The vulnerability of the software for implementing the hypertext environment MediaWiki, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the software for implementing the hypertext environment MediaWiki exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the IceWarp Server, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the IceWarp Server web server is related to the lack of measures taken to protect the structure of the website. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the CMS system Backdrop CMS, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the CMS system Backdrop CMS is related to the failure to take measures to protect the structure of a web page as a result of performing the “Publish” action in the “Content” section. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attack...

[SECURITY] Fedora 39 Update: redis-7.2.2-1.fc39

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

CVE-2023-5515

The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the application and to further plot attacks against web servers and deployed web applications...

CVE-2023-5515

The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the application and to further plot attacks against web servers and deployed web applications...

Design/Logic Flaw

The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the application and to further plot attacks against web servers and deployed web applications...

The vulnerability of the Ninja Forms Contact Form plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Ninja Forms Contact Form plugin of the WordPress content management system is related to the lack of protective measures for the website’s structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability of the SEO plugin developed by 10Web, a content management system for WordPress, allows attackers to perform cross-site scripting attacks.

The vulnerability of the SEO plugin of the 10Web content management system for WordPress is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability of the Tablesome plugin of the WordPress content management system allows attackers to perform cross-site scripting attacks.

The vulnerability of the Tablesome plugin in the WordPress content management system is related to the lack of protective measures for website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Go programming language’s net/html library allows attackers to perform cross-site scripting attacks.

The vulnerability of the net/html library in the Go programming language exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of Firefox’s Reader Mode, which allows a hacker to perform cross-site scripting attacks

The vulnerability of Firefox’s Reader Mode is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the WP Helper Lite plugin of the WordPress content management system arises from the lack of measures taken to protect the website’s structure. This allows attackers to carry out XSS attacks.

The vulnerability of the WP Helper Lite plugin of the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Paid Memberships Pro plugin of the WordPress content management system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the Paid Memberships Pro plugin of the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability of the IceWarp Server, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the IceWarp Server web server is related to the lack of measures taken to protect the structure of the web page when processing the color parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

[SECURITY] Fedora 38 Update: redis-7.0.14-1.fc38

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

[SECURITY] Fedora 37 Update: redis-7.0.14-1.fc37

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

The vulnerability of the NewStatPress plugin of the WordPress content management system, related to the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the NewStatPress plugin of the WordPress content management system is related to the lack of measures taken to protect the website structure when processing the whatX parameters. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerability of the Permalink Manager Lite and Permalink Manager Pro plugins of the WordPress content management system, related to the lack of protection for website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Permalink Manager Lite and Permalink Manager Pro plugins of the WordPress content management system is related to the lack of protection for the web page structure when processing query parameters. Exploiting this vulnerability allows a malicious actor to perform cross-si...

ROS-20231025-01

Vulnerability of program/lib/Roundcube/rcubewashtml.php component of RoundCube mail client is related to failure to take measures to protect the structure of the web page. Exploitation of the vulnerability could allow an attacker, acting remotely, to download arbitrary JavaScript code...