Lucene search
+L

115 matches found

BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•12 views

The vulnerability of the FORBID_TAGS() function in the JavaScript library for secure cleaning and protection of HTML code by DOMPurify allows a attacker to execute arbitrary code.

The vulnerability of the FORBIDTAGS function in the JavaScript library for secure cleaning and protection of HTML code by DOMPurify is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

6.4CVSS7.4AI score0.00404EPSS
SaveExploits1References4Affected Software2
Redos
Redos
•added 2026/07/20 12:00 a.m.•19 views

ROS-20260720-73-0073

The vulnerability of the Sanitizer API on Google Chrome and Microsoft Edge browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.4CVSS6.4AI score0.00195EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/06/29 12:00 a.m.•24 views

The vulnerability of Microsoft Edge browsers relates to the lack of protection for website structure, allowing attackers to perform data substitution attacks.

The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability can allow a malicious actor to perform data substitution remotely...

9CVSS5.7AI score0.00523EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/06/17 12:00 a.m.•19 views

The vulnerability of the Adobe Experience Manager content and media management system lies in the lack of measures taken to protect the structure of web pages. This allows a malicious actor to execute arbitrary JavaScript code within the context of a legitimate user’s session.

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code within the authorized user’s session...

5.5CVSS6.3AI score0.00359EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/06/17 12:00 a.m.•18 views

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of measures to protect the structure of web pages. This allows attackers to inject malicious scripts into vulnerable form fields.

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to inject malicious scripts into vulnerable fields within the system...

5.5CVSS5.8AI score0.0039EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/06/17 12:00 a.m.•20 views

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of measures to protect the structure of web pages. This allows attackers to inject malicious scripts into vulnerable form fields.

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to inject malicious scripts into vulnerable fields within the system...

5.5CVSS5.8AI score0.0039EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/06/17 12:00 a.m.•18 views

The vulnerability of Adobe Experience Manager’s content and media management system lies in its lack of measures to protect the structure of web pages. This allows attackers to inject malicious scripts into vulnerable form fields.

The vulnerability of the Adobe Experience Manager content and media management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to inject malicious scripts into vulnerable fields within the system...

5.5CVSS5.8AI score0.0039EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/05/28 12:00 a.m.•17 views

The vulnerability of the RoundCube Webmail email client, related to the lack of protective measures for the website structure, allows attackers to execute arbitrary code.

The vulnerability of the RoundCube Webmail client is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created SVG document...

7.2CVSS7.2AI score0.00446EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/27 12:00 a.m.•23 views

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of measures taken to protect the structure of web pages, allows a violator to execute arbitrary code.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

5.5CVSS7.2AI score0.00272EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/05/27 12:00 a.m.•18 views

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of measures taken to protect the structure of web pages, allows a violator to execute arbitrary code.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

5.5CVSS7.2AI score0.00254EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/05/25 12:00 a.m.•24 views

The vulnerability of the modular interface between web servers and web applications in Rack, related to the lack of protective measures for the web page structure, allows attackers to execute arbitrary code.

The vulnerability of the modular interface between web servers and Rack web applications is related to the lack of security measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

5.4CVSS7.2AI score0.0028EPSS
SaveExploits1References10Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/05/22 12:00 a.m.•19 views

The vulnerability in the Open WebUI web interface, related to deficiencies in the security measures protecting the structure of web pages, allows attackers to execute XSS attacks.

The vulnerability of the Open WebUI web interface is related to deficiencies in the security measures used to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a malicious SVG file...

5.5CVSS6.5AI score0.00239EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/06 12:00 a.m.•22 views

The vulnerability of the MFlash secure data exchange platform lies in the lack of measures taken to protect the structure of the web page, allowing attackers to inject arbitrary HTML tags.

The vulnerability of the MFlash secure messaging platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML tags remotely...

4.1CVSS5.6AI score
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2026/04/27 12:00 a.m.•5 views

PT-2026-42278

Уязвимость программы автоматизированной разработки документов Doczilla связана с непринятием мер по защите структуры веб-страницы...

8.5CVSS5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/04/20 12:00 a.m.•17 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.7AI score0.0028EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/04/20 12:00 a.m.•22 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

9.4CVSS5.7AI score0.00744EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
•added 2026/01/27 12:00 a.m.•20 views

The vulnerability of the Microsoft account, related to the failure to protect the structure of the web page, allows a hacker to replace the user’s account data.

The vulnerability of the Microsoft account is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to replace the user’s credentials remotely...

9.4CVSS6.5AI score0.00419EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/01/26 12:00 a.m.•17 views

The vulnerability of the QGIS QWC2 web application, related to the lack of protective measures for the web page structure, allows a hacker to execute arbitrary code.

The vulnerability of the QGIS QWC2 web application is related to the lack of protective measures for the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.5CVSS7.3AI score0.0042EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/01/23 12:00 a.m.•4 views

PT-2026-41742

Уязвимость программного комплекса «Взлет СП» связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

5.5CVSS5.8AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/12/29 12:00 a.m.•19 views

The vulnerability of the office online package ONLYOFFICE Docs, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the office online package ONLYOFFICE Docs DocumentServer is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS5.6AI score0.002EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder