6865 matches found
The vulnerability of the CMS system Netcat, which stems from the lack of protective measures for website structures, allows attackers to gain unauthorized access to the system.
The vulnerability of the CMS system Netcat is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system...
SUSE CVE-2021-47194
In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211stopap when switch from P2PGO type If the userspace tools switch from NL80211IFTYPEP2PGO to NL80211IFTYPEADHOC via sendmsgNL80211CMDSETINTERFACE, it does not call the cleanup cfg80211stopap, this leads to t...
PT-2024-5546 · Antiphish · Antiphish
Name of the Vulnerable Software and Affected Versions: Antiphish affected versions not specified Description: The issue is related to the lack of protection for the web page structure in the Antiphish software, which is used for training employees in information security skills. This can be...
CVE-2021-47183
In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix link down processing to address NULL pointer dereference If an FC link down transition while PLOGIs are outstanding to fabric well known addresses, outstanding ABTS requests may result in a NULL pointer dereferenc...
CVE-2024-20797
CVE-2024-20797 affects Adobe Animate: versions 23.0.4, 24.0.1 and earlier suffer an out-of-bounds read while parsing a crafted file, potentially enabling code execution in the current user context. Exploitation requires user interaction (victim must open a malicious file). The issue is part of a ...
UBUNTU-CVE-2021-47194
In the Linux kernel, the following vulnerability has been resolved: cfg80211: call cfg80211stopap when switch from P2PGO type If the userspace tools switch from NL80211IFTYPEP2PGO to NL80211IFTYPEADHOC via sendmsgNL80211CMDSETINTERFACE, it does not call the cleanup cfg80211stopap, this leads to t...
The vulnerability of the CheckUser extension of the software environment for implementing MediaWiki’s hypertext environment allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the CheckUser extension of the MediaWiki software environment exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks through message definitions. For...
PT-2024-2861 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue exists due to inadequate protection of the web page structure. Exploitation may allow a remote attacker to execute arbitrary code. This stored Cross-Site Scripting XS...
PT-2024-22325
Name of the Vulnerable Software and Affected Versions Contao versions 4.0.0 through 4.13.39 Contao versions 5.0.0 through 5.3.3 Description The issue allows inject tags in frontend forms if the output is structured in a very specific way. It is possible to inject insert tags via the form generato...
The vulnerability of the ProofreadPage extension, a software tool for implementing a hypertext environment like MediaWiki, allows a hacker to carry out cross-site scripting attacks.
The vulnerability of the ProofreadPage extension, a software tool for implementing the MediaWiki hypertext environment, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attac...
ROS-20240408-02
A vulnerability in the net/html library of the Go programming language exists due to a failure to take measures to protect the structure of a web page. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, conduct cross-site scripting attacks...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.
The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of the OpenNMS Meridian and Horizon network monitoring systems lies in the lack of security measures taken to protect the structure of the web pages. This allows attackers to gain unauthorized access to the protected information related to sessions.
The vulnerability of the OpenNMS Meridian and Horizon network monitoring systems exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information related to sessions...
The vulnerability of the Wiki Page Handler component of the software platform based on Git for collaborative code development on GitLab allows a attacker to perform XSS attacks.
The vulnerability of the Wiki Page Handler component in the git-based software development platform for collaborative code development on GitLab exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS...
CVE-2024-26735
A use-after-free flaw was found in the Linux kernel’s IPv6 protocol functionality. This flaw allows a local user to potentially crash the system...
PT-2024-2950
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description The issue exists due to inadequate protection of the webpage structure. Exploitation of this issue may allow an attacker to conduct spoofing attacks. Recommendations At...
CVE-2024-26761
In the Linux kernel, the following vulnerability has been resolved: cxl/pci: Fix disabling memory if DVSEC CXL Range does not match a CFMWS window The Linux CXL subsystem is built on the assumption that HPA == SPA. That is, the host physical address HPA the HDM decoder registers are programmed wi...