Lucene search
+L

766 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/26 12:00 a.m.•4 views

CVE-2020-6876: Improper Neutralization of Input During Web Page Generation

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the...

5.4CVSS5.9AI score0.00622EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/10/13 12:00 a.m.•17 views

The vulnerability of the OLYMPOX educational control system’s web application, which arises from the failure to protect the structure of the web page, allows a hacker to inject arbitrary code.

The vulnerability of the OLYMPOX educational control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

6.5CVSS6.5AI score0.13112EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/10/01 12:00 a.m.•9 views

The vulnerability of Apache CXF web services lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Apache CXF web services is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS6.3AI score0.07055EPSS
SaveExploits0References3Affected Software6
BDU FSTEC
BDU FSTEC
•added 2020/09/22 12:00 a.m.•12 views

The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software lies in the lack of measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the IBM Business Process Manager system and the IBM Business Automation Workflow software relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS6AI score0.00561EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2020/09/22 12:00 a.m.•16 views

The vulnerability of the Microsoft SharePoint Foundation software, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Foundation software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks using specially crafted requests...

5.4CVSS6AI score0.01634EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/09/17 12:00 a.m.•17 views

The vulnerability of the ColdFusion interpreter, related to the lack of measures taken to protect the structure of web pages, allows attackers to inject arbitrary web scripts or HTML code and gain access to protected information.

The vulnerability of the ColdFusion interpreter is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to inject arbitrary web scripts or HTML code remotely, gain access to protected information, and modify the appearance of the...

6.1CVSS6.9AI score0.02391EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/09/09 12:00 a.m.•12 views

The vulnerability of Microsoft SharePoint Server packages arises from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of Microsoft SharePoint Server packages exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information by sending a specially...

6.4CVSS6.6AI score0.01841EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/07/29 12:00 a.m.•22 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS6AI score0.01604EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/07/14 12:00 a.m.•11 views

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to read arbitrary messages within the AI system.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to read arbitrary messages within the AI system remotely...

7.4CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/07/14 12:00 a.m.•11 views

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to upload arbitrary files onto the AIIS server.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to upload arbitrary files to the AIIS server using a specially created POST request...

7.4CVSS5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/07/14 12:00 a.m.•13 views

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to read arbitrary files on the AIIS server.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files on the AIIS server using a specially created...

7.4CVSS5.7AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/07/03 12:00 a.m.•17 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a speciall...

5.4CVSS6AI score0.01488EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/06/17 12:00 a.m.•13 views

The vulnerability of Microsoft SharePoint software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint packages is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS6.7AI score0.01712EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/29 12:00 a.m.•12 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.9AI score0.01666EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/26 12:00 a.m.•14 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server arises from the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to perform cross-site scripting attacks remotely...

9.3CVSS5.9AI score0.01712EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/15 12:00 a.m.•15 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created request sent to the...

5.4CVSS6AI score0.01515EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2020/05/15 12:00 a.m.•14 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending a specially crafted request t...

5.4CVSS6.4AI score0.01522EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/05/13 12:00 a.m.•14 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server arises from the lack of measures taken to protect the structure of web pages. This allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by sending a specially crafted request t...

5.4CVSS6AI score0.01515EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/05/12 12:00 a.m.•16 views

PT-2020-2342 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: The issue is related to the failure to protect the web page structure, which can lead to a...

9.3CVSS7.2AI score0.01712EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
•added 2020/05/07 12:00 a.m.•20 views

The vulnerability of the WordPress website content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the integrity of data.

The vulnerability of the WordPress content management system is related to an error in the reproduction of XSS attacks when previewing draft posts for authorized users. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of data...

5.4CVSS6.7AI score0.05181EPSS
SaveExploits3References4Affected Software2
Rows per page
Query Builder