Lucene search
+L

652 matches found

BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.11 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

6.1CVSS6.5AI score0.01325EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:00 a.m.17 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

5.4CVSS6.1AI score0.01068EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:00 a.m.19 views

The vulnerability in the web interface for controlling Cisco Registered Envelope Service allows a perpetrator to inject arbitrary code into the web page that is uploaded.

The vulnerability of the web interface for managing security information transmitted by the Cisco Registered Envelope Service is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the...

5.5CVSS6.1AI score0.0091EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/23 12:00 a.m.13 views

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Unified Communications Manager web interface is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely using a specially crafted link...

6.1CVSS6AI score0.01783EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/01 12:00 a.m.13 views

The vulnerability of the FortiOS operating system arises from insufficient protection of the web page structure, allowing attackers to inject arbitrary JavaScript or HTML code.

The vulnerability of the FortiOS operating system arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code remotely...

6.1CVSS5.6AI score0.0138EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/01 12:00 a.m.11 views

The vulnerability in the FortiOS operating system’s web interface allows a hacker to inject any desired JavaScript or HTML code.

The vulnerability in the user interface of the FortiOS operating system arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code using the “redirect” parameter...

6.1CVSS5.7AI score0.05937EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/01 12:00 a.m.12 views

The vulnerability of the DHCP Monitor web interface of the FortiOS operating system allows a hacker to inject arbitrary JavaScript or HTML code.

The vulnerability of the DHCP Monitor web interface of the FortiOS operating system arises due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code remotely...

5.3CVSS5.6AI score0.01184EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/31 12:00 a.m.16 views

The vulnerability of the FortiOS operating system arises from insufficient protection of the web page structure, allowing attackers to inject arbitrary JavaScript or HTML code.

The vulnerability of the FortiOS operating system is due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code using a specially crafted URI...

6.1CVSS5.7AI score0.01076EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/09/28 12:00 a.m.11 views

The vulnerabilities of the components “/com.sap.portal.themes.integrity.personalization”, “/com.sap.portal.themes.integrity.url”, and “/com.sap.portal.themes.integrity.serverFrameworkCockpit” of the SAP NetWeaver software integration platform allow a malicious individual to inject arbitrary HTML tags into a page.

The vulnerability of the components “/com.sap.portal.themes.integrity.personalization”, “/com.sap.portal.themes.integrity.url”, and “/com.sap.portal.themes.integrity.serverFrameworkCockpit” of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the...

6.4CVSS5.6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/09/28 12:00 a.m.27 views

The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform allows a hacker to inject any HTML tags into a page.

The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of web pages. This vulnerability allows a malicious actor to inject arbitrary...

6.4CVSS5.6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/05/15 12:00 a.m.12 views

The vulnerability of the ColdFusion interpreter, which allows a hacker to modify the structure of a web page

The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to remotely alter the structure of the web page...

4.3CVSS6.3AI score0.03094EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2017/04/20 12:00 a.m.13 views

The vulnerability of the iOS operating system, which allows a perpetrator to carry out a UXSS attack

The vulnerability of the Safari Reader component in the iOS operating system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out a UXSS attack using a specially crafted website...

4.3CVSS6.6AI score0.01137EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/04/13 12:00 a.m.23 views

The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain information about the integration platform and the operating system, enabling them to carry out UXSS attacks.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to obtain information about the integration platform and the operating...

4.3CVSS6.9AI score0.04237EPSS
SaveExploits4References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2017/03/09 12:00 a.m.12 views

The vulnerability of the iOS operating system, which allows attackers to carry out XSS attacks

The vulnerability of the WebKit component of the iOS operating system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform XSS attacks injection of malicious code on the Safari browser remotely...

4.3CVSS6.6AI score0.00721EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/01/26 12:00 a.m.16 views

The vulnerability of Google Chrome allows a hacker to obtain information about the integration platform and the operating system.

The vulnerability of the Blink component in Google Chrome exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain information about the integration platform and the operating system...

4.3CVSS6.9AI score0.00737EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2016/08/11 12:00 a.m.7 views

PT-2016-3449 · Xmlsoft +9 · Libxml2 +9

Name of the Vulnerable Software and Affected Versions: libxml2 affected versions not specified Description: The issue is related to a possible cross-site scripting vulnerability in libxml2. This vulnerability may allow a remote attacker to access and compromise confidential data. The vulnerabilit...

8.8CVSS6.4AI score0.22791EPSS
SaveExploits8References109
BDU FSTEC
BDU FSTEC
added 2016/07/11 12:00 a.m.16 views

The vulnerability of the antivirus software Internet Security allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the antivirus software Internet Security exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

4.3CVSS6.6AI score0.01636EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/05/23 12:00 a.m.16 views

The vulnerability of the ColdFusion interpreter allows attackers to inject arbitrary Web or HTML code.

The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired Web or HTML code remotely...

4.3CVSS6.4AI score0.03056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2016/04/14 12:00 a.m.13 views

The vulnerability of the microprogramming software of the Storeonce Backup backup system allows a intruder to inject arbitrary Web or HTML code.

The vulnerability of Storeonce Backup’s microprogramming software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

3.5CVSS6AI score0.01153EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:00 a.m.10 views

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any Web or HTML code.

The vulnerability of the application interface of IBM WebSphere Portal exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

4.3CVSS6.8AI score0.00801EPSS
SaveExploits0References2
Rows per page
Query Builder