Lucene search
+L

645 matches found

Positive Technologies
Positive Technologies
added 2021/09/02 12:0 a.m.9 views

PT-2021-7633 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in Microsoft Edge. Exploitation of this issue may allow a remote attacker to elevate their...

9.3CVSS6.2AI score0.02746EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/08/31 12:0 a.m.11 views

The vulnerability of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, is related to insufficient protection of the web page structure, allowing a hacker to execute arbitrary code.

The vulnerabilities of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, are related to insufficient protection of the web page structure. Exploiting these vulnerabilities allows a malicious actor to execute...

5CVSS6.8AI score0.00813EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.13 views

The vulnerability of the TYPO3 content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the TYPO3 content management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.6AI score0.00603EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:0 a.m.10 views

The vulnerability of the Page TSconfig configuration implementation in the TYPO3 content management system allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Page TSconfig configuration implementation in the TYPO3 content management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.6AI score0.00603EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/08/10 12:0 a.m.11 views

The vulnerability of the library for performing fast, customizable HTML AntiSamy cleanup, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the library for performing a quick, customizable cleanup of HTML files related to AntiSamy is linked to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...

6.1CVSS6.8AI score0.01513EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2021/08/10 12:0 a.m.11 views

PT-2021-3884 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises versions affected versions not specified Description: The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, which can be exploited by an attacker to conduct...

5.8CVSS5AI score0.01019EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:0 a.m.13 views

The vulnerability of the SAP NetWeaver integration platform, related to the lack of measures taken to protect the structure of the web page, allows a hacker to intercept the session of administrators or users of web resources.

The vulnerability of the ProxyServer server of the SAP NetWeaver software integration platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of administrators ...

5.9CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:0 a.m.19 views

The vulnerability of the SAP NetWeaver integration platform, related to the lack of measures taken to protect the structure of the web page, allows a hacker to intercept the session of administrators or users of web resources.

The vulnerability of the Ecatt server, a software integration platform for SAP NetWeaver, is related to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to intercept the session of...

5.9CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.10 views

The vulnerability of Hitachi Application Server lies in its inability to protect the structure of web pages, allowing attackers to execute arbitrary code.

The vulnerability of Hitachi Application Server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely using uncertain vectors...

6.1CVSS6.8AI score0.00754EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.12 views

The vulnerability of the `translate` function in the Ruby on Rails software platform translation_helper.rb allows attackers to exploit it to compromise the integrity of web pages’ structures.

The vulnerability of the translate function in the Ruby on Rails software platform, translationhelper.rb, is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability allows an attacker to compromise data integrity...

6.1CVSS6.8AI score0.02372EPSS
SaveExploits0References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.17 views

The vulnerability of the bleach-based HTML cleaning library, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the bleach HTML cleaning library exists because measures to protect the structure of web pages are not taken. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

6.4CVSS7AI score0.00479EPSS
SaveExploits1References7Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.6 views

Vulnerability of operating systems such as iOS, iPadOS, macOS, tvOS, the browser Safari, the multimedia player iTunes, and the iCloud service. This vulnerability stems from the lack of security measures taken to protect the structure of web pages, allowing attackers to execute malicious cross-site scripts.

Vulnerabilities of operating systems such as iOS, iPadOS, macOS, tvOS, the browser Safari, the multimedia player iTunes, and the iCloud service exist due to the lack of measures taken to protect the structure of web pages. Exploitation of these vulnerabilities can allow attackers to execute...

6.1CVSS6.7AI score0.01153EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/06/23 12:0 a.m.11 views

The vulnerability of the software for implementing the hypertext environment MediaWiki, which arises due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the software for implementing the hypertext environment MediaWiki exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of...

6.1CVSS6.6AI score0.01307EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/16 12:0 a.m.11 views

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS allows attackers to perform cross-site scripting attacks.

The vulnerability of the Web page rendering module in WebKit operating systems on Mac OS relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using malicious web content...

7.1CVSS6.3AI score0.01174EPSS
SaveExploits0References11Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/06/15 12:0 a.m.10 views

The vulnerability in the web interface for controlling Cisco AsyncOS operating systems allows attackers to perform cross-site scripting attacks.

The vulnerability in the web interface for controlling Cisco AsyncOS operating systems is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by executing a specially created...

5.8CVSS6AI score0.00704EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:0 a.m.23 views

The vulnerability of VMware Workspace One’s software products stems from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of VMware Workspace One’s software products exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

6.1CVSS6.3AI score0.00796EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/03 12:0 a.m.11 views

The vulnerability of the IBM Security Guardium security tool lies in its lack of measures to protect the structure of web pages. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the IBM Security Guardium security tool is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

9CVSS7.2AI score0.02101EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/06/01 12:0 a.m.13 views

The vulnerability of the virtual learning environment Moodle, related to the lack of protection for the website structure, allows a hacker to execute arbitrary HTML code and script code in the user’s browser within the context of the vulnerable website.

The vulnerability of the virtual learning environment Moodle is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code and script code in the user’s browser, within the context of the...

7.2CVSS7AI score0.00592EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/05/24 12:0 a.m.17 views

The vulnerability of the jQuery UI library, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.

The vulnerability of the jQuery UI library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

6.1CVSS6.6AI score0.2258EPSS
SaveExploits1References12Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/04/20 12:0 a.m.10 views

The vulnerability of the Mozilla Firefox browser, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Mozilla Firefox browser is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6.5AI score0.00567EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder