Lucene search
+L

82 matches found

BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.10 views

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary Web or HTML code.

The vulnerability of the Process Portal component of the Business Process Manager system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

4.3CVSS6.9AI score0.01417EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.9 views

The vulnerabilities in the Moodle learning management system allow a hacker to inject arbitrary Web or HTML code.

Multiple vulnerabilities exist in the Moodle learning management system module, due to the lack of measures taken to protect the website structure. Exploitation of these vulnerabilities allows attackers to inject arbitrary Web or HTML code, through the use of the “student” role and a specially...

3.5CVSS6.4AI score0.0087EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.10 views

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any Web or HTML code.

The vulnerability of the application interface of the IBM WebSphere Portal servers exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

3.5CVSS6.4AI score0.00602EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.11 views

The vulnerability of the Moodle learning management system allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the usergetuserdetails function in the Moodle training management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code, as there is no invocation of...

4.3CVSS6.9AI score0.01465EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.8 views

The vulnerability of the Business Process Manager system allows a perpetrator to inject arbitrary Web or HTML code.

The vulnerability of the Document List control implementation in the Business Process Manager system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially crafted URL...

3.5CVSS6.5AI score0.00921EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/17 12:0 a.m.8 views

The vulnerabilities in the Moodle learning management system allow a hacker to inject arbitrary Web or HTML code.

The multiple vulnerabilities of the Moodle learning management system’s SCORM module exist due to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code using a specially created name for the...

4.3CVSS7AI score0.01465EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.8 views

The vulnerability of the Adobe Connect instant messaging program allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Adobe Connect instant messaging program exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using request parameters...

4.3CVSS5.7AI score0.03194EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.7 views

Vulnerabilities in the software for Cisco WebEx Meetings Server, which allow attackers to inject arbitrary Web or HTML code

Multiple vulnerabilities in the software for Cisco WebEx Meetings Server exist due to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code remotely...

4.3CVSS6.5AI score0.01009EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/03/11 12:0 a.m.8 views

The vulnerabilities of the Cisco Identity Services Engine, a platform for managing network policies, allow attackers to inject arbitrary Web or HTML code.

The Cisco Identity Services Engine’s management platform has multiple vulnerabilities due to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to inject arbitrary Web or HTML code through GET or POST requests...

4.3CVSS5.7AI score0.01546EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2016/03/02 12:0 a.m.15 views

The vulnerability of Microsoft SharePoint Foundation software allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially created request...

4.3CVSS6.8AI score0.06933EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2016/02/24 12:0 a.m.11 views

The vulnerability of the application interface of IBM WebSphere Portal servers allows a hacker to inject any Web or HTML code.

The vulnerability of the application interface of the IBM WebSphere Portal server exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

4.3CVSS6.4AI score0.01009EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2016/01/25 12:0 a.m.8 views

The vulnerability of the Windows operating system, which allows a hacker to inject arbitrary web or HTML code

The vulnerability of the Active Directory service for Windows operating systems exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code by manipulating the wct parameter...

4.3CVSS5.7AI score0.11058EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2016/01/21 12:0 a.m.14 views

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially...

4.3CVSS6.5AI score0.07583EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/01/21 12:0 a.m.8 views

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code using a specially...

4.3CVSS6.5AI score0.07583EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/11/26 12:0 a.m.9 views

The vulnerability of the Microsoft .NET Framework software platform allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the ASP.NET software platform, Microsoft .NET Framework, exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web or HTML code using a specially crafted variable value...

4.3CVSS5.6AI score0.47738EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:0 a.m.8 views

The vulnerability of the Cisco Secure Access Control System’s access control mechanism allows a perpetrator to execute arbitrary web or HTML code.

The vulnerability of the Solution Engine web interface of the Cisco Secure Access Control System exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code using a specially crafte...

4.3CVSS5.9AI score0.0136EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:0 a.m.8 views

The vulnerability of the Cisco Secure Access Control System allows a intruder to inject arbitrary web or HTML code.

The vulnerability of the Cisco Secure Access Control System exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

4.3CVSS5.6AI score0.0136EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.8 views

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary web or HTML code.

The vulnerability of the Development Workbench component of the SAP HANA database management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code remotely...

3.5CVSS5.8AI score0.00954EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.14 views

The vulnerability of the Microsoft SharePoint Server corporate application package and the Microsoft SharePoint Foundation software for electronic document management allows a perpetrator to inject arbitrary web or HTML code.

The vulnerability of the Microsoft SharePoint Server corporate application and the Microsoft SharePoint Foundation software exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remote...

3.5CVSS5.6AI score0.09061EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2015/10/29 12:0 a.m.9 views

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary web or HTML code.

The vulnerability of the Development Workbench component of the SAP HANA database management system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary web or HTML code remotely...

3.5CVSS5.8AI score0.0096EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder