PT-2020-3472

Name of the Vulnerable Software and Affected Versions ABB System 800xA Information Manager versions 5.1, 6.0 through 6.0.3.2, 6.1 Description The issue arises from the incorrect inclusion of an auxiliary component in the installations, allowing an attacker to perform an XSS-like attack on an...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages arises from the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created reque...

The vulnerability of Firefox browser, related to the lack of measures taken to protect the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of Firefox browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

The vulnerability of the webcal resource identifier in the Firefox browser, related to the lack of protective measures for the website structure, allows attackers to compromise data integrity.

The vulnerability of the webcal resource identifier in the Firefox browser is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

PT-2019-5689

Name of the Vulnerable Software and Affected Versions D-Link DGS-1510-series switches versions 1.20.011 through 1.31.B003 and older Description The issue is related to a lack of protection for the web page structure, which may allow a remote attacker to inject malicious scripts into the device an...

The vulnerability of Google Chrome browser, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of Google Chrome exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a specially created HTML page...

The vulnerability of the Spectrum Power software-based web server allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Spectrum Power software-based web server relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

The vulnerability in the web interface for managing Cisco Small Business microprogramming software allows a perpetrator to execute arbitrary code or gain access to confidential information.

The vulnerability of the web interface for managing Cisco Small Business microprogramming software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain access to confidential...

The vulnerability in the web-management interface of the Fortinet FortiNAC device allows a perpetrator to execute a cross-site scripting attack.

The vulnerability in the Fortinet FortiNAC network access control web interface relates to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Rack module in the Ruby programming language allows attackers to compromise data integrity.

The vulnerability of the Rack module in the Ruby programming language is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to compromise the integrity of data...

PT-2019-6305

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 1.22.1 Description The issue is related to a lack of protection for the web page structure, allowing for cross-site scripting XSS attacks. This could enable a remote attacker to conduct inter-site script attacks...

The vulnerability of the platform for automating operations in healthcare institutions of the Russian Federation’s entity Tra: The lack of protection for the website structure allows attackers to carry out cross-site scripting attacks.

The vulnerability of the platform for automating operations in healthcare institutions of the Russian Federation’s Tra:Pharmaceutical supply relates to the failure to take measures to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely...

The vulnerability of Siemens CP’s communication module’s microprogramming software, related to the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.

The vulnerability of Siemens CP’s communication module’s microprogramming software is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a remote attacker to perform a cross-site scripting attack...

The vulnerability of Microprogrammed Software in HP Color LaserJet Pro and HP LaserJet Pro printers stems from the lack of measures taken to protect the structure of web pages. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of HP Color LaserJet Pro and HP LaserJet Pro printer software exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Palo Alto Networks MineMeld software lies in the lack of protection for website structures, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the Palo Alto Networks MineMeld software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of its web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in a speciall...

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in a speciall...

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of its web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in a speciall...

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser when the page is opened. Th...

The vulnerability of FortiWeb web applications’ network firewalls stems from the lack of protective measures for the website structure. This allows attackers to execute arbitrary code or perform arbitrary commands.

The vulnerability of FortiWeb web applications’ network firewalls exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or issue arbitrary commands using attack reports generated in HTML...