Lucene search
+L

658 matches found

BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.15 views

The vulnerability of the QES operating system, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the QES operating system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

9CVSS5.7AI score0.00789EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:00 a.m.11 views

The vulnerability of Firefox browsers, Firefox ESR, and the Thunderbird email client is related to the lack of protective measures for website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerabilities of Firefox browsers, Firefox ESR, and the email client Thunderbird are related to the lack of security measures for handling web page structures. Exploiting these vulnerabilities allows a remote attacker to perform cross-site scripting attacks by redirecting users to the...

6.1CVSS7AI score0.01546EPSS
SaveExploits1References15Affected Software9
BDU FSTEC
BDU FSTEC
added 2020/12/22 12:00 a.m.11 views

The vulnerability of the Junos operating system arises from the lack of measures taken to protect the web page structure. This allows attackers to intercept the HTTP/HTTPS session of the target user and perform administrative actions.

The vulnerability of the Junos operating system exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to capture the HTTP/HTTPS session of the target user and perform administrative actions...

10CVSS7.6AI score0.01556EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:00 a.m.17 views

The vulnerability of the Jenkins automation server, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Jenkins automation server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.01237EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:00 a.m.10 views

The vulnerability of the Jenkins RapidDeploy Plugin’s connected server module, related to the lack of security measures for the website structure, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Jenkins RapidDeploy Plugin’s connected server module exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00735EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/11 12:00 a.m.12 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

6.8CVSS5.9AI score0.01678EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/08 12:00 a.m.13 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser using a specially crafted...

9CVSS6.3AI score0.01884EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/18 12:00 a.m.11 views

The vulnerability in the web-based management interface of Cisco SD-WAN allows a attacker to execute cross-site attacks.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.1CVSS6AI score0.0084EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.11 views

The vulnerability of the jQuery library lies in its lack of measures to protect the structure of web pages, allowing attackers to compromise the integrity of the protected information.

The vulnerability of the jQuery library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

6.1CVSS6.6AI score0.99215EPSS
SaveExploits8References22Affected Software73
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.11 views

The vulnerability in the web-based management interface of Cisco SD-WAN allows a attacker to execute cross-site attacks.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.4CVSS6.3AI score0.00649EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2020/11/10 12:00 a.m.15 views

PT-2020-4769 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to perform a...

5.5CVSS5.1AI score0.01432EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2020/11/10 12:00 a.m.14 views

PT-2020-4803 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to the failure to protect the web page structure in Microsoft Dynamics 365, allowing for potential cross-site scripting attacks. An attacker...

5.5CVSS5.1AI score0.01432EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2020/11/10 12:00 a.m.11 views

PT-2020-4802 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited for cross-site scripting attacks. This...

5.5CVSS5AI score0.01432EPSS
SaveExploits0References11
Prion
Prion
added 2020/10/26 4:15 p.m.23 views

Cross site scripting

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

3.5CVSS5.2AI score0.00622EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/13 12:00 a.m.16 views

The vulnerability of the OLYMPOX educational control system’s web application, which arises from the failure to protect the structure of the web page, allows a hacker to inject arbitrary code.

The vulnerability of the OLYMPOX educational control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

6.5CVSS6.5AI score0.13112EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/01 12:00 a.m.8 views

The vulnerability of Apache CXF web services lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Apache CXF web services is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS6.3AI score0.07055EPSS
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.10 views

The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software lies in the lack of measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS6AI score0.00561EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:00 a.m.15 views

The vulnerability of the Microsoft SharePoint Foundation software, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Foundation software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks using specially crafted requests...

5.4CVSS6AI score0.01634EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/09/17 12:00 a.m.16 views

The vulnerability of the ColdFusion interpreter, related to the lack of measures taken to protect the structure of web pages, allows attackers to inject arbitrary web scripts or HTML code and gain access to protected information.

The vulnerability of the ColdFusion interpreter is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to inject arbitrary web scripts or HTML code remotely, gain access to protected information, and modify the appearance of the...

6.1CVSS6.9AI score0.02391EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/09/09 12:00 a.m.11 views

The vulnerability of Microsoft SharePoint Server packages arises from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of Microsoft SharePoint Server packages exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information by sending a specially...

6.4CVSS6.6AI score0.01841EPSS
SaveExploits0References3
Rows per page
Query Builder