Lucene search
+L

767 matches found

BDU FSTEC
BDU FSTEC
•added 2024/12/02 12:00 a.m.•20 views

The vulnerability of the RenderTune rendering tool, related to the lack of measures taken to protect website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the RenderTune rendering tool is related to the lack of measures taken to protect the structure of web pages when processing the Upload Title parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

7.5CVSS5.3AI score0.01485EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/02 12:00 a.m.•16 views

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence, related to the lack of protection for website structure, allows attackers to enhance their privileges.

The vulnerability of the graphical tool for creating and supporting artificial intelligence in Microsoft Copilot Studio relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to enhance their privileges remotely...

9.4CVSS8AI score0.00959EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/29 12:00 a.m.•13 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the lack of security measures for protecting the structure of web pages. This allows attackers to execute DOM-Based XSS attacks.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the lack of security measures for protecting the structure of web pages. Exploiting these vulnerabilities can allow attackers to execute DOM-Based XSS attacks...

5CVSS7.1AI score0.00489EPSS
SaveExploits0References19Affected Software8
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•14 views

The vulnerability of the Safari browser on iOS, iPadOS, VisionOS, and Mac OS allows attackers to execute arbitrary code.

The vulnerability of the Safari browser on iOS, iPadOS, VisionOS, and Mac OS is related to the lack of security measures for handling web page structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.10075EPSS
SaveExploits1References17Affected Software8
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•14 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.5AI score0.00359EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/25 12:00 a.m.•23 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out attacks using cross-site scripting (XSS).

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out attacks using cross-site scripting XSS...

6.4CVSS5.2AI score0.00367EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/25 12:00 a.m.•19 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00347EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/21 12:00 a.m.•23 views

The vulnerability of the PDF document viewing tool within the XWiki PDF Viewer Macro (Pro) allows attackers to perform cross-site scripting attacks by exploiting a lack of protection for the structure of web pages.

The vulnerability of the PDF document viewing tool within the XWiki PDF Viewer Macro Pro is related to the lack of measures taken to protect the structure of the web page during the processing of the width parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site...

9CVSS5.2AI score0.00434EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/13 12:00 a.m.•27 views

The vulnerability of the Portal for ArcGIS web portal, related to the lack of measures taken to protect the structure of the web page, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Portal for ArcGIS web portal is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00358EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/07 12:00 a.m.•18 views

A vulnerability in the configuration of the CI/CD application deployment and continuous integration system JetBrains TeamCity allows a hacker to execute cross-site scripting attacks.

The vulnerability in the configuration of CI/CD system’s backup settings in JetBrains TeamCity exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.01409EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•15 views

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

5.5CVSS5.2AI score0.00368EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/10/24 12:00 a.m.•14 views

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.0026EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/23 12:00 a.m.•14 views

The vulnerability of the TinyMCE formatted text editor arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the TinyMCE formatted text editor exists because measures to protect the structure of web pages are not taken. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

6.4CVSS6.8AI score0.00529EPSS
SaveExploits0References8Affected Software2
Positive Technologies
Positive Technologies
•added 2024/10/22 12:00 a.m.•14 views

PT-2024-27 · Unknown · Pt Sandbox +1

Name of the Vulnerable Software and Affected Versions: PT MultiScanner and PT Sandbox affected versions not specified Description: The issue is related to the lack of protection for the web page structure in PT MultiScanner and PT Sandbox. This could allow a remote attacker to execute JavaScript...

9CVSS7.3AI score
SaveExploits0References4
Redos
Redos
•added 2024/10/22 12:00 a.m.•30 views

ROS-20241021-10

The vulnerability of the SI library for asynchronous DNS c-ares queries is related to failure to take measures to protect the structure of a web page. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, gain access to sensitive data, compromis...

6.8CVSS7AI score0.02814EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2024/10/14 12:00 a.m.•25 views

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge browsers allows attackers to perform cross-site scripting attacks.

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6.9AI score0.00275EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/10/09 12:00 a.m.•25 views

The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

7.8CVSS7.9AI score0.46109EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/08 12:00 a.m.•14 views

PT-2024-6806 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server versions affected versions not specified Description: The issue is related to the Power BI Report Server, where a lack of proper web page structure protection can be exploited. This can allow a remote attacker to perfor...

8.8CVSS6.1AI score0.01831EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/10/04 12:00 a.m.•18 views

The vulnerability in Microsoft Edge browsers arises due to the lack of measures taken to protect the structure of web pages. This allows attackers to execute spoofing attacks.

The vulnerability of Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to perform a spear-phishing attack remotely...

5CVSS5.4AI score0.00493EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/09/30 12:00 a.m.•17 views

The vulnerability of Google Chrome’s web browser extensions, which allows a perpetrator to compromise data integrity

The vulnerability of Google Chrome’s web browser extensions is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

4.3CVSS6.3AI score0.01481EPSS
SaveExploits1References11Affected Software2
Rows per page
Query Builder