Lucene search
+L

881 matches found

BDU FSTEC
BDU FSTEC
•added 2018/12/20 12:00 a.m.•18 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

6.1CVSS6.5AI score0.01325EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/12/20 12:00 a.m.•14 views

The vulnerability of IBM WebSphere Application Server application servers arises from the lack of measures taken to protect the structure of web pages. This allows attackers to inject malicious code into the loaded web pages.

The vulnerability of IBM WebSphere Application Server application servers exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject unauthorized code into the loaded web pages...

5.4CVSS6.3AI score0.0099EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/12/20 12:00 a.m.•19 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

5.4CVSS6.1AI score0.01068EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/12/20 12:00 a.m.•23 views

The vulnerability of the Web Isolation software lies in its inability to protect the structure of web pages. This allows attackers to inject arbitrary code into the loaded web pages.

The vulnerability of the software for preventing web threats exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor, operating remotely, to inject arbitrary code into the loaded web page using a specially crafted URI...

6.1CVSS6.5AI score0.00999EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/12/20 12:00 a.m.•13 views

The vulnerability of the IBM WebSphere Portal software arises from the lack of measures taken to protect the structure of the web page. This allows attackers to disclose user credentials during a secure session.

The vulnerability of the IBM WebSphere Portal software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials during a secure session, thereby allowing the insertion of arbitra...

5.4CVSS6.1AI score0.00968EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/12/20 12:00 a.m.•29 views

The vulnerability of the Wizard component in the microprogramming software of the RICOH MP C6003 multifunctional device allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Wizard /web/entry/en/address/adrsSetUserWizard.cgi component of the RICOH MP multifunctional device exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the...

6.1CVSS6.3AI score0.01EPSS
SaveExploits2References4
BDU FSTEC
BDU FSTEC
•added 2018/12/13 12:00 a.m.•21 views

The vulnerability in the web interface for controlling Cisco Registered Envelope Service allows a perpetrator to inject arbitrary code into the web page that is uploaded.

The vulnerability of the web interface for managing security information transmitted by the Cisco Registered Envelope Service is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the...

5.5CVSS6.1AI score0.0091EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/11/23 12:00 a.m.•20 views

The vulnerability of the Web interface of the Cisco Unified Communications Manager allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Unified Communications Manager web interface is related to insufficient protection of the web page structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely using a specially crafted link...

6.1CVSS6AI score0.01783EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/11/01 12:00 a.m.•17 views

The vulnerability of the FortiOS operating system arises from insufficient protection of the web page structure, allowing attackers to inject arbitrary JavaScript or HTML code.

The vulnerability of the FortiOS operating system arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code remotely...

6.1CVSS5.6AI score0.0138EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/11/01 12:00 a.m.•13 views

The vulnerability in the FortiOS operating system’s web interface allows a hacker to inject any desired JavaScript or HTML code.

The vulnerability in the user interface of the FortiOS operating system arises from insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code using the “redirect” parameter...

6.1CVSS5.7AI score0.05937EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/11/01 12:00 a.m.•16 views

The vulnerability of the DHCP Monitor web interface of the FortiOS operating system allows a hacker to inject arbitrary JavaScript or HTML code.

The vulnerability of the DHCP Monitor web interface of the FortiOS operating system arises due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code remotely...

5.3CVSS5.6AI score0.01184EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/10/31 12:00 a.m.•19 views

The vulnerability of the FortiOS operating system arises from insufficient protection of the web page structure, allowing attackers to inject arbitrary JavaScript or HTML code.

The vulnerability of the FortiOS operating system is due to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript or HTML code using a specially crafted URI...

6.1CVSS5.7AI score0.01076EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/10 12:00 a.m.•6 views

CVE-2018-15188: Improper Restriction of Operations within the Bounds of a Memory Buffer

PHP Scripts Mall advanced-real-estate-script 4.0.9 allows remote attackers to cause a denial of service page structure loss via crafted JavaScript code in the Name field of a profile...

6.5CVSS6.7AI score0.00938EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/01/08 12:00 a.m.•2 views

PT-2018-2978

Name of the Vulnerable Software and Affected Versions CP 1604 All versions CP 1616 All versions Description A vulnerability has been identified that could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into following a malicious link. User interaction is required for a...

6.1CVSS0.00794EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2017/09/28 12:00 a.m.•30 views

The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform allows a hacker to inject any HTML tags into a page.

The vulnerability of the “/com.sapportals.navigation.testComponent.NavigationRequestSniffer” component of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the structure of web pages. This vulnerability allows a malicious actor to inject arbitrary...

6.4CVSS5.6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2017/09/28 12:00 a.m.•13 views

The vulnerabilities of the components “/com.sap.portal.themes.integrity.personalization”, “/com.sap.portal.themes.integrity.url”, and “/com.sap.portal.themes.integrity.serverFrameworkCockpit” of the SAP NetWeaver software integration platform allow a malicious individual to inject arbitrary HTML tags into a page.

The vulnerability of the components “/com.sap.portal.themes.integrity.personalization”, “/com.sap.portal.themes.integrity.url”, and “/com.sap.portal.themes.integrity.serverFrameworkCockpit” of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the...

6.4CVSS5.6AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2017/05/15 12:00 a.m.•18 views

The vulnerability of the ColdFusion interpreter, which allows a hacker to modify the structure of a web page

The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to remotely alter the structure of the web page...

4.3CVSS6.3AI score0.03069EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/04/27 12:00 a.m.•2 views

PT-2017-1992

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion 2016 versions Update 3 and earlier Adobe ColdFusion 11 versions update 11 and earlier Adobe ColdFusion 10 versions Update 22 and earlier Description The issue is related to a reflected cross-site scripting problem. It exists d...

6.1CVSS0.03069EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2017/04/20 12:00 a.m.•17 views

The vulnerability of the iOS operating system, which allows a perpetrator to carry out a UXSS attack

The vulnerability of the Safari Reader component in the iOS operating system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out a UXSS attack using a specially crafted website...

4.3CVSS6.6AI score0.01137EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2017/04/13 12:00 a.m.•26 views

The vulnerability of the iOS operating system and the Safari browser allows attackers to obtain information about the integration platform and the operating system, enabling them to carry out UXSS attacks.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to obtain information about the integration platform and the operating...

4.3CVSS6.9AI score0.04272EPSS
SaveExploits4References5Affected Software2
Rows per page
Query Builder