Lucene search
+L

5618 matches found

BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.9 views

The vulnerability of Microsoft Business Productivity Servers, SharePoint Enterprise Server, and SharePoint Foundation lies in the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft Business Productivity Servers, SharePoint Enterprise Server, and SharePoint Foundation relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a...

5.4CVSS5.6AI score0.01546EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/03/24 12:0 a.m.23 views

Adobe Media Encoder CC MP4 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Media Encoder CC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.8CVSS5.6AI score0.05055EPSS
SaveExploits0References1
Prion
Prion
added 2020/03/20 7:15 p.m.23 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

4.3CVSS3.9AI score0.08158EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/03/20 6:40 p.m.35 views

CVE-2020-8883

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS4AI score0.08384EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/03/20 6:40 p.m.25 views

CVE-2020-8879

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

3.3CVSS4AI score0.08158EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/03/18 12:0 a.m.30 views

Foxit Studio Photo GetTIFPalette TIF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS3.9AI score0.04973EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.7 views

The vulnerability of Microsoft Exchange Server servers stems from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Microsoft Exchange Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created request...

8.7CVSS6.6AI score0.01649EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.7 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created...

9.4CVSS5.6AI score0.01507EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.9 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages arises from the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created reque...

5.4CVSS5.6AI score0.01299EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.9 views

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of protective measures for website structures, allowing attackers to execute cross-site scripting attacks and modify data.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server relates to the lack of security measures for website structures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created...

5.4CVSS5.6AI score0.01299EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2020/03/16 12:0 a.m.40 views

Foxit Studio Photo PSD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS3.7AI score0.11057EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/03/16 12:0 a.m.25 views

Foxit Studio Photo PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.2AI score0.08158EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/03/16 12:0 a.m.35 views

Foxit Studio Photo PSD File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

3.3CVSS1.2AI score0.08158EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/03/10 12:0 a.m.10 views

PT-2020-2444 · Unknown · Control Center Server

Name of the Vulnerable Software and Affected Versions: Control Center Server versions prior to V1.5.0 Description: The issue is related to a lack of protection against SQL query structure exploitation. This can be exploited by a remote attacker to read or modify the central control server databas...

9CVSS8.8AI score0.01999EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.15 views

The vulnerability of the Microsoft SharePoint Server software lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS5.6AI score0.01553EPSS
SaveExploits0References3
Carbon Black Blog
Carbon Black Blog
added 2020/03/04 5:24 p.m.38 views

IT Operations and Security: It’s Time to Build Something Better Together

Having been in the industry for longer than I care admit, I have seen the growth pre and post public internet. With that growth, there have been many changes with how organizations address the balance of IT Operations and Security, where tension still exists. IT Ops must keep the business running...

SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.8 views

The vulnerability of the WirelessHART server implementation of IE/WSN-PA Link allows a attacker to perform cross-site scripting attacks.

The vulnerability of the WirelessHART server implementation of the IE/WSN-PA Link protocol is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

7.6CVSS7.4AI score0.0112EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.11 views

The vulnerability in the web interface of the Cisco Email Security Appliance allows a perpetrator to execute arbitrary code in the context of the current user or disclose protected information.

The vulnerability in the web interface of the Cisco Email Security Appliance exists because measures to protect the structure of the web page have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, or to disclose...

6.4CVSS6.3AI score0.0084EPSS
SaveExploits0References2Affected Software1
Kitploit
Kitploit
added 2020/03/02 12:0 p.m.182 views

BadBlood - Fills A Microsoft Active Directory Domain With A Structure And Thousands Of Objects

BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding...

7.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.9 views

The vulnerability of the AdminURLFieldWidget function in the Django web development framework relates to the lack of protective measures for website structure, allowing attackers to compromise data integrity.

The vulnerability of the AdminURLFieldWidget function in the Django web development framework is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

4.7CVSS6.3AI score0.02382EPSS
SaveExploits0References12Affected Software5
Rows per page
Query Builder