Lucene search
+L

6468 matches found

BDU FSTEC
BDU FSTEC
•added 2024/12/02 12:00 a.m.•20 views

The vulnerability of the RenderTune rendering tool, related to the lack of measures taken to protect website structures, allows attackers to perform cross-site scripting attacks.

The vulnerability of the RenderTune rendering tool is related to the lack of measures taken to protect the structure of web pages when processing the Upload Title parameter. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

7.5CVSS5.3AI score0.01485EPSS
SaveExploits2References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/12/02 12:00 a.m.•16 views

The vulnerability of Microsoft Copilot Studio’s graphical tool for creating and supporting artificial intelligence, related to the lack of protection for website structure, allows attackers to enhance their privileges.

The vulnerability of the graphical tool for creating and supporting artificial intelligence in Microsoft Copilot Studio relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to enhance their privileges remotely...

9.4CVSS8AI score0.00959EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/29 12:00 a.m.•12 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the lack of security measures for protecting the structure of web pages. This allows attackers to execute DOM-Based XSS attacks.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the lack of security measures for protecting the structure of web pages. Exploiting these vulnerabilities can allow attackers to execute DOM-Based XSS attacks...

5CVSS7.1AI score0.00489EPSS
SaveExploits0References19Affected Software8
BDU FSTEC
BDU FSTEC
•added 2024/11/29 12:00 a.m.•19 views

The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

7.5CVSS7.5AI score0.0044EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/29 12:00 a.m.•12 views

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor allows attackers to exploit it by bypassing security measures related to SQL query structures, thereby enabling them to enhance their privileges.

The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

8CVSS5.6AI score0.00339EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/29 12:00 a.m.•22 views

The vulnerability of the monitoring tool for VMware Aria Operations, related to the lack of protective measures for the website structure, allows attackers to execute cross-site scripting attacks (XSS).

The vulnerability of the monitoring tool for VMware Aria Operations is related to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks XSS remotely...

8CVSS7.5AI score0.00399EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/11/26 1:34 p.m.•30 views

CVE-2024-11708

Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox 133 and Thunderbird 133...

0.0033EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•10 views

The vulnerability of the Safari browser on iOS, iPadOS, VisionOS, and Mac OS allows attackers to perform cross-site scripting attacks.

The vulnerability of the Safari browser on iOS, iPadOS, VisionOS, and Mac OS is related to the lack of security measures for handling web page structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

6.4CVSS7AI score0.2259EPSS
SaveExploits0References17Affected Software8
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•23 views

The vulnerability of the video file exchange function in Jitsi Meet software, which allows attackers to upload arbitrary video files.

The vulnerability of the video file exchange function in Jitsi Meet software for conducting video conferences is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to upload arbitrary video files remotely...

10CVSS5.5AI score0.00749EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•14 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS5.5AI score0.00359EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•14 views

The vulnerability of the Safari browser on iOS, iPadOS, VisionOS, and Mac OS allows attackers to execute arbitrary code.

The vulnerability of the Safari browser on iOS, iPadOS, VisionOS, and Mac OS is related to the lack of security measures for handling web page structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.10075EPSS
SaveExploits1References17Affected Software8
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•16 views

The vulnerability of the Manager component in the Wowza Streaming Engine server software allows a hacker to execute XSS attacks.

The vulnerability of the Manager component in the Wowza Streaming Engine server software is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

10CVSS5.4AI score0.00665EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•16 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the lack of measures taken to protect the website structure, allowing attackers to inject arbitrary JavaScript code.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code through a specially created UR...

6.4CVSS5.7AI score0.00374EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/25 12:00 a.m.•19 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS5.4AI score0.00347EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/25 12:00 a.m.•23 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out attacks using cross-site scripting (XSS).

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out attacks using cross-site scripting XSS...

6.4CVSS5.2AI score0.00367EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/25 12:00 a.m.•19 views

The vulnerability in the virtual learning environment Moodle, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries in the database.

The vulnerability in the virtual training environment Moodle is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries in the database remotely...

8.3CVSS6AI score0.00796EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•16 views

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks arises from the lack of protective measures for the SQL query structure, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code...

9CVSS7.6AI score0.01715EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2024/11/21 7:26 p.m.•22 views

CVE-2024-50274

In the Linux kernel, the following vulnerability has been resolved: idpf: avoid vport access in idpfgetlinkksettings When the device control plane is removed or the platform running device control plane is rebooted, a reset is detected on the driver. On driver reset, it releases the resources and...

6.7CVSS6.8AI score0.00231EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2024/11/21 12:00 a.m.•22 views

The vulnerability of the PDF document viewing tool within the XWiki PDF Viewer Macro (Pro) allows attackers to perform cross-site scripting attacks by exploiting a lack of protection for the structure of web pages.

The vulnerability of the PDF document viewing tool within the XWiki PDF Viewer Macro Pro is related to the lack of measures taken to protect the structure of the web page during the processing of the width parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site...

9CVSS5.2AI score0.00434EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/20 12:00 a.m.•19 views

The vulnerability of Palo Alto Networks’ operating system PAN-OS software, related to the lack of measures taken to protect website structures, allows attackers to carry out XSS attacks.

The vulnerability of Palo Alto Networks’ operating system PAN-OS relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

4CVSS5.5AI score0.00339EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder