Lucene search
+L

800 matches found

BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.8 views

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

6.1CVSS6.6AI score0.02626EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/19 12:0 a.m.11 views

The vulnerability in the setup of Azure DevOps Server and Team Foundation Server, a system for project management and version control, exists due to the lack of protective measures for the website structure. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Azure DevOps Server and Team Foundation Server project management and version control systems exists due to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integri...

6.1CVSS6.6AI score0.02419EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/04/17 12:0 a.m.7 views

The vulnerability of the Microsoft SharePoint software package, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint software package is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted requests...

5.4CVSS6AI score0.01571EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/04/12 12:0 a.m.6 views

The vulnerability of the Team Foundation Server project management and version control system arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code.

The vulnerability of the Team Foundation Server project management and version control system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.4CVSS6.7AI score0.01773EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/04/04 12:0 a.m.5 views

The vulnerability of the Expedition Migration tool, which exists due to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary JavaScript or HTML code.

The vulnerability of the Network Configuration Transfer tool exists because no measures have been taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript or HTML code remotely...

4.8CVSS6AI score0.01063EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.7 views

The vulnerability of the Team Foundation Server’s project management and version control system arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code in users’ browsers.

The vulnerability of the Team Foundation Server project management and version control system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser...

3.5CVSS6.7AI score0.01697EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.6 views

The vulnerability of Microsoft Lync Server and Skype for Business Server messaging programs lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Microsoft Lync Server and Skype for Business Server’s instant messaging programs is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack using a specially...

6.4CVSS6.3AI score0.02084EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/03/22 12:0 a.m.12 views

The vulnerability of the identification management service of the Cisco Digital Network Architecture (DNA) Center arises from the lack of protective measures for the website structure, allowing attackers to access confidential information.

The vulnerability in the web interface of the management service exists because measures to protect the structure of the web page have not been taken. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information through a specially...

5.5CVSS5.9AI score0.00876EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2019/01/08 12:0 a.m.9 views

PT-2019-1135 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure. An attacker could exploit this by sending a specially crafted request to the vulnerable SharePoi...

5.4CVSS8.3AI score0.01639EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2018/12/28 12:0 a.m.9 views

The vulnerability of the Windows Azure Pack cloud platform arises from the lack of measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks with elevated privileges.

The vulnerability of the Windows Azure Pack cloud platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges...

3.5CVSS5.6AI score0.01503EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.11 views

The vulnerability of the Web Isolation software lies in its inability to protect the structure of web pages. This allows attackers to inject arbitrary code into the loaded web pages.

The vulnerability of the software for preventing web threats exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject arbitrary code into the loaded web page using a specially crafted URI...

6.1CVSS6.5AI score0.00999EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.9 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

5.4CVSS6.1AI score0.00968EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.13 views

The vulnerability in the web interface for controlling Cisco Registered Envelope Service allows a perpetrator to inject arbitrary code into the web page that is uploaded.

The vulnerability of the web interface for managing security information transmitted by the Cisco Registered Envelope Service is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the...

5.5CVSS6.1AI score0.0091EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/20 12:0 a.m.8 views

The vulnerability of the OpenNMS monitoring system, a network management platform from Juniper Networks Junos Space, arises due to insufficient protection of the website structure. This allows attackers to disclose protected information or perform actions on behalf of the administrator.

The vulnerability of OpenNMS, which is included in the Juniper Networks Junos Space network management platform, stems from insufficient protection of the website structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or carry out actions on behalf ...

10CVSS7.5AI score0.01646EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/01 12:0 a.m.9 views

The vulnerability of the DHCP Monitor web interface of the FortiOS operating system allows a hacker to inject arbitrary JavaScript or HTML code.

The vulnerability of the DHCP Monitor web interface of the FortiOS operating system arises due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code remotely...

5.3CVSS5.6AI score0.01184EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/19 12:0 a.m.9 views

The vulnerability of the Microsoft SharePoint Server software lies in the insufficient protection of website structures, which allows attackers to execute cross-site scripting attacks with elevated privileges.

The vulnerability of the Microsoft SharePoint Server software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges using specially crafted requests...

6.8CVSS7.4AI score0.02253EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2018/10/16 12:0 a.m.10 views

The vulnerability of the Microsoft SharePoint Server software lies in the insufficient protection of website structures, which allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges...

6.8CVSS7.4AI score0.01725EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.10 views

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary Web or HTML code.

The vulnerability of the Process Portal component of the Business Process Manager system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

4.3CVSS6.9AI score0.01417EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.7 views

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any Web or HTML code.

The vulnerability of the application interface of IBM WebSphere Portal exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

4.3CVSS6.8AI score0.00801EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:0 a.m.11 views

Vulnerability of the microprogramming software used in Micrologix 1100 and 1400 programmable logic controllers, allowing intruders to inject arbitrary web or HTML code

The vulnerability of Micrologix 1100 and 1400 microprogrammed logic controllers’ web servers exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

4.3CVSS5.6AI score0.02836EPSS
SaveExploits0References2
Rows per page
Query Builder