Lucene search
+L

5639 matches found

BDU FSTEC
BDU FSTEC
added 2022/11/02 12:0 a.m.9 views

The vulnerability of the OpenProject project management platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out phishing attacks.

The vulnerability of the OpenProject project management platform lies in the lack of measures taken to protect the structure of the web page when processing the target=blank value without the rel noopener attribute. Exploiting this vulnerability could allow a malicious actor to carry out phishing...

7.5CVSS5.4AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/31 12:0 a.m.13 views

The vulnerability of the Fortinet FortiClient Enterprise Management Server (EMS) server lies in the lack of security measures for the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server relates to the lack of security measures taken during the creation of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

10CVSS5.2AI score0.00276EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/10/28 11:4 a.m.6 views

OESA-2022-2022 libX11 security update

The libX11-devel package contains libraries and header files for libX11. Security Fixes: A vulnerability was found in X.org libX11 and classified as problematic. This issue affects the function XFreeX11XCBStructure of the file xcbdisp.c. The manipulation of the argument dpy leads to memory leak. ...

6.9AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/10/28 12:0 a.m.16 views

The vulnerability of the Fortinet FortiNAC access control device lies in its lack of measures to protect the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Fortinet FortiNAC network access control device is related to the lack of protection for the website structure when processing the User ID parameter for the administrator. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.1CVSS6AI score0.01154EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:0 a.m.10 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

6.4CVSS6AI score0.00543EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/26 12:0 a.m.13 views

The vulnerability of the J-Web interface in Juniper Networks Junos OS allows attackers to execute cross-site scripting attacks.

The vulnerability of the J-Web interface in Juniper Networks Junos OS operating systems is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

9CVSS5.6AI score0.00675EPSS
SaveExploits0References3Affected Software1
Prion
Prion
added 2022/10/25 5:15 p.m.25 views

Design/Logic Flaw

Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...

4.4CVSS7.5AI score0.00557EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/10/25 5:2 p.m.28 views

CVE-2022-38436 Adobe Illustrator CDR File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

Adobe Illustrator versions 26.4 and earlier and 25.4.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the...

7.8CVSS7.6AI score0.00557EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/21 12:0 a.m.11 views

The vulnerability in the virtual learning environment Moodle arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5.5CVSS6AI score0.0082EPSS
SaveExploits1References7Affected Software3
OSV
OSV
added 2022/10/20 9:15 p.m.12 views

CVE-2022-37453

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types...

7.5CVSS6.1AI score0.00726EPSS
SaveExploits0References2
NVD
NVD
added 2022/10/20 9:15 p.m.17 views

CVE-2022-37453

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types...

7.5CVSS0.00726EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.9 views

The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain unauthorized access to...

5.5CVSS6AI score0.00594EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/10/20 12:0 a.m.29 views

CVE-2022-37453

An issue was discovered in Softing OPC UA C++ SDK before 6.10. A buffer overflow or an excess allocation happens due to unchecked array and matrix bounds in structure data types...

7.9AI score0.00726EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.13 views

The vulnerability of the Envira Photo Gallery plugin of the WordPress content management system, related to the lack of protective measures for website structures, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Envira Photo Gallery plugin of the WordPress content management system exists due to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00778EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.13 views

The vulnerability in the web interface for managing security devices in multi-cloud data centers of Cisco’s Tetration model allows attackers to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability in the web-based interface for managing security devices in Cisco Tetration systems exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected...

5.5CVSS6AI score0.00594EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.11 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

5.8CVSS6AI score0.00558EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.7 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

5.8CVSS6AI score0.00543EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.12 views

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created link...

5.5CVSS6AI score0.36756EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.15 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

6.4CVSS6AI score0.00543EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.11 views

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks...

5.8CVSS6AI score0.00543EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder