Lucene search
+L

645 matches found

BDU FSTEC
BDU FSTEC
added 2019/02/19 12:0 a.m.9 views

The vulnerability of the PAN-OS operating system arises from insufficient protection of the web page structure, allowing attackers to inject any desired JavaScript or HTML code into the loaded web page.

The vulnerability of the PAN-OS operating system exists due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code into the loaded web page from a remote location...

5.4CVSS6.1AI score0.00667EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/28 12:0 a.m.6 views

The vulnerability of the userprefs component in the software platform for collaborative development of SAP NetWeaver Development Infrastructure Cockpit allows a attacker to execute arbitrary code.

The vulnerability of the userprefs component /nwdicockpit/srv/data/ of the software development platform for SAP NetWeaver Development Infrastructure Cockpit is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute...

5.5CVSS5.9AI score
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.11 views

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending specially crafted requests to the vulnerable...

3.5CVSS6AI score0.01639EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.13 views

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable...

3.5CVSS6AI score0.0207EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.8 views

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable...

3.5CVSS6AI score0.01996EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/18 12:0 a.m.15 views

The vulnerability of the SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the SharePoint Server software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request to the vulnerable SharePoint server...

3.5CVSS6AI score0.01661EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/01/15 12:0 a.m.9 views

The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the website structure. This allows attackers to inject arbitrary code into the uploaded web pages or disclose protected information.

The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web page or disclose protected...

6.4CVSS6.4AI score0.00918EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2019/01/08 12:0 a.m.10 views

PT-2019-1135 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure. An attacker could exploit this by sending a specially crafted request to the vulnerable SharePoi...

5.4CVSS8.3AI score0.0207EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2019/01/08 12:0 a.m.11 views

PT-2019-1136 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue exists due to inadequate protection of the web page structure. An attacker could exploit this by sending a specially crafted request to the vulnerable server,...

5.4CVSS8.3AI score0.01996EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.8 views

The vulnerability of IBM WebSphere Application Server application servers arises from the lack of measures taken to protect the structure of web pages. This allows attackers to inject malicious code into the loaded web pages.

The vulnerability of IBM WebSphere Application Server application servers exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject unauthorized code into the loaded web pages...

5.4CVSS6.3AI score0.0099EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.24 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP C6003 multifunctional device allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Wizard /web/entry/en/address/adrsSetUserWizard.cgi component of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the...

6.1CVSS6.3AI score0.01EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.15 views

The vulnerability of the Web Isolation software lies in its inability to protect the structure of web pages. This allows attackers to inject arbitrary code into the loaded web pages.

The vulnerability of the software for preventing web threats exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject arbitrary code into the loaded web page using a specially crafted URI...

6.1CVSS6.5AI score0.00999EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.16 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

5.4CVSS6.1AI score0.01068EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.10 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

5.4CVSS6.1AI score0.00968EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/20 12:0 a.m.10 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

6.1CVSS6.5AI score0.01325EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/12/13 12:0 a.m.15 views

The vulnerability in the web interface for controlling Cisco Registered Envelope Service allows a perpetrator to inject arbitrary code into the web page that is uploaded.

The vulnerability of the web interface for managing security information transmitted by the Cisco Registered Envelope Service is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the...

5.5CVSS6.1AI score0.0091EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/23 12:0 a.m.12 views

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Unified Communications Manager web interface is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely using a specially crafted link...

6.1CVSS6AI score0.01783EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/01 12:0 a.m.12 views

The vulnerability of the FortiOS operating system arises from insufficient protection of the web page structure, allowing attackers to inject arbitrary JavaScript or HTML code.

The vulnerability of the FortiOS operating system arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code remotely...

6.1CVSS5.6AI score0.0138EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/01 12:0 a.m.10 views

The vulnerability in the FortiOS operating system’s web interface allows a hacker to inject any desired JavaScript or HTML code.

The vulnerability in the user interface of the FortiOS operating system arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code using the “redirect” parameter...

6.1CVSS5.7AI score0.06869EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/11/01 12:0 a.m.11 views

The vulnerability of the DHCP Monitor web interface of the FortiOS operating system allows a hacker to inject arbitrary JavaScript or HTML code.

The vulnerability of the DHCP Monitor web interface of the FortiOS operating system arises due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code remotely...

5.3CVSS5.6AI score0.01184EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder