Lucene search
+L

813 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/12 12:00 a.m.16 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

8.7CVSS5.2AI score0.00781EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:00 a.m.10 views

The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the Hostname parameter...

4CVSS5AI score0.00402EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:00 a.m.13 views

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in the lack of security measures for website structure protection. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.59023EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:00 a.m.15 views

The vulnerability of the GLPI system’s request, incident, and asset inventory management processes, related to the lack of measures taken to protect the website structure, allows attackers to carry out attacks using cross-site scripting (XSS).

The vulnerability of the GLPI system’s request, incident, and asset inventory management functions is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows attackers who operate remotely to carry out attacks using cross-site scripting XSS...

7.8CVSS5.2AI score0.00353EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.15 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.00374EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:00 a.m.17 views

The vulnerability of Microsoft Edge browser on the iOS operating system, related to insufficient protection of the website structure, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge browser on the iOS operating system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

5CVSS7.5AI score0.00708EPSS
SaveExploits0References2Affected Software1
Redos
Redos
added 2025/04/03 12:00 a.m.27 views

ROS-20250403-03

Vulnerability of SQLite hints and ETRN serialization functions of Exim mail server is related to failure to take measures to protect SQL query structure. SQL query structure protection. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service by sendi...

9.8CVSS7.7AI score0.77173EPSS
SaveExploits6
BDU FSTEC
BDU FSTEC
added 2025/04/03 12:00 a.m.9 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created malicious website...

5.5CVSS6AI score0.0029EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/24 12:00 a.m.14 views

The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the Web Intelligence component of the SAP BusinessObjects Business Intelligence platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

4.7CVSS5.2AI score0.00273EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/18 12:00 a.m.21 views

The vulnerability of Siemens Industrial Edge Management’s centralized control platform for industrial peripheral applications and devices lies in the lack of protective measures for the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the platform for centralized management of industrial peripheral applications and Siemens Industrial Edge Management devices is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site...

4.7CVSS5.2AI score0.00283EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/03/17 12:00 a.m.10 views

The vulnerability of the BI Launchpad component of the SAP BusinessObjects Business Intelligence Platform allows a attacker to perform cross-site scripting attacks.

The vulnerability of the BI Launchpad component of the SAP BusinessObjects Business Intelligence Platform relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.4CVSS5.2AI score0.00255EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/12 12:00 a.m.13 views

The vulnerability of the MFlash secure data exchange platform lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the administration panel by injecting specially crafted HTML code...

9.1CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/12 12:00 a.m.33 views

The vulnerability of the pdf.js library on the MFlash secure data exchange platform, related to the lack of protective measures for website structures, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the pdf.js library on the MFlash secure data exchange platform is related to the lack of protective measures for the web page structure. Exploiting this vulnerability could allow an attacker to execute arbitrary JavaScript code remotely...

9CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/11 12:00 a.m.12 views

The vulnerability of the DNN CMS system, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

7.8CVSS5.4AI score0.00201EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/11 12:00 a.m.11 views

The vulnerability of the DNN CMS system, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS5.9AI score0.00188EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/11 12:00 a.m.13 views

The vulnerability of the DNN CMS system, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

7.7CVSS5.4AI score0.00279EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/11 12:00 a.m.11 views

The vulnerability of the DNN CMS system, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of the DNN CMS system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.8CVSS8.4AI score0.00486EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:00 a.m.11 views

The vulnerability in the web interface of the Cisco AsyncOS operating system allows attackers to perform cross-site scripting attacks.

The vulnerability in the web interface of the Cisco AsyncOS operating system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00317EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/06 12:00 a.m.12 views

The vulnerability of the ArcGIS Server server, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of ArcGIS Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00256EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/06 12:00 a.m.10 views

The vulnerability of the ArcGIS Server server, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of ArcGIS Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00256EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder