Lucene search
+L

634 matches found

Positive Technologies
Positive Technologies
added 2024/04/17 12:0 a.m.9 views

PT-2024-7375 · Unknown · Форсайт. Аналитическая Платформа

Name of the Vulnerable Software and Affected Versions: Форсайт. Аналитическая платформа affected versions not specified Description: The issue is related to the lack of protection for the web page structure, which can be exploited by a remote attacker to conduct a cross-site scripting XSS attack...

6.8CVSS6.1AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/04/15 12:0 a.m.9 views

PT-2024-5546 · Antiphish · Antiphish

Name of the Vulnerable Software and Affected Versions: Antiphish affected versions not specified Description: The issue is related to the lack of protection for the web page structure in the Antiphish software, which is used for training employees in information security skills. This can be...

7.5CVSS6.1AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/04/10 12:0 a.m.10 views

The vulnerability of the CheckUser extension of the software environment for implementing MediaWiki’s hypertext environment allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the CheckUser extension of the MediaWiki software environment exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks through message definitions. For...

5.5CVSS5.6AI score0.00474EPSS
SaveExploits1References4Affected Software2
Positive Technologies
Positive Technologies
added 2024/04/09 12:0 a.m.14 views

PT-2024-2861 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue exists due to inadequate protection of the web page structure. Exploitation may allow a remote attacker to execute arbitrary code. This stored Cross-Site Scripting XS...

5.5CVSS5.8AI score0.00503EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2024/04/09 12:0 a.m.16 views

The vulnerability of the ProofreadPage extension, a software tool for implementing a hypertext environment like MediaWiki, allows a hacker to carry out cross-site scripting attacks.

The vulnerability of the ProofreadPage extension, a software tool for implementing the MediaWiki hypertext environment, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attac...

6.4CVSS6AI score0.0032EPSS
SaveExploits0References4Affected Software2
Redos
Redos
added 2024/04/08 12:0 a.m.28 views

ROS-20240408-02

A vulnerability in the net/html library of the Go programming language exists due to a failure to take measures to protect the structure of a web page. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, conduct cross-site scripting attacks...

6.1CVSS6.4AI score0.00851EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/04/06 12:0 a.m.11 views

The vulnerability of the OpenNMS Meridian and Horizon network monitoring systems lies in the lack of security measures taken to protect the structure of the web pages. This allows attackers to gain unauthorized access to the protected information related to sessions.

The vulnerability of the OpenNMS Meridian and Horizon network monitoring systems exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information related to sessions...

7.1CVSS6.6AI score0.00493EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/04/05 12:0 a.m.6 views

The vulnerability of the Wiki Page Handler component of the software platform based on Git for collaborative code development on GitLab allows a attacker to perform XSS attacks.

The vulnerability of the Wiki Page Handler component in the git-based software development platform for collaborative code development on GitLab exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS...

8.7CVSS5.5AI score0.0049EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/02 12:0 a.m.10 views

The vulnerability of the virtual learning environment Moodle, related to the lack of security measures for the website structure, allows attackers to gain access to read, modify, or delete data, as well as execute cross-site attacks.

The vulnerability in the virtual training environment Moodle is related to the lack of measures taken to protect the structure of the web page during the processing of the GET /?lang= parameter. Exploiting this vulnerability can allow a malicious actor to gain access to read, modify, or delete...

6.5CVSS6.3AI score0.00533EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.6 views

PT-2024-41419 · Ооо "Ивс" · Videograce

Уязвимость функции создания конференции клиента программного обеспечения видеоконференцсвязи VideoGrace связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, провести атаку межсайтового скриптинга XSS...

5.5CVSS7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.7 views

PT-2024-41414 · Ооо "Ивс" · Videograce

Уязвимость функции создания нового пользователя клиента программного обеспечения видеоконференцсвязи VideoGrace связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, провести атаку межсайтового скриптинга XSS...

5.5CVSS7.3AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/03/28 12:0 a.m.9 views

The vulnerability of the PRO32 Connect web application lies in the lack of protective measures for the web page structure, allowing attackers to execute arbitrary code.

The vulnerability of the PRO32 Connect web application is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:0 a.m.5 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to gain unauthorized access to protected information.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of measures taken to protect the structure of web pages when processing HTML and body tags. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

6.4CVSS6.6AI score0.00704EPSS
SaveExploits1References23Affected Software11
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:0 a.m.9 views

The vulnerability of the FILTER_VALIDATE_EMAIL function in the phpMyFAQ web application, which allows a hacker to execute arbitrary code.

The vulnerability of the FILTERVALIDATEEMAIL function in the phpMyFAQ web application is related to the lack of security measures for the structure of the web page. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

6.5CVSS6AI score0.00691EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:0 a.m.11 views

The vulnerability of Microsoft Edge browser, related to insufficient protection of the web page structure, allows attackers to circumvent security restrictions and perform cross-site scripting attacks.

The vulnerability of Microsoft Edge relates to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and perform cross-site scripting attacks using a specially created malicious web page...

5CVSS5.2AI score0.0112EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:0 a.m.15 views

The vulnerability of the phpMyFAQ web application lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the phpMyFAQ web application is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...

5.8CVSS6.1AI score0.00542EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/22 12:0 a.m.8 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

5.5CVSS5.4AI score0.00427EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.14 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.00427EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.16 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.2AI score0.00427EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:0 a.m.13 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.00427EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder