Lucene search
K

81 matches found

BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.0 views

The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the usergetuserdetails function in the Moodle training management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code, as there is no invocation of...

4.3CVSS0.00255EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.0 views

The vulnerabilities in the Moodle learning management system allow a hacker to inject arbitrary Web or HTML code.

Multiple vulnerabilities exist in the Moodle learning management system module, due to the lack of measures taken to protect the website structure. Exploitation of these vulnerabilities allows attackers to inject arbitrary Web or HTML code, through the use of the “student” role and a specially...

3.5CVSS0.00187EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.0 views

The vulnerabilities in the Moodle learning management system allow a hacker to inject arbitrary Web or HTML code.

The multiple vulnerabilities of the Moodle learning management system’s SCORM module exist due to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code using a specially created name for the...

4.3CVSS0.00255EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.0 views

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary Web or HTML code.

The vulnerability of the Process Portal component of the Business Process Manager system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

4.3CVSS0.00266EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.0 views

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary Web or HTML code.

The vulnerability of the Document List control implementation in the Business Process Manager system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

3.5CVSS0.00241EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.0 views

Vulnerabilities in the software for Cisco WebEx Meetings Server, which allow attackers to inject arbitrary Web or HTML code

Multiple vulnerabilities in the software for Cisco WebEx Meetings Server exist due to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code remotely...

4.3CVSS0.0025EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.0 views

The vulnerability of the Adobe Connect instant messaging program allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using request parameters...

4.3CVSS0.00653EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.1 views

The vulnerabilities of the Cisco Identity Services Engine, a platform for managing network policies, allow attackers to inject arbitrary Web or HTML code.

The Cisco Identity Services Engine’s management platform has multiple vulnerabilities due to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code through GET or POST requests...

4.3CVSS0.00263EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:0 a.m.0 views

The vulnerability of Microsoft SharePoint Foundation software allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially created request...

4.3CVSS0.01227EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2016/02/24 12:0 a.m.2 views

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any Web or HTML code.

The vulnerability of the application interface of the IBM WebSphere Portal server exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

4.3CVSS0.00272EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2016/01/25 12:0 a.m.0 views

The vulnerability of the Windows operating system, which allows a hacker to inject arbitrary web or HTML code

The vulnerability of the Active Directory service for Windows operating systems exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code by manipulating the wct parameter...

4.3CVSS0.10694EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2016/01/21 12:0 a.m.1 views

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially...

4.3CVSS0.01234EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/01/21 12:0 a.m.0 views

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially...

4.3CVSS0.01287EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/26 12:0 a.m.0 views

The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...

4.3CVSS0.28553EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:0 a.m.1 views

The vulnerability of the Cisco Secure Access Control System allows a intruder to inject arbitrary web or HTML code.

The vulnerability of the Cisco Secure Access Control System exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

4.3CVSS0.00263EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:0 a.m.0 views

The vulnerability of the Cisco Secure Access Control System’s access control mechanism allows a perpetrator to execute arbitrary web or HTML code.

The vulnerability of the Solution Engine web interface of the Cisco Secure Access Control System exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code using a specially crafte...

4.3CVSS0.00263EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.0 views

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary web or HTML code.

The vulnerability of the Development Workbench component of the SAP HANA database management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code remotely...

3.5CVSS0.00179EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.0 views

The vulnerability of the Microsoft SharePoint Server corporate application package and the Microsoft SharePoint Foundation software for electronic document management allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remote...

3.5CVSS0.06561EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.0 views

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary web or HTML code.

The vulnerability of the Development Workbench component of the SAP HANA database management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code remotely...

3.5CVSS0.00179EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/10/21 12:0 a.m.0 views

The vulnerability of the Mac OS X operating system allows a hacker to execute arbitrary web or HTML code.

The vulnerability of the Notes component in the Mac OS X operating system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a local attacker to execute arbitrary web or HTML code using specially crafted text...

2.1CVSS0.00105EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder