Lucene search
+L

645 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/30 12:0 a.m.12 views

The vulnerability of the AutoGRAPH Web monitoring software platform lies in its lack of measures to protect the structure of web pages, allowing attackers to execute arbitrary code.

The vulnerability of the AutoGRAPH Web monitoring software platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...

10CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/09 12:0 a.m.15 views

The vulnerability of the “Import from Excel” plugin, which exists due to the lack of protective measures for website structures, allows attackers to execute XSS attacks.

The vulnerability of the “Import from Excel” plugin exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.3CVSS5.4AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/07 12:0 a.m.19 views

The vulnerability of the platform for monitoring, managing, and improving LLM applications lies in the insufficient protection of the website structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the platform for monitoring, managing, and improving LLM applications is related to insufficient protection of the web page structure when processing the dangerouslySetInnerHTML attribute. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting...

9.4CVSS7.5AI score0.00415EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/23 12:0 a.m.10 views

The vulnerability in the web interface of Cisco BroadWorks Application Delivery Platform allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco BroadWorks Application Delivery Platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00296EPSS
SaveExploits0References2Affected Software2
Redos
Redos
added 2025/06/19 12:0 a.m.8 views

ROS-20250616-24

The vulnerability of the Zabbix universal monitoring system web-integrity is related to the failure to take measures to protect the web page structure. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, conduct a cross-site scripting attack b...

7.5CVSS7.6AI score0.00348EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.14 views

The vulnerability of the XWiki platform for creating collaborative web applications lies in its lack of protection for website structures. This allows attackers to execute arbitrary JavaScript code.

The vulnerability of the XWiki Platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

10CVSS5.8AI score0.00634EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.68 views

The Network Configuration Manager (NCM) software, which is related to the failure to protect the structure of web pages, allows attackers to carry out XSS attacks.

The Network Configuration Manager NCM software is associated with the failure to take measures to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to carry out XSS attacks remotely...

5CVSS5.4AI score0.00215EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/09 12:0 a.m.14 views

The vulnerability of the Android operating system, related to the lack of measures taken to protect the structure of web pages, allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Android operating system is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

7.8CVSS7.6AI score0.00217EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/05/28 12:0 a.m.14 views

The vulnerability of the software for implementing the hypertext environment MediaWiki allows a hacker to carry out a cross-site scripting attack.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to carry out a cross-site scripting attack...

5.3CVSS5.2AI score0.00359EPSS
SaveExploits0References7Affected Software4
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.14 views

PT-2025-28935 · Ип Кривочуров Дмитрий Анатольевич · Импорт Из Excel. Загрузка Каталога Товаров 1С-Битрикс

Уязвимость плагина «Импорт из Excel» существует из-за непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, провести атаку межсайтового скриптинга XSS...

5CVSS7.3AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/21 12:0 a.m.15 views

The vulnerability of the GlobalProtect Gateway and GlobalProtect Portal operating system PAN-OS allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the GlobalProtect Gateway and GlobalProtect Portal operating system in PAN-OS is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.5CVSS5.2AI score0.46401EPSS
SaveExploits8References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/21 12:0 a.m.10 views

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in the lack of security measures for handling web page structures. This allows attackers to carry out XSS attacks.

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity by JetBrains is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.4AI score0.02467EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/21 12:0 a.m.13 views

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in the lack of security measures for handling web page structures. This allows attackers to carry out XSS attacks.

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity by JetBrains is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.4AI score0.00659EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/21 12:0 a.m.15 views

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in the lack of security measures for handling web page structures. This allows attackers to carry out XSS attacks.

The vulnerability of the Continuous Integration and Application Delivery system CI/CD of TeamCity by JetBrains is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.4AI score0.00659EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/15 12:0 a.m.10 views

The vulnerability of the Safari browser on iPadOS and iOS operating systems allows attackers to execute XSS attacks.

The vulnerability of the Safari browser on iPadOS and iOS operating systems relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to carry out XSS attacks...

6.4CVSS6.8AI score0.00534EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2025/05/14 12:0 a.m.11 views

The vulnerability of Adobe Connect web conference software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform cross-site scripting attacks (XSS).

The vulnerability of Adobe Connect web conferencing software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS by injecting malicious scripts into form fields...

9.4CVSS5.2AI score0.00488EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.11 views

The vulnerability of the Latex Proof-Reading module in the Python software repository PyPi allows attackers to carry out XSS attacks.

The vulnerability of the Latex Proof-Reading module in the Python software package PyPi is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.8AI score0.00388EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.9 views

The vulnerability in the web-based management interface of SonicWall’s SMA 100 series microprogramming network interfaces allows a hacker to execute arbitrary code.

The vulnerability in the web-based management interface of SonicWall’s SMA 100 series microprogramming system for network interfaces exists due to the lack of protective measures taken against the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitra...

9CVSS7.7AI score0.04146EPSS
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:0 a.m.12 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege-controlled user control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary JavaScript code...

8.7CVSS5.8AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/22 12:0 a.m.11 views

The vulnerability of the SafeInspect system for privileged users relates to the lack of measures taken to protect the structure of the web page, allowing a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the SafeInspect privilege control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code during the user creation process...

8.7CVSS5.9AI score
SaveExploits0Affected Software1
Rows per page
Query Builder