Lucene search
+L

881 matches found

BDU FSTEC
BDU FSTEC
•added 2024/10/23 12:00 a.m.•17 views

The vulnerability of the TinyMCE formatted text editor arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the TinyMCE formatted text editor exists because measures to protect the structure of web pages are not taken. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

6.4CVSS6.8AI score0.00529EPSS
SaveExploits0References8Affected Software2
Redos
Redos
•added 2024/10/22 12:00 a.m.•31 views

ROS-20241021-10

The vulnerability of the SI library for asynchronous DNS c-ares queries is related to failure to take measures to protect the structure of a web page. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, gain access to sensitive data, compromis...

6.8CVSS7AI score0.02814EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2024/10/22 12:00 a.m.•17 views

PT-2024-27 · Unknown · Pt Sandbox +1

Name of the Vulnerable Software and Affected Versions: PT MultiScanner and PT Sandbox affected versions not specified Description: The issue is related to the lack of protection for the web page structure in PT MultiScanner and PT Sandbox. This could allow a remote attacker to execute JavaScript...

9CVSS7.3AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/10/15 12:00 a.m.•2 views

PT-2024-10380

Name of the Vulnerable Software and Affected Versions amoCRM affected versions not specified Description The issue is related to the lack of protection of the web page structure in amoCRM, a cloud-based customer relationship management system. This could allow a remote attacker to conduct...

8.5CVSS5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/10/14 12:00 a.m.•25 views

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge browsers allows attackers to perform cross-site scripting attacks.

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6.9AI score0.00275EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2024/10/09 12:00 a.m.•25 views

The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

7.8CVSS7.9AI score0.46109EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/10/08 12:00 a.m.•15 views

PT-2024-6806 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server versions affected versions not specified Description: The issue is related to the Power BI Report Server, where a lack of proper web page structure protection can be exploited. This can allow a remote attacker to perfor...

8.8CVSS6.1AI score0.01831EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/10/04 12:00 a.m.•18 views

The vulnerability in Microsoft Edge browsers arises due to the lack of measures taken to protect the structure of web pages. This allows attackers to execute spoofing attacks.

The vulnerability of Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to perform a spear-phishing attack remotely...

5CVSS5.4AI score0.00493EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/09/30 12:00 a.m.•14 views

The vulnerability of the Blink web browser component in Google Chrome, which allows a hacker to compromise data integrity

The vulnerability of the Blink web browser component in Google Chrome relates to the lack of protective measures for the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

4.3CVSS6.3AI score0.01331EPSS
SaveExploits1References11Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/09/30 12:00 a.m.•17 views

The vulnerability of Google Chrome’s web browser extensions, which allows a perpetrator to compromise data integrity

The vulnerability of Google Chrome’s web browser extensions is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

4.3CVSS6.3AI score0.01481EPSS
SaveExploits1References11Affected Software2
Positive Technologies
Positive Technologies
•added 2024/09/19 12:00 a.m.•4 views

PT-2024-6623

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Edge Chromium-based, allowing a remote attacker to perform a spoofing attack...

5CVSS5.9AI score0.00493EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
•added 2024/09/13 12:00 a.m.•17 views

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...

5.5CVSS5.9AI score0.64063EPSS
SaveExploits0References9Affected Software4
Positive Technologies
Positive Technologies
•added 2024/09/10 12:00 a.m.•4 views

PT-2024-6654

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365 On-Premises, which can be exploited by a remote attacker to...

7.6CVSS5.8AI score0.0089EPSS
SaveExploits0References7
Redos
Redos
•added 2024/09/02 12:00 a.m.•41 views

ROS-20240902-04

A vulnerability in the xmlattr filter of the Jinja2 templating engine for the Python programming language is related to the failure to take measures to protect the structure of a web page. to protect the structure of a web page. Exploitation of the vulnerability could allow an attacker acting...

6.1CVSS6.1AI score0.00892EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2024/08/30 12:00 a.m.•23 views

The vulnerability of the virtual learning environment Moodle, which exists due to the lack of measures taken to protect the structure of the web page, allows a hacker to execute arbitrary code.

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by creating a specially crafted request...

9CVSS8.2AI score0.87536EPSS
SaveExploits8References6Affected Software2
Positive Technologies
Positive Technologies
•added 2024/08/23 12:00 a.m.•13 views

PT-2024-7308 · Icms · Icms

Name of the Vulnerable Software and Affected Versions: iCMS affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in the iCMS content management system. An attacker can exploit this issue by sending a specially crafted HTTP request to...

6.4CVSS6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/08/23 12:00 a.m.•14 views

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5.5CVSS5.4AI score0.00289EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/08/21 12:00 a.m.•26 views

PT-2024-5842 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue exists due to inadequate protection of the web page structure in Adobe Experience Manager, allowing a remote attacker to conduct a cross-site scripting XSS attack. Th...

5.5CVSS6.2AI score0.00327EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2024/08/21 12:00 a.m.•16 views

The vulnerability of the Netcat module in CMS systems allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the Netcat landing module in CMS systems exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

9CVSS5.8AI score
SaveExploits0References1Affected Software1
Redos
Redos
•added 2024/08/20 12:00 a.m.•46 views

ROS-20240820-01

The vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to the use of memory after its release. memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code using a specially crafted w...

8.4CVSS8.1AI score0.00971EPSS
SaveExploits3
Rows per page
Query Builder