The vulnerability of the Team Foundation Server’s project management and version control system arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary code in users’ browsers.

The vulnerability of the Team Foundation Server project management and version control system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser...

The vulnerability of Microsoft Lync Server and Skype for Business Server messaging programs lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Microsoft Lync Server and Skype for Business Server’s instant messaging programs is related to the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack using a specially...

The vulnerability of the Advantech WebAccess remote monitoring software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Advantech WebAccess remote monitoring software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of Cisco WebEx Meeting software lies in the lack of security measures for the website structure, allowing attackers to execute arbitrary JavaScript scripts within the context of Cisco WebEx Meetings.

The vulnerability of Cisco WebEx Meetings software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a perpetrator to execute arbitrary JavaScript scripts within the context of Cisco WebEx Meetings...

The vulnerability of the Windows Azure Pack cloud platform arises from the lack of measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks with elevated privileges.

The vulnerability of the Windows Azure Pack cloud platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges...

The vulnerability of the Wizard component in the microprogramming software of the RICOH Aficio MP multifunctional device allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Wizard /web/entry/en/address/adrsSetUserWizard.cgi component of the RICOH Aficio MP multifunctional device exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality a...

The vulnerability in the web interface of the Cisco Content Security Management Appliance allows a perpetrator to inject arbitrary code into the web page that is being uploaded.

The vulnerability of the web interface of the Cisco Content Security Management Appliance is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page via a specially crafted link...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, allowing a hacker to inject arbitrary code into the web pages that users are allowed to download.

The vulnerability of the Microsoft Dynamics 365 resource planning software application is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web pages uploaded to users, thereby gaining access to...

The vulnerability of the OpenNMS monitoring system, a network management platform from Juniper Networks Junos Space, arises due to insufficient protection of the website structure. This allows attackers to disclose protected information or perform actions on behalf of the administrator.

The vulnerability of OpenNMS, which is included in the Juniper Networks Junos Space network management platform, stems from insufficient protection of the website structure. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or carry out actions on behalf ...

The vulnerability of the Microsoft SharePoint Server software lies in the insufficient protection of website structures, which allows attackers to execute cross-site scripting attacks with elevated privileges.

The vulnerability of the Microsoft SharePoint Server software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges using specially crafted requests...

The vulnerability of the Microsoft SharePoint Server software lies in the insufficient protection of website structures, which allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges...

The vulnerability of the Microsoft SharePoint Server software lies in the insufficient protection of website structures, which allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the DNS server testing tool dnslint lies in its lack of protection for website structure, allowing attackers to execute arbitrary code.

The vulnerability of the DNS server testing tool dnslint exists because measures are not taken to protect the structure of web pages when generating reports. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file that defines the rules for...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to carry out a UXSS attack.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a UXSS attack by utilizing the website structure...

eFront <= 3.5.1 / build 2710 Remote Arbitrary Upload Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront = 3.5.1 / build 2710: Remote File Inclusion Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: eFront $ File affected: studentpage.php / professorpag...

efront-upload.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...

eFront 3.5.1 / build 2710 - Arbitrary File Upload

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- eFront eNYe-Sec - www.enye-sec.org -- Description by the author's page -- eFront is an easy to use, visually attractive, SCORM compatible, eLearning and Human Capital Development system. It is suitable for both company and...

MacOS X Finder '.DS_Store' Information Disclosure

MacOS X creates a hidden file SPDX-FileCopyrightText: 2001 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10756";...