacks.

The vulnerability of the Latex Proof-Reading module in the Python software package PyPi is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.8AI score0.00388EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:00 a.m.11 views

The vulnerability in the web-based management interface of SonicWall’s SMA 100 series microprogramming network interfaces allows a hacker to execute arbitrary code.

The vulnerability in the web-based management interface of SonicWall’s SMA 100 series microprogramming system for network interfaces exists due to the lack of protective measures taken against the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitra...

9CVSS7.7AI score0.04146EPSS
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:00 a.m.12 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code during the user creation process...

8.7CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:00 a.m.14 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege-controlled user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary JavaScript code...

8.7CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:00 a.m.13 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege-controlled user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary JavaScript code...

8.7CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/10 12:00 a.m.8 views

The vulnerability of the `twisted.web.util.redirectTo` function in the Twisted web framework allows a attacker to access confidential data and compromise its integrity.

The vulnerability of the twisted.web.util.redirectTo function in the Twisted web framework is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity...

6.4CVSS6.3AI score0.01176EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.13 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.00374EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.10 views

The vulnerability of the Clickstorm SEO (cs_seo) extension of the TYPO3 content management system, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Clickstorm SEO csseo extension of the TYPO3 content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.5CVSS5.2AI score0.00558EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.15 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.00374EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/01 12:00 a.m.14 views

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform arises from the lack of measures taken to protect the structure of web pages. This vulnerability allows attackers to carry out XSS attacks.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00244EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/17 12:00 a.m.12 views

The vulnerability of the SAP NetWeaver AS for Java software integration platform, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP NetWeaver AS for Java software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00269EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/03/17 12:00 a.m.14 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

8.7CVSS5.5AI score0.00386EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:00 a.m.11 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.5AI score0.00336EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/12 12:00 a.m.33 views

The vulnerability of the pdf.js library on the MFlash secure data exchange platform, related to the lack of protective measures for website structures, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the pdf.js library on the MFlash secure data exchange platform is related to the lack of protective measures for the web page structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code remotely...

9CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:00 a.m.10 views

The vulnerability of the IBM WebSphere Application Server’s web interface allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability in the web interface of IBM WebSphere Application Server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...

5.5CVSS7.6AI score0.00233EPSS
SaveExploits0References3Affected Software1
Redos
Redos
added 2025/03/07 12:00 a.m.24 views

ROS-20250307-14

Moodle virtual learning environment vulnerability is related to access control weaknesses. Exploitation The vulnerability could allow a remote attacker to gain unauthorized access to the protected information. protected information A vulnerability in the Moodle virtual learning environment is...

8.6CVSS6.7AI score0.00508EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:00 a.m.13 views

The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5CVSS7.4AI score0.00354EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder