Lucene search
+L

6 matches found

BDU FSTEC
BDU FSTEC
added 2025/02/24 12:0 a.m.6 views

The vulnerability of the sshterm.php script (located at usr/local/nagiosxi/html/admin/sshterm.php), a monitoring tool for Nagios XI, allows attackers to perform cross-site scripting attacks.

The vulnerability of the sshterm.php script located at usr/local/nagiosxi/html/admin/sshterm.php, a monitoring tool for Nagios XI, is related to the lack of security measures taken to protect the web page structure. Exploiting this vulnerability could allow an attacker, operating remotely, to...

6.4CVSS6.6AI score0.97714EPSS
Exploits3References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:0 a.m.10 views

The vulnerability of the actionpack plugin in the Ruby on Rails software platform allows attackers to execute XSS attacks.

The vulnerability of the actionpack plugin for the Ruby on Rails software platform exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.3AI score0.01585EPSS
Exploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/14 12:0 a.m.6 views

The vulnerability in the implementation of the WebRTC mechanism in Mozilla Firefox’s browser allows attackers to perform cross-site scripting attacks.

The vulnerability of the WebRTC mechanism implementation in Mozilla Firefox’s browser is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.1CVSS6.5AI score0.01412EPSS
Exploits1References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2019/08/16 12:0 a.m.13 views

The vulnerability in the implementation of the res protocol in Google Chrome web browsers allows a hacker to execute arbitrary JavaScript code.

The vulnerability in the implementation of the res protocol in Google Chrome browsers exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code through the Internet Explorer web...

7.5CVSS8.2AI score0.00915EPSS
Exploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2015/12/15 12:0 a.m.9 views

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary web or HTML code.

The vulnerability in Microsoft Exchange Server web applications exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

4.3CVSS5.6AI score0.11163EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2015/09/08 12:0 a.m.7 views

The vulnerability of WebSphere Application Server’s application servers allows attackers to inject arbitrary web or HTML code.

The vulnerability of WebSphere Application Server exists because measures are not taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted URL...

3.5CVSS7.8AI score0.00931EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder