Lucene search
K

59 matches found

Positive Technologies
Positive Technologies
added 2026/06/02 12:0 a.m.6 views

PT-2026-48797

Уязвимость программного обеспечения Blitz Identity Provider связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить межсайтовые сценарные атаки XSS...

6.8CVSS5.4AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:0 a.m.3 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege-controlled user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary JavaScript code...

8.7CVSS5.8AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.1 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.00326EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/07 12:0 a.m.1 views

The vulnerability of the Clickstorm SEO (cs_seo) extension of the TYPO3 content management system, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Clickstorm SEO csseo extension of the TYPO3 content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.5CVSS5.2AI score0.00558EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.3 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.5AI score0.00326EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/10 12:0 a.m.4 views

The vulnerability of the IBM WebSphere Application Server’s web interface allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability in the web interface of IBM WebSphere Application Server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to protected information...

5.5CVSS7.6AI score0.00238EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/02/06 12:0 a.m.2 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to execute arbitrary code.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created web page...

5.5CVSS6AI score0.00388EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/01/10 12:0 a.m.2 views

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager (formerly Cisco SD-WAN vManage) allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Catalyst SD-WAN Manager formerly Cisco SD-WAN vManage relates to the lack of protection for the web page structure during the processing of element fields. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by sendin...

6.4CVSS5.4AI score0.00313EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:0 a.m.2 views

The vulnerability of Adobe Connect web conference software lies in the lack of protective measures for website structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary code...

5.5CVSS5.8AI score0.0043EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:0 a.m.1 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.5AI score0.0035EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/22 12:0 a.m.2 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...

5.5CVSS5.2AI score0.00717EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/19 12:0 a.m.2 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...

5.5CVSS5.2AI score0.0051EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/17 12:0 a.m.2 views

The vulnerability of the web interface of the IBM InfoSphere Information Server software platform allows a perpetrator to disclose account information during a secure session.

The vulnerability in the web interface of the IBM InfoSphere Information Server software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose credentials during a secure sessio...

5.5CVSS5.4AI score0.00261EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/08 12:0 a.m.3 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...

5.5CVSS5.2AI score0.0052EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:0 a.m.2 views

The vulnerability of the operating environment for managing and maintaining the Dell Unity Operating Environment (DELL Unity OE) allows attackers to carry out XSS attacks. This vulnerability arises due to the lack of measures taken to protect the structure of the web page, enabling attackers to execute such attacks.

The vulnerability in the operating environment for managing and maintaining Dell Unity Operating Environment OE exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.8CVSS5.8AI score0.0032EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/04/17 12:0 a.m.3 views

PT-2024-7375 · Unknown · Форсайт. Аналитическая Платформа

Name of the Vulnerable Software and Affected Versions: Форсайт. Аналитическая платформа affected versions not specified Description: The issue is related to the lack of protection for the web page structure, which can be exploited by a remote attacker to conduct a cross-site scripting XSS attack...

6.8CVSS6.1AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:0 a.m.2 views

The vulnerability of the phpMyFAQ web application lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the phpMyFAQ web application is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...

5.8CVSS6.1AI score0.00542EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/15 12:0 a.m.2 views

The vulnerability in the Nginx Vhost Traffic Status (nginx-module-vts) web interface allows for cross-site scripting attacks (XSS) to be carried out by attackers who fail to protect the structure of the web page.

The vulnerability of the Nginx Vhost Traffic Status nginx-module-vts web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using specially created HTTP...

8.5CVSS5.2AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/28 12:0 a.m.1 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages during the processing of user profile pages. Exploiting this vulnerability allows a malicious actor to perform cross-sit...

8.7CVSS7.3AI score0.51467EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/18 12:0 a.m.4 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS6.3AI score0.00597EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder