The vulnerability of the Adobe Experience Manager content and media management system lies in the lack of measures taken to protect the structure of web pages, allowing attackers to disclose protected information.

The vulnerability of the Adobe Experience Manager content and media management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through XSS attacks...

The vulnerability of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, is related to insufficient protection of the web page structure, allowing a hacker to execute arbitrary code.

The vulnerabilities of the WebReports server, the WebStation user interface, and the Enterprise Server installer, as well as the Enterprise Central installer, are related to insufficient protection of the web page structure. Exploiting these vulnerabilities allows a malicious actor to execute...

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

CVE-2021-37334

Umbraco Forms version 4.0.0 up to and including 8.7.5 and below are vulnerable to a security flaw that could lead to a remote code execution attack and/or arbitrary file deletion. A vulnerability occurs because validation of the file extension is performed after the file has been stored in a...

GHSA-8Q64-WRFR-Q48C Data races in model

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and...

Data races in appendix

The appendix crate implements a key-value mapping data structure called Index that is stored on disk. The crate allows for any type to inhabit the generic K and V type parameters and implements Send and Sync for them unconditionally. Using a type that is not marked as Send or Sync with Index can...

Data races in model

Shared data structure in model crate implements Send and Sync traits regardless of the inner type. This allows safe Rust code to trigger a data race, which is undefined behavior in Rust. Users are advised to treat Shared as an unsafe type. It should not be used outside of the testing context, and...

The vulnerability of the empViewUpdate.php implementation of the online e-commerce sales system allows attackers to perform cross-site scripting attacks.

The vulnerability of the empViewUpdate.php implementation of the online e-commerce sales system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the TYPO3 content management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the TYPO3 content management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Page TSconfig configuration implementation in the TYPO3 content management system allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Page TSconfig configuration implementation in the TYPO3 content management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

SUSE SLED12: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2021:2833-1)

The remote SUSE Linux SLED12 / SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2833-1 advisory. This update for openssl-11 fixes the following security issues: - CVE-2021-3711: A bug in the implementation of the SM2...

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Integer overflow

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that...

Apple macOS CoreText TTF Parsing Out-of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the CoreText library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

PT-2021-3884 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises versions affected versions not specified Description: The issue is related to insufficient protection of the web page structure in Microsoft Dynamics 365, which can be exploited by an attacker to conduct...

The vulnerability of the CASAP Automated Enrollment System software lies in its lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the CASAP Automated Enrollment System lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through the parameter “id...

Potential for market to be created but never initialized

Handle loop Vulnerability details Impact Multiple markets can be created before being initialized since createNewSyntheticMarket and initializeMarket are separate functions. The SyntheticTokens used in initialization will however always be those of the latest market created. Proof of Concept Let'...

The vulnerability of the library for performing fast, customizable HTML AntiSamy cleanup, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the library for performing a quick, customizable cleanup of HTML files related to AntiSamy is linked to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...

Apple macOS AppKit PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AppKit library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...