Lucene search
+L

1133 matches found

BDU FSTEC
BDU FSTEC
added 2025/06/19 12:0 a.m.8 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00273EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/17 12:0 a.m.10 views

The vulnerability of Dell Storage Manager’s cluster management software lies in its lack of measures to protect the website structure, allowing attackers to carry out XSS attacks.

The vulnerability of Dell Storage Manager’s cluster management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

3.5CVSS5.4AI score0.00251EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/06/17 12:0 a.m.9 views

The vulnerability of the implementation of the WOPI protocol for the ONLYOFFICE Docs office online package allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the WOPI protocol implementation in the ONLYOFFICE Docs online package DocumentServer is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially...

6.4CVSS5.2AI score0.40668EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/17 12:0 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to gain access to user accounts.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to a user’s account...

8.7CVSS5.9AI score0.08971EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/13 12:0 a.m.11 views

The vulnerability of the Cisco Webex web conferencing platform, which exists due to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Cisco Webex web conferencing platform exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.0028EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/06/10 12:0 a.m.10 views

The vulnerability of the file loading function in the Polarion ALM application lifecycle management tool allows attackers to carry out XSS attacks.

The vulnerability of the file loading function in the Polarion ALM application lifecycle management tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform XSS attacks remotely...

6.5CVSS5.4AI score0.00315EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.10 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE allows a attacker to perform XSS attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

8.7CVSS8AI score0.0054EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.11 views

The vulnerability of the IBM Aspera Faspex file-sharing application, related to the lack of protection for website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the IBM Aspera Faspex file-sharing application is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.2AI score0.00239EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/06 12:0 a.m.11 views

The vulnerability of the NAT Mapping configuration of the Virtual Server module in the microprogramming-based router software of TOTOLINK A3002RU allows attackers to carry out cross-site scripting (XSS) attacks.

The vulnerability of the NAT Mapping configuration of the Virtual Server module in the TOTOLINK A3002RU router software lies in the lack of protection for the website structure when processing the Service Type parameter. Exploiting this vulnerability allows an attacker to perform cross-site...

4CVSS5AI score0.00367EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/03 12:0 a.m.10 views

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

9CVSS7.7AI score0.00426EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.11 views

The vulnerability of the URL Filtering component of the TOTOLINK N150RT router’s microprogramming software allows attackers to carry out cross-site scripting attacks.

The vulnerability of the URL Filtering component of the TOTOLINK N150RT router’s microprogramming software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

4CVSS5.1AI score0.00614EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/23 12:0 a.m.10 views

The vulnerability of the VPN component of the TOTOLINK A3002R router’s microprogramming software allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the VPN component of the TOTOLINK A3002R router’s microprogramming software relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

4CVSS5AI score0.00374EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/21 12:0 a.m.11 views

The vulnerability of the VMware Aria Automation (previously vRealize Automation) software, a virtualization platform from VMware Cloud Foundation, and the VMware Telco Cloud Platform, a telecommunications cloud platform, stems from the lack of security measures for the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the VMware Aria Automation previously vRealize Automation software, as well as the VMware Cloud Foundation virtualization platform and the VMware Telco Cloud Platform cloud communication platform, is related to the lack of security measures for the website structure. Exploiti...

8.5CVSS7.7AI score0.00343EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2025/05/20 12:0 a.m.13 views

The vulnerability of Adobe Connect’s instant messaging program lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Connect instant messaging program is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00264EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:0 a.m.15 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to...

8.7CVSS5.2AI score0.00781EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.9 views

The vulnerability of the IBM Aspera Faspex file-sharing application lies in the lack of protection for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the IBM Aspera Faspex file-sharing application relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00259EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.9 views

The vulnerability of TOTOLINK N150RT router microprogramming software arises from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of TOTOLINK N150RT router microprogramming software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using the Hostname parameter...

4CVSS5AI score0.00402EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/05 12:0 a.m.13 views

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in the lack of security measures for website structure protection. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.59023EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.18 views

The vulnerability of the Root Access Control component of the Totolink X2000R microprogramming system allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Root Access Control component of the Totolink X2000R microprogramming system for routers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00389EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.12 views

The vulnerability in the virtual learning environment Moodle, related to the lack of protective measures for website structures, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5.5CVSS5.8AI score0.00315EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder