Lucene search
+L

6871 matches found

BDU FSTEC
BDU FSTEC
•added 2022/04/20 12:00 a.m.•22 views

The vulnerability of the CKEditor WYSIWYG editor, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the CKEditor WYSIWYG editor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform XSS attacks remotely...

6.1CVSS7AI score0.01946EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/04/19 12:00 a.m.•25 views

The vulnerability of the Advanced Content Filter WYSIWYG-editor CKEditor module allows a violator to circumvent the existing policy regarding access restrictions for HTML elements.

The vulnerability of the Advanced Content Filter WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow an attacker to circumvent existing policies regarding access restrictions for HTML elements...

5.4CVSS7.4AI score0.01346EPSS
SaveExploits0References5Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/04/18 12:00 a.m.•18 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

8.7CVSS6.9AI score0.82003EPSS
SaveExploits3References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/18 12:00 a.m.•17 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially created links...

8.7CVSS6.9AI score0.87946EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/15 12:00 a.m.•21 views

The vulnerability in the embedded operating system OpenWrt arises from the lack of security measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability in the embedded operating system OpenWrt exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

5.4CVSS5.9AI score0.00515EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/15 12:00 a.m.•27 views

The vulnerability of the Nginx Proxy Manager, a proxy server for managing hosts, arises from its lack of security measures to protect the structure of web pages. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Nginx web server proxy management server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

8.3CVSS5.5AI score0.71209EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/15 12:00 a.m.•20 views

The vulnerability in the embedded operating system OpenWrt arises from the lack of security measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability in the embedded operating system OpenWrt exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

5.4CVSS5.9AI score0.00515EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/13 12:00 a.m.•20 views

PT-2022-2710 · Cisco · Cisco Iox +2

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in the Cisco IOx application hosting environment on multiple Cisco platforms. This could allow an attacker to injec...

7.8CVSS5.3AI score0.0064EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2022/04/13 12:00 a.m.•14 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

5.4CVSS6.4AI score0.71787EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/13 12:00 a.m.•23 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

6.1CVSS6.4AI score0.01018EPSS
SaveExploits0References5Affected Software1
attackerkb
attackerkb
•added 2022/04/12 11:00 p.m.•10 views

CVE-2022-28258

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS5.9AI score0.10121EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/04/12 9:15 a.m.•10 views

CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...

7.5CVSS5.8AI score0.01384EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/12 9:15 a.m.•11 views

CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...

7.5CVSS7.1AI score0.01384EPSS
SaveExploits0References1
Prion
Prion
•added 2022/04/12 9:15 a.m.•23 views

Design/Logic Flaw

A vulnerability has been identified in Simcenter Femap All versions V2022.1.2. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current...

6.8CVSS7.9AI score0.01068EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•1 views

PT-2022-3581

Name of the Vulnerable Software and Affected Versions Mendix versions prior to 7.23.31 Mendix versions prior to 8.18.18 Mendix versions prior to 9.11 Mendix version 9.6 versions prior to 9.6.12 Description The issue is related to insufficient protection of internal data in the Mendix platform,...

7.5CVSS6AI score0.01384EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•5 views

CVE-2022-27241: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...

7.5CVSS6.3AI score0.01384EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•15 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of protective measures for the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

6.1CVSS6.7AI score0.01144EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•27 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of filtering for the default branch name. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.4CVSS6.3AI score0.00991EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•17 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to influence data integrity through malicious links...

6.1CVSS6.4AI score0.00946EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
•added 2022/04/07 3:33 p.m.•88 views

CVE-2022-28390

A double-free flaw was found in the Linux kernel in the emsusbstartxmit function. This flaw allows an attacker to create a memory leak and corrupt the underlying data structure by calling free more than once...

7.8CVSS3.6AI score0.00359EPSS
SaveExploits0References3
Rows per page
Query Builder