Lucene search
+L

68 matches found

BDU FSTEC
BDU FSTEC
added 2022/11/02 12:00 a.m.16 views

The vulnerability of the graphical interface of FortiWeb web applications allows attackers to carry out cross-site scripting attacks.

The vulnerability of the graphical interface of FortiWeb web applications is related to the lack of protective measures taken during the creation of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS6AI score0.1052EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/03 12:00 a.m.14 views

The vulnerability of the Create-ProjectManager software management system lies in the lack of protective measures for website structures. This allows attackers to carry out XSS attacks.

The vulnerability of the Create-ProjectManager project management software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

5.5CVSS5.9AI score0.00597EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/26 12:00 a.m.17 views

The vulnerability of the WYSIWYG editor in the Mobiledoc Kit exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to execute XSS attacks.

The vulnerability of the Mobiledoc Kit WYSIWYG editor exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

10CVSS7AI score0.00897EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:00 a.m.14 views

The vulnerability of the social-warfare plugin in the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the social-warfare plugin in the WordPress content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS6.8AI score0.72946EPSS
SaveExploits20References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:00 a.m.14 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

6.1CVSS6.4AI score0.00949EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/05 12:00 a.m.20 views

The vulnerability in the embedded software of NETGEAR routers such as CBR40, EAX20, EAX80, EX6120, EX6130, EX7500, R7960P, RAX200, RBS40V, RBW30, EX3700, MR60, R8000P, RAX20, RAX45, RAX80, EX3800, MS60, R7900P, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 exists due to the lack of protective measures for website structures. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the embedded software of NETGEAR routers such as CBR40, EAX20, EAX80, EX6120, EX6130, EX7500, R7960P, RAX200, RBS40V, RBW30, EX3700, MR60, R8000P, RAX20, RAX45, RAX80, EX3800, MS60, R7900P, RAX15, RAX50, RAX75, RBR750, RBR850, RBS750, RBS850, RBK752, and RBK852 exists due to...

7.5CVSS5.6AI score0.00418EPSS
SaveExploits0References3Affected Software28
BDU FSTEC
BDU FSTEC
added 2022/03/01 12:00 a.m.14 views

The vulnerability of Microsoft Edge browsers, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

4.2CVSS6.2AI score0.01193EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.10 views

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

6.8CVSS5.7AI score0.00539EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:00 a.m.9 views

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

5.6CVSS5.3AI score0.00565EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/06 12:00 a.m.10 views

PT-2022-1748 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions affected versions not specified Description: The issue is related to the browser's failure to properly enforce web page structure protections, potentially allowing a remote attacker to perform cross-site...

4.2CVSS8.9AI score0.01193EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:00 a.m.17 views

The vulnerability of the Roundcube email client installer’s SMTP configuration, related to the lack of protective measures for the website structure, allows attackers to compromise data integrity.

The vulnerability of the Roundcube email client installer’s SMTP configuration is related to the lack of security measures for the website structure. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

5.4CVSS6.5AI score0.00814EPSS
SaveExploits1References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/15 12:00 a.m.15 views

The vulnerability of the Calendar Event Multi View plugin of the WordPress content management system, related to the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Calendar Event Multi View plugin in the WordPress content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

7CVSS6.1AI score0.03536EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/08 12:00 a.m.12 views

The vulnerability of the phpList mailing list management software lies in the lack of security measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the phpList mailing list management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by creating a new username in the “Login Name” field of the...

4.9CVSS5.3AI score0.00622EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:00 a.m.25 views

The vulnerability of the Ceph storage system, related to the lack of protective measures for the website structure, allows attackers to compromise the integrity of the data.

The vulnerability of the Ceph storage system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

6.1CVSS6.8AI score0.01564EPSS
SaveExploits0References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:00 a.m.10 views

The vulnerability of the Sulu content management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Sulu content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

8.4CVSS5.4AI score0.00665EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:00 a.m.10 views

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of NETGEAR EX7000, R6250, R6400, R6400v2, and R7100LG Wi-Fi routers stems from the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

4.9CVSS5.4AI score0.00626EPSS
SaveExploits0References4Affected Software10
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.18 views

The vulnerability of the SVG file on the MoinMoin wiki platform, due to deficiencies in the measures used to protect web page structures, allows attackers to compromise the integrity of the data.

The vulnerability of the SVG file on the wiki platform MoinMoin is related to deficiencies in the security measures used to protect web page structures. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

5.4CVSS6.7AI score0.01746EPSS
SaveExploits1References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/02/05 12:00 a.m.15 views

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in the “All Content”...

6.3CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/02/04 12:00 a.m.22 views

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect its web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the user’s browser by creating a...

6.5CVSS6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/21 12:00 a.m.9 views

The vulnerability of the Mozilla Firefox browser, related to deficiencies in the measures used to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Mozilla Firefox browser is related to deficiencies in the security measures used to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.1CVSS6.8AI score0.01143EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder