Lucene search
+L

6865 matches found

BDU FSTEC
BDU FSTEC
•added 2024/03/29 12:00 a.m.•16 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.9AI score0.00427EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•12 views

PT-2024-41419 · Ооо "Ивс" · Videograce

Уязвимость функции создания конференции клиента программного обеспечения видеоконференцсвязи VideoGrace связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, провести атаку межсайтового скриптинга XSS...

5.5CVSS7.3AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/03/29 12:00 a.m.•13 views

PT-2024-41414 · Ооо "Ивс" · Videograce

Уязвимость функции создания нового пользователя клиента программного обеспечения видеоконференцсвязи VideoGrace связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, провести атаку межсайтового скриптинга XSS...

5.5CVSS7.3AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/03/28 12:00 a.m.•43 views

Siemens Simcenter Femap MODEL File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS7.2AI score0.00396EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/03/28 12:00 a.m.•18 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.9AI score0.00427EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/28 12:00 a.m.•15 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.9AI score0.00427EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/28 12:00 a.m.•16 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which exists due to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...

5.5CVSS5.8AI score0.00427EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/28 12:00 a.m.•16 views

The vulnerability of the PRO32 Connect web application lies in the lack of protective measures for the web page structure, allowing attackers to execute arbitrary code.

The vulnerability of the PRO32 Connect web application is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.4CVSS5.9AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/27 12:00 a.m.•18 views

The vulnerability of Microsoft Edge browser, related to insufficient protection of the web page structure, allows attackers to circumvent security restrictions and perform cross-site scripting attacks.

The vulnerability of Microsoft Edge relates to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and perform cross-site scripting attacks using a specially created malicious web page...

5CVSS5.2AI score0.01111EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/27 12:00 a.m.•12 views

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to gain unauthorized access to protected information.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of measures taken to protect the structure of web pages when processing HTML and body tags. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

6.4CVSS6.6AI score0.00704EPSS
SaveExploits1References23Affected Software11
BDU FSTEC
BDU FSTEC
•added 2024/03/27 12:00 a.m.•18 views

The vulnerability in the phpMyFAQ web application allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the phpMyFAQ web application is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS using specially created .html files...

5.8CVSS5.2AI score0.00508EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/27 12:00 a.m.•19 views

The vulnerability of the FILTER_VALIDATE_EMAIL function in the phpMyFAQ web application, which allows a hacker to execute arbitrary code.

The vulnerability of the FILTERVALIDATEEMAIL function in the phpMyFAQ web application is related to the lack of security measures for the structure of the web page. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

6.5CVSS6AI score0.00691EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/27 12:00 a.m.•22 views

The vulnerability of the phpMyFAQ web application lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the phpMyFAQ web application is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...

5.8CVSS6.1AI score0.00542EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/26 12:00 a.m.•16 views

The vulnerability of the Lab Handler component in the EVE-NG multi-user networking emulation software allows a attacker to perform XSS attacks.

The vulnerability of the Lab Handler component in the EVE-NG multi-user networking emulator exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

4CVSS5.3AI score0.00479EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/26 12:00 a.m.•16 views

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of security measures for SQL query structures, allowing attackers to execute arbitrary SQL queries against the database.

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database remotely...

6.4CVSS6AI score0.003EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/03/25 10:15 a.m.•4 views

DEBIAN-CVE-2021-47165

In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix shutdown crash when component not probed When main component is not probed, by example when the dw-hdmi module is not loaded yet or in probe defer, the following crash appears on shutdown: Unable to handle kernel...

5.5CVSS5.5AI score0.00226EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/25 10:15 a.m.•13 views

UBUNTU-CVE-2021-47165

In the Linux kernel, the following vulnerability has been resolved: drm/meson: fix shutdown crash when component not probed When main component is not probed, by example when the dw-hdmi module is not loaded yet or in probe defer, the following crash appears on shutdown: Unable to handle kernel...

5.5CVSS6.2AI score0.00226EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2024/03/25 12:00 a.m.•15 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

5.5CVSS5.9AI score0.00401EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/23 12:00 a.m.•3 views

PT-2024-6059

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 126 Description The issue is related to a file dialog shown while in full-screen mode, which could result in the window remaining disabled. Additionally, there is a vulnerability associated with the failure to protect...

8.5CVSS6AI score0.00417EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2024/03/22 4:57 p.m.•69 views

Denial of service while parsing a tar file due to lack of folders count validation

Description: During some analysis today on npm's node-tar package I came across the folder creation process, Basicly if you provide node-tar with a path like this ./a/b/c/foo.txt it would create every folder and sub-folder here a, b and c until it reaches the last folder to create foo.txt, In-thi...

6.5CVSS7AI score0.00929EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder