Lucene search
+L

645 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.12 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

The vulnerability of Adobe Connect web conference software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.5AI score0.00403EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/14 12:0 a.m.13 views

The vulnerability of the software for managing identities and access control in Keycloak arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute arbitrary code.

The vulnerability of the software for managing identities and access on Keycloak exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

6.4CVSS7.1AI score0.37246EPSS
SaveExploits3References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:0 a.m.12 views

The vulnerability of the doRTAAccessCTConfig method in the software for testing and monitoring network quality by Visualware MyConnection Server allows a hacker to circumvent existing security restrictions.

The vulnerability of the doRTAAccessCTConfig method exists in the software used for testing and monitoring network quality by Visualware MyConnection Server. This vulnerability arises due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a...

10CVSS7.5AI score0.01344EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.10 views

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in its lack of protection for website structures. This allows attackers to insert arbitrary information into wiki projects.

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to insert arbitrary information into the wiki project remotely...

10CVSS6AI score0.00714EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/07 12:0 a.m.14 views

PT-2023-5302 · Unknown · Modulys Gp

Name of the Vulnerable Software and Affected Versions: MODULYS GP MOD3GP-SY-120K affected versions not specified Description: The issue exists due to a lack of protection for the web page structure, allowing a remote attacker to perform cross-site scripting XSS attacks. This could enable an...

6.5CVSS6.2AI score0.00314EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.14 views

The vulnerability of CKEditor’s WYSIWYG editor, related to the lack of protection for website structure, allows attackers to execute XSS attacks.

The vulnerability of the CKEditor WYSIWYG editor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.7AI score0.02097EPSS
SaveExploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.12 views

The vulnerability of the application development environment and the Angular development platform, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the application development environment and the Angular single-page application platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.7AI score0.06817EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/07 12:0 a.m.13 views

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to carry out cross-site scripting attacks.

The vulnerability in the Splunk Web interface of the Splunk Enterprise operational analytics platform is related to the lack of protection for the web page structure during the processing of the final endpoint /app/search/table. Exploiting this vulnerability allows a malicious actor to perform...

8.5CVSS6AI score0.00541EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:0 a.m.12 views

The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of protection for website structures. This allows attackers to replace the displayed URLs with malicious ones.

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to replace the displayed URL...

6.4CVSS6.3AI score0.02268EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/30 12:0 a.m.16 views

PT-2023-6886 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: NagiosXI affected versions not specified Description: The issue is related to the lack of protection of the web page structure in NagiosXI, which can be exploited by a remote attacker to perform a reflected XSS attack. Recommendations: At the...

8.3CVSS6.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/07 12:0 a.m.13 views

PT-2023-7553

Name of the Vulnerable Software and Affected Versions OpenCMS affected versions not specified Description The issue is related to the lack of protection for the web page structure in OpenCMS, allowing a remote attacker to conduct cross-site scripting attacks. Recommendations At the moment, there ...

10CVSS5.7AI score0.0059EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2023/08/07 12:0 a.m.11 views

PT-2023-7554

Name of the Vulnerable Software and Affected Versions OpenCMS affected versions not specified Description The issue is related to the lack of protection for the web page structure in OpenCMS, allowing a remote attacker to conduct cross-site scripting attacks. Recommendations At the moment, there ...

10CVSS5.7AI score0.00149EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.13 views

The vulnerability of the SAP NetWeaver Enterprise Portal software integration platform allows attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP NetWeaver Enterprise Portal software platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6AI score0.00507EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/07/26 12:0 a.m.13 views

The vulnerability of the SAP NetWeaver Design Time Repository, a software integration platform, allows a hacker to inject arbitrary HTML code.

The vulnerability of the SAP NetWeaver Design Time Repository software platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code remotely...

6.4CVSS6AI score0.00399EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/30 12:0 a.m.9 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle is related to insufficient cleaning of user data during search operations on blogs. Exploiting this vulnerability can allow a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.8AI score0.00854EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/30 12:0 a.m.10 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.8AI score0.00815EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/06/16 12:0 a.m.9 views

The vulnerability of Microsoft Edge browsers relates to the lack of protection for website structure. This allows attackers to bypass security restrictions and execute cross-site scripting attacks.

The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and carry out cross-site scripting attacks using a specially created malicious web page...

6.4CVSS6.6AI score0.0119EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.9 views

PT-2023-3744 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Design Time Repository version 7.50 Description: The issue exists due to insufficient protection of the web page structure, allowing a remote attacker to inject arbitrary HTML code. This could enable an authorized attacker to...

6.4CVSS5.4AI score0.00399EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2023/06/02 12:0 a.m.10 views

The vulnerability of the Teacher Console component in the Faronics Insight computer network management platform allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Teacher Console component in the Faronics Insight computer network management platform is related to the lack of protective measures taken for the structure of the web page during the processing of the “loggedInUser” field. Exploiting this vulnerability allows a remote...

9.6CVSS7.5AI score0.02773EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/05/30 12:0 a.m.11 views

The vulnerability of the built-in software of the ARIS controller lies in the lack of measures taken to protect the structure of the web page, allowing attackers to execute XSS attacks.

The vulnerability of the built-in software of the ARIS controller is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out an XSS attack...

6.4CVSS5.5AI score
SaveExploits0Affected Software10
Rows per page
Query Builder