Lucene search
+L

1109 matches found

BDU FSTEC
BDU FSTEC
•added 2021/03/11 12:00 a.m.•18 views

The vulnerability of the TeX expression transformation filter in the virtual learning environment Moodle allows attackers to perform cross-site scripting attacks.

The vulnerability of the TeX expression transformation filter in the virtual learning environment Moodle is related to insufficient cleaning of the data provided by users. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

4.4CVSS6.3AI score0.00754EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/03/11 12:00 a.m.•16 views

The vulnerability of the virtual learning environment Moodle, related to insufficient cleaning of data entered by users in certain search queries, allows attackers to perform cross-site scripting attacks.

The vulnerability in the virtual learning environment Moodle is related to insufficient cleaning of data entered by users in certain search queries. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.8CVSS6.3AI score0.00816EPSS
SaveExploits0References6Affected Software1
HackRead
HackRead
•added 2021/02/26 5:10 p.m.•43 views

Apple Glass may feature 3D Audio and Self-Cleaning in new patent

By Deeba Ahmed A new patent applied by Apple suggests Apple Glass would have an automatic cleaning function called self-cleaning or opticals. This is a post from HackRead.com Read the original post: Apple Glass may feature 3D Audio and Self-Cleaning in new patent...

1.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•15 views

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process of software products allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the fixcrlf class implementation in the Apache Ant tool for automating the compilation process is related to insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker, operating remotely, t...

7.8CVSS7.5AI score0.08016EPSS
SaveExploits0References13Affected Software20
BDU FSTEC
BDU FSTEC
•added 2021/02/16 12:00 a.m.•16 views

The vulnerability of Java-Framework templates in the Apache Camel framework allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Java-Framework templates in the Apache Camel framework lies in insufficient cleaning of special elements in the output data used by the incoming component. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

7.8CVSS7.4AI score0.04491EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/02/09 12:00 a.m.•21 views

The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Data Center Network Manager DCNM management interface relates to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

6.5CVSS5.9AI score0.00614EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/01/28 12:00 a.m.•20 views

The vulnerability in the web interface for managing microprogrammed software in Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W routers allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interface for microprogramming software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability can allow a remote attacker to execute...

9CVSS7.5AI score0.02474EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/12/03 12:00 a.m.•25 views

The vulnerability of the Drupal CMS system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the Drupal CMS system’s kernel is related to insufficient cleaning of special elements in the output data used by the incoming components. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9.9CVSS8AI score0.3535EPSS
SaveExploits3References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/11/02 12:00 a.m.•11 views

The vulnerability of the jQuery library arises from insufficient cleaning of data provided by users when elements of the <option> type are passed. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the jQuery library exists due to insufficient cleaning of the data provided by the user when elements with the tag are passed to jQuery’s DOM methods. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.1CVSS6.7AI score0.84887EPSS
SaveExploits7References31Affected Software43
Openbugbounty
Openbugbounty
•added 2020/10/25 1:18 p.m.•11 views

platinumcleaning.com Cross Site Scripting vulnerability OBB-1445433

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/10/16 5:20 a.m.•12 views

longbeachdraincleaning.net Cross Site Scripting vulnerability OBB-1412424

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/10/06 4:22 p.m.•11 views

longbeachdraincleaning.net Cross Site Scripting vulnerability OBB-1385938

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/09/29 12:00 a.m.•8 views

Binary vulnerability in mkclean (CNVD-2020-58376)

mkclean is a command line tool for cleaning and optimizing Matroska files that have been mixed. A binary vulnerability exists in mkclean that can be exploited by an attacker to cause a denial of service...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/09/28 5:31 a.m.•10 views

longbeachdraincleaning.net Cross Site Scripting vulnerability OBB-1369791

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/07/31 12:00 a.m.•15 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests, allowing attackers to perform cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in insufficient cleaning of web requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted web requests to the vulnerable servers...

5.4CVSS6AI score0.02229EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
•added 2020/07/21 12:00 a.m.•14 views

The vulnerability of the web interface of the Cisco Data Center Network Manager system allows a perpetrator to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or gain unauthorized access to protected information...

5.5CVSS6AI score0.00622EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/07/15 12:00 a.m.•18 views

The vulnerability of the SAP Hybris Commerce e-commerce platform, related to the lack of measures for cleaning incoming data, allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the SAP Hybris Commerce e-commerce platform is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6AI score0.01325EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
•added 2020/07/01 12:00 a.m.•15 views

Windows cleaning assistant input validation error vulnerability

Windows cleaning assistant is a Trojan and malware cleaning application for Windows systems from the Windows cleaning assistant team. The program supports Microsoft Backup Tool, File Extraction, File Shredding, Internet Explorer Cleaning and Disk Cleanup. An input validation error vulnerability...

7.8CVSS6.4AI score0.0035EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/07/01 12:00 a.m.•18 views

Windows cleaning assistant input validation error vulnerability (CNVD-2020-51417)

Windows cleaning assistant is a Trojan and malware cleaning application for Windows systems from the Windows cleaning assistant team. The program supports Microsoft Backup Tool, File Extraction, File Shredding, Internet Explorer Cleaner and Disk Cleaner. An input validation error vulnerability...

7.8CVSS6.4AI score0.0035EPSS
SaveExploits0References1
OSV
OSV
•added 2020/06/30 3:15 p.m.•12 views

CVE-2020-14956

In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA...

7.8CVSS7.2AI score0.0035EPSS
SaveExploits0References2
Rows per page
Query Builder