Lucene search
+L

5639 matches found

BDU FSTEC
BDU FSTEC
added 2022/04/20 12:0 a.m.14 views

The vulnerability of the CKEditor WYSIWYG editor, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of the CKEditor WYSIWYG editor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform XSS attacks remotely...

6.1CVSS6.6AI score0.01954EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/04/19 12:0 a.m.16 views

The vulnerability of the Advanced Content Filter WYSIWYG-editor CKEditor module allows a violator to circumvent the existing policy regarding access restrictions for HTML elements.

The vulnerability of the Advanced Content Filter WYSIWYG-editor CKEditor is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow an attacker to circumvent existing policies regarding access restrictions for HTML elements...

5.4CVSS6.8AI score0.01257EPSS
SaveExploits0References5Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.10 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially created links...

8.7CVSS6.9AI score0.87364EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/18 12:0 a.m.10 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

8.7CVSS6.9AI score0.82003EPSS
SaveExploits3References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.13 views

The vulnerability of the Nginx Proxy Manager, a proxy server for managing hosts, arises from its lack of security measures to protect the structure of web pages. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Nginx web server proxy management server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

8.3CVSS5.5AI score0.71209EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.12 views

The vulnerability in the embedded operating system OpenWrt arises from the lack of security measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability in the embedded operating system OpenWrt exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

5.4CVSS5.9AI score0.00515EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/15 12:0 a.m.11 views

The vulnerability in the embedded operating system OpenWrt arises from the lack of security measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability in the embedded operating system OpenWrt exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

5.4CVSS5.9AI score0.00515EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/04/13 12:0 a.m.15 views

PT-2022-2710 · Cisco · Cisco Iox +2

Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to inadequate protection of the web page structure in the Cisco IOx application hosting environment on multiple Cisco platforms. This could allow an attacker to injec...

7.8CVSS5.3AI score0.00601EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.12 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to insufficient filtering of feature flag descriptions. Exploiting this vulnerability allows a malicious actor to influence the integrity of data...

6.1CVSS6.4AI score0.00949EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/13 12:0 a.m.8 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

5.4CVSS6.4AI score0.71787EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/04/12 11:0 p.m.5 views

CVE-2022-28258

Acrobat Reader DC version 22.001.2011x and earlier, 20.005.3033x and earlier and 17.012.3022x and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this...

5.5CVSS5.9AI score0.10409EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/12 9:15 a.m.4 views

CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...

7.5CVSS5.8AI score0.01363EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/12 9:15 a.m.7 views

CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.31, Mendix Applications using Mendix 8 All versions V8.18.18, Mendix Applications using Mendix 9 All versions V9.11, Mendix Applications using Mendix 9 V9.6 All versions V9.6.12. Applications built with a...

7.5CVSS7.1AI score0.01363EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/12 9:15 a.m.16 views

Design/Logic Flaw

A vulnerability has been identified in Simcenter Femap All versions V2022.1.2. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current...

6.8CVSS7.9AI score0.01EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.13 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of filtering for the default branch name. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

5.4CVSS6.3AI score0.00991EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.10 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the lack of protective measures for the structure of web pages, allows attackers to compromise data integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the integrity of data...

6.1CVSS6.7AI score0.01061EPSS
SaveExploits0References5Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.8 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of protective measures for website structures, allowing attackers to compromise data integrity.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to influence data integrity through malicious links...

6.1CVSS6.4AI score0.00946EPSS
SaveExploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2022/04/07 3:33 p.m.82 views

CVE-2022-28390

A double-free flaw was found in the Linux kernel in the emsusbstartxmit function. This flaw allows an attacker to create a memory leak and corrupt the underlying data structure by calling free more than once...

7.8CVSS3.6AI score0.00359EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.9 views

The vulnerability of the Adobe Experience Manager content and media data management system lies in the insufficient protection of the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

6.1CVSS6.7AI score0.01132EPSS
SaveExploits0References3Affected Software1
Packet Storm
Packet Storm
added 2022/04/07 12:0 a.m.299 views

minewebcms 1.15.2 Cross Site Scripting

Exploit Title: minewebcms 1.15.2 - Cross-site Scripting XSS Google Dork: NA Date: 02/20/2022 Exploit Author: Chetanya Sharma @AggressiveUser Vendor Homepage: https://mineweb.org/ Software Link: https://github.com/mineweb/minewebcms Version: 1.15.2 Tested on: KALI OS CVE : CVE-2022-1163...

6.8CVSS5.4AI score0.03506EPSS
SaveExploits4
Rows per page
Query Builder