PT-2024-3646 · Microsoft · Azure Migrate

Name of the Vulnerable Software and Affected Versions: Azure Migrate affected versions not specified Description: The issue is related to a lack of protection for the web page structure, allowing a remote attacker to perform a cross-site scripting attack. Recommendations: At the moment, there is ...

The vulnerability of the web server of the microprogramming software for asynchronous servers Moxa NPort 5100A allows a hacker to increase their privileges.

The vulnerability of the web server of Moxa NPort 5100A microprogramming software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Image Box component in the Jeg Elementor Kit plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Image Box component in the Jeg Elementor Kit plugin of the WordPress content management system is related to the lack of protective measures for website page structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the library for performing rapid, customizable HTML AntiSamy cleanup, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the library for performing fast, customizable HTML AntiSamy cleaning is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks XSS...

The vulnerability of the operating environment for managing and maintaining the Dell Unity Operating Environment (DELL Unity OE) allows attackers to carry out XSS attacks. This vulnerability arises due to the lack of measures taken to protect the structure of the web page, enabling attackers to execute such attacks.

The vulnerability in the operating environment for managing and maintaining Dell Unity Operating Environment OE exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Webview2 control in the Microsoft Edge browser allows attackers to perform spoofing attacks.

The vulnerability of the Webview2 control in Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

PT-2024-7375 · Unknown · Форсайт. Аналитическая Платформа

Name of the Vulnerable Software and Affected Versions: Форсайт. Аналитическая платформа affected versions not specified Description: The issue is related to the lack of protection for the web page structure, which can be exploited by a remote attacker to conduct a cross-site scripting XSS attack...

PT-2024-5546 · Antiphish · Antiphish

Name of the Vulnerable Software and Affected Versions: Antiphish affected versions not specified Description: The issue is related to the lack of protection for the web page structure in the Antiphish software, which is used for training employees in information security skills. This can be...

The vulnerability of the CheckUser extension of the software environment for implementing MediaWiki’s hypertext environment allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability of the CheckUser extension of the MediaWiki software environment exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks through message definitions. For...

PT-2024-2861 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue exists due to inadequate protection of the web page structure. Exploitation may allow a remote attacker to execute arbitrary code. This stored Cross-Site Scripting XS...

The vulnerability of the ProofreadPage extension, a software tool for implementing a hypertext environment like MediaWiki, allows a hacker to carry out cross-site scripting attacks.

The vulnerability of the ProofreadPage extension, a software tool for implementing the MediaWiki hypertext environment, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attac...

ROS-20240408-02

A vulnerability in the net/html library of the Go programming language exists due to a failure to take measures to protect the structure of a web page. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, conduct cross-site scripting attacks...

The vulnerability of the OpenNMS Meridian and Horizon network monitoring systems lies in the lack of security measures taken to protect the structure of the web pages. This allows attackers to gain unauthorized access to the protected information related to sessions.

The vulnerability of the OpenNMS Meridian and Horizon network monitoring systems exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information related to sessions...

The vulnerability of the Wiki Page Handler component of the software platform based on Git for collaborative code development on GitLab allows a attacker to perform XSS attacks.

The vulnerability of the Wiki Page Handler component in the git-based software development platform for collaborative code development on GitLab exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS...

The vulnerability of the virtual learning environment Moodle, related to the lack of security measures for the website structure, allows attackers to gain access to read, modify, or delete data, as well as execute cross-site attacks.

The vulnerability in the virtual training environment Moodle is related to the lack of measures taken to protect the structure of the web page during the processing of the GET /?lang= parameter. Exploiting this vulnerability can allow a malicious actor to gain access to read, modify, or delete...

PT-2024-41419 · Ооо "Ивс" · Videograce

Уязвимость функции создания конференции клиента программного обеспечения видеоконференцсвязи VideoGrace связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, провести атаку межсайтового скриптинга XSS...

PT-2024-41414 · Ооо "Ивс" · Videograce

Уязвимость функции создания нового пользователя клиента программного обеспечения видеоконференцсвязи VideoGrace связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, провести атаку межсайтового скриптинга XSS...

The vulnerability of the PRO32 Connect web application lies in the lack of protective measures for the web page structure, allowing attackers to execute arbitrary code.

The vulnerability of the PRO32 Connect web application is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to gain unauthorized access to protected information.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of measures taken to protect the structure of web pages when processing HTML and body tags. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of the FILTER_VALIDATE_EMAIL function in the phpMyFAQ web application, which allows a hacker to execute arbitrary code.

The vulnerability of the FILTERVALIDATEEMAIL function in the phpMyFAQ web application is related to the lack of security measures for the structure of the web page. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...