Lucene search
+L

5565 matches found

BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.10 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00338EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.13 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out attacks using cross-site scripting (XSS).

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out attacks using cross-site scripting XSS...

6.4CVSS5.2AI score0.00357EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/25 12:0 a.m.10 views

The vulnerability in the virtual learning environment Moodle, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries in the database.

The vulnerability in the virtual training environment Moodle is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries in the database remotely...

8.3CVSS6AI score0.00646EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/11/22 12:0 a.m.9 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks arises from the lack of protective measures for the SQL query structure, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...

9CVSS7.6AI score0.01667EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2024/11/21 7:26 p.m.17 views

CVE-2024-50274

In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpfgetlinkksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it releases the resources and...

6.7CVSS6.8AI score0.00231EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/11/21 12:0 a.m.14 views

The vulnerability of the PDF document viewing tool within the XWiki PDF Viewer Macro (Pro) allows attackers to perform cross-site scripting attacks by exploiting a lack of protection for the structure of web pages.

The vulnerability of the PDF document viewing tool within the XWiki PDF Viewer Macro Pro is related to the lack of measures taken to protect the structure of the web page during the processing of the width parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site...

9CVSS5.2AI score0.00418EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/20 12:0 a.m.8 views

The vulnerability of Palo Alto Networks’ operating system PAN-OS software, related to the lack of measures taken to protect website structures, allows attackers to carry out XSS attacks.

The vulnerability of Palo Alto Networks’ operating system PAN-OS relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

4CVSS5.5AI score0.00292EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2024/11/19 2:16 a.m.19 views

CVE-2024-50274

In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpfgetlinkksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it releases the resources and...

7.8CVSS0.00231EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/19 12:0 a.m.8 views

The vulnerability in the web interface of the application for managing Cisco Unified Contact Center Management Portal allows a perpetrator to perform cross-site scripting attacks.

The vulnerability in the web interface for managing applications in the Cisco Unified Contact Center Management Portal is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00265EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/11/18 12:0 a.m.9 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, which allows attackers to execute XSS attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website’s structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

5.5CVSS5.5AI score0.00369EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.9 views

The vulnerability of the /htdocs/webinc/js/info.php component of the D-Link DIR-815 router’s microprogramming system allows a attacker to execute XSS attacks.

The vulnerability of the /htdocs/webinc/js/info.php component of the D-Link DIR-815 router’s microprogramming system exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks by manipulating the RESULT...

6.4CVSS6.7AI score0.01151EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.11 views

The vulnerability of the administration panel of D-Link DIR-600M C1 Wi-Fi routers allows a attacker to execute XSS attacks.

The vulnerability of the administration panel of D-Link DIR-600M C1 Wi-Fi routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...

5.5CVSS5.9AI score0.02186EPSS
SaveExploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.14 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.4AI score0.00272EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.9 views

The vulnerability of the corporate email management system Zimbra Collaboration Suite arises from the lack of measures taken to protect the website structure. This allows attackers to carry out XSS attacks.

The vulnerability of the Zimbra Collaboration Suite email management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.61321EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.8 views

The vulnerability of the Alert Rules function in the network monitoring system LibreNMS allows attackers to perform cross-site scripting attacks.

The vulnerability of the Alert Rules function in the LibreNMS network monitoring system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

8CVSS5.2AI score0.26569EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.6 views

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks...

4.3CVSS5.2AI score0.00265EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/13 12:0 a.m.15 views

The vulnerability of the Portal for ArcGIS web portal, related to the lack of measures taken to protect the structure of the web page, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Portal for ArcGIS web portal is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.2AI score0.00338EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/13 12:0 a.m.12 views

The vulnerability of the Portal for ArcGIS web portal, related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks and gain full control over the application.

The vulnerability of the Portal for ArcGIS is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks and gain full control over the application through a specially created web page...

5.5CVSS5.2AI score0.00273EPSS
SaveExploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2024/11/12 9:11 a.m.4 views

kernel: thermal: of: fix double-free on unregistration

A flaw was found in the Linux kernel's thermal subsystem. A double-free vulnerability occurs during thermal zone device unregistration when using device tree OF bindings. The thermalofzoneregister function leaks the original tzp structure and double-frees the internal copy, which can lead to memo...

5.9AI score0.00162EPSS
SaveExploits0References5
Microsoft CVE
Microsoft CVE
added 2024/11/12 8:0 a.m.5 views

ksmbd: add refcnt to ksmbd_conn struct

...

5.5CVSS6.9AI score0.00233EPSS
SaveExploits0
Rows per page
Query Builder