Lucene search
+L

767 matches found

BDU FSTEC
BDU FSTEC
•added 2022/12/23 12:00 a.m.•16 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.6AI score0.00727EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/23 12:00 a.m.•16 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.6AI score0.00493EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/23 12:00 a.m.•17 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS5.6AI score0.00493EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/13 12:00 a.m.•20 views

PT-2022-5994 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.14 and earlier Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if an attacker convinces a victim to visit a URL referencing a vulnerable page, allowing...

5.5CVSS5.2AI score0.00493EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2022/12/12 12:00 a.m.•14 views

The vulnerability of the management interface of the Fortinet FortiDeceptor, which enables attackers to carry out spoofing attacks against external and internal security threats.

The vulnerability of the management interface for detecting and responding to external and internal security threats in Fortinet’s FortiDeceptor involves the lack of protective measures taken during the creation of the web page structure. Exploiting this vulnerability allows a malicious actor to...

9CVSS5.9AI score0.00477EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/09 12:00 a.m.•14 views

The vulnerability of the FortiADC application delivery controller, related to the lack of protective measures for the website structure, allows attackers to perform spoofing attacks.

The vulnerability of the FortiADC application delivery controller is related to the lack of protective measures taken during the creation of the web page structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using the specially created web page...

10CVSS6.3AI score0.01886EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/12/07 12:00 a.m.•15 views

The vulnerability of Microsoft Edge and Google Chrome browsers, related to the lack of measures taken to protect the structure of web pages, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge and Google Chrome lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks by opening specially created malware files or specially created malicious link...

5CVSS6.4AI score0.01161EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/12/05 12:00 a.m.•17 views

The vulnerability of the External RADIUS Server component of the Cisco Identity Services Engine (ISE) management interface allows a perpetrator to perform cross-site scripting attacks.

The vulnerability of the External RADIUS Server component of the Cisco Identity Services Engine ISE management interface is related to the lack of security measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00541EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/01 12:00 a.m.•6 views

PT-2022-5761 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a spoofing vulnerability in Microsoft Edge and Google Chrome browsers, stemming from inadequate protection of web page structure. This could...

5CVSS8.9AI score0.01161EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2022/11/30 12:00 a.m.•18 views

The vulnerability of the Special:Contributions component of the MediaWiki software, which allows for the implementation of a hypertext environment. This vulnerability enables a hacker to carry out XSS attacks.

The vulnerability of the Special:Contributions component of the MediaWiki software lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.6AI score0.01104EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/11/30 12:00 a.m.•13 views

The vulnerability in the implementation of the Trace method in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a perpetrator to carry out XSS attacks.

The vulnerability in the implementation of the Trace method exists in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird. This vulnerability stems from the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious...

6.4CVSS7AI score0.00591EPSS
SaveExploits0References13Affected Software10
BDU FSTEC
BDU FSTEC
•added 2022/11/22 12:00 a.m.•22 views

The vulnerability of the web client of the legal system “Kodeks” relates to the failure to protect the structure of web pages, allowing attackers to carry out cross-site scripting attacks (XSS).

The vulnerability of the “Kodeks” reference-and-law system’s web client is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

8.5CVSS5.2AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/11/02 12:00 a.m.•14 views

The vulnerability of the OpenProject project management platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out phishing attacks.

The vulnerability of the OpenProject project management platform lies in the lack of measures taken to protect the structure of the web page when processing the target=blank value without the rel noopener attribute. Exploiting this vulnerability could allow a malicious actor to carry out phishing...

7.5CVSS5.4AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•15 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

6.4CVSS6AI score0.00629EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/26 12:00 a.m.•17 views

The vulnerability of the J-Web interface in Juniper Networks Junos OS allows attackers to execute cross-site scripting attacks.

The vulnerability of the J-Web interface in Juniper Networks Junos OS operating systems is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

9CVSS5.6AI score0.00685EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/21 12:00 a.m.•17 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS6AI score0.01045EPSS
SaveExploits1References7Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/10/20 12:00 a.m.•11 views

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain unauthorized access to...

5.5CVSS6AI score0.00594EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2022/10/20 12:00 a.m.•15 views

The vulnerability in the web interface for managing security devices in multi-cloud data centers of Cisco’s Tetration model allows attackers to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability in the web-based interface for managing security devices in Cisco Tetration systems exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected...

5.5CVSS6AI score0.00594EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/18 12:00 a.m.•18 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

6.4CVSS6AI score0.00629EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/10/13 12:00 a.m.•11 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

5.8CVSS6AI score0.00641EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder