Lucene search
K

107 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/26 12:0 a.m.5 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

8CVSS6.3AI score0.01545EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.4 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

6.1CVSS6.3AI score0.01498EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.6 views

The vulnerability of the BBCode parser in the vBulletin commercial web forum, related to the lack of protection for the website structure, allows a violator to execute arbitrary JavaScript.

The vulnerability of the BBCode parser in the vBulletin commercial web forum is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript by injecting code into messages using embedded BBCodes...

9CVSS5.9AI score
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:0 a.m.2 views

The vulnerability of the online business analytics service IBM Cognos Analytics, related to the lack of measures taken to protect the website structure, allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the online business analytics service IBM Cognos Analytics is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

5.4CVSS6AI score0.0096EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:0 a.m.3 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.2AI score0.06018EPSS
Exploits0References3Affected Software2
OSV
OSV
added 2020/08/17 4:15 p.m.5 views

CVE-2020-8210

Insufficient protection of secrets in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 discloses credentials of a service account...

7.5CVSS7.4AI score0.01542EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:0 a.m.3 views

The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to perform cross-site scripting attacks (XSS).

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.1CVSS6AI score0.00801EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:0 a.m.4 views

The vulnerability of Google Chrome browser, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially created HTML page...

6.1CVSS7AI score0.00593EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/07/16 12:0 a.m.4 views

The vulnerability of the Jenkins Pipeline Remote Loader plugin, related to defects in the data protection mechanism, allows attackers to circumvent sandbox restrictions.

The vulnerability of the Jenkins Pipeline Remote Loader plugin is related to deficiencies in data protection mechanisms. Exploiting this vulnerability allows a malicious actor to bypass sandbox restrictions and execute arbitrary methods remotely...

9.9CVSS5.8AI score0.01922EPSS
Exploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/05/31 12:0 a.m.4 views

Vulnerability of the software complex: Regional electronic budget. An integration platform related to insufficient protection of web page structures, allowing attackers to execute arbitrary JavaScript code in the user’s browser.

Vulnerability of the software complex: Regional electronic budget. The integration platform is associated with insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

7.5CVSS5.8AI score
Exploits0Affected Software1
OSV
OSV
added 2019/05/03 3:29 p.m.5 views

CVE-2019-1692

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certa...

5.3CVSS6.4AI score0.01197EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.3 views

The vulnerability of IBM WebSphere Application Server application servers arises from the lack of measures taken to protect the structure of web pages. This allows attackers to inject malicious code into the loaded web pages.

The vulnerability of IBM WebSphere Application Server application servers exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject unauthorized code into the loaded web pages...

5.4CVSS6.3AI score0.0099EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/04 12:0 a.m.4 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, allowing a hacker to inject arbitrary code into the web pages that users are allowed to download.

The vulnerability of the Microsoft Dynamics 365 resource planning software application is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web pages uploaded to users, thereby gaining access to...

6.4CVSS8AI score0.01413EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/08/21 12:0 a.m.6 views

The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the microprogrammed software of the 4G LTE Light Industrial M2M Router NWL-25 is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

7.5CVSS5.9AI score0.00977EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2018/04/19 8:29 p.m.3 views

CVE-2018-0266

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection of database tables over the web interface. An attacker could exploit this vulnerability by browsin...

4.3CVSS5.8AI score0.01756EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2018/02/21 12:0 a.m.4 views

The vulnerability of the MembersApp component of the SAP NetWeaver software integration platform allows a hacker to disclose user information.

The vulnerability of the MembersApp component of the SAP NetWeaver software integration platform is related to insufficient data protection. Exploiting this vulnerability allows a malicious actor to obtain user information such as listing user names by taking advantage of the temporary difference...

5.3CVSS5.5AI score
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/08/16 12:0 a.m.4 views

The vulnerability of the Firefox browser, which allows a hacker to obtain information about the last visited pages

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information about the last visited pages by using the Resource Timing API interface’s calls...

5CVSS6.7AI score0.02187EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/04/14 12:0 a.m.5 views

The vulnerability of the Silverlight software platform, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Silverlight software platform is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted web page...

4.3CVSS5.5AI score0.16634EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.6 views

The vulnerability of the SAP NetWeaver software integration platform allows a hacker to inject any Web or HTML code.

The vulnerability of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

4.3CVSS6.5AI score0.01546EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.4 views

The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the searchpagination function course/classes/managementrenderer.php in the Moodle learning management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code...

4.3CVSS6.5AI score0.01568EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder