PT-2024-3935

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2022.04.7 JetBrains TeamCity versions prior to 2022.10.6 JetBrains TeamCity versions prior to 2023.05.6 JetBrains TeamCity versions prior to 2023.11.5 Description: The issue allows for an XSS attack to be...

The vulnerability in the virtual learning environment Moodle, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability in the virtual learning environment Moodle relates to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

The vulnerability in the configuration of the CI/CD agent software from JetBrains TeamCity arises from the lack of measures taken to protect the structure of web pages. This allows attackers to carry out XSS attacks.

The vulnerability of TeamCity’s CI/CD agent configuration exists because measures were not taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

PT-2024-3646 · Microsoft · Azure Migrate

Name of the Vulnerable Software and Affected Versions: Azure Migrate affected versions not specified Description: The issue is related to a lack of protection for the web page structure, allowing a remote attacker to perform a cross-site scripting attack. Recommendations: At the moment, there is ...

The vulnerability of the library for performing rapid, customizable HTML AntiSamy cleanup, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the library for performing fast, customizable HTML AntiSamy cleaning is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks XSS...

The vulnerability of the Webview2 control in the Microsoft Edge browser allows attackers to perform spoofing attacks.

The vulnerability of the Webview2 control in Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...

PT-2024-5546 · Antiphish · Antiphish

Name of the Vulnerable Software and Affected Versions: Antiphish affected versions not specified Description: The issue is related to the lack of protection for the web page structure in the Antiphish software, which is used for training employees in information security skills. This can be...

PT-2024-2861 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue exists due to inadequate protection of the web page structure. Exploitation may allow a remote attacker to execute arbitrary code. This stored Cross-Site Scripting XS...

ROS-20240408-02

A vulnerability in the net/html library of the Go programming language exists due to a failure to take measures to protect the structure of a web page. the structure of the web page. Exploitation of the vulnerability could allow an attacker acting remotely, conduct cross-site scripting attacks...

The vulnerability of the OpenNMS Meridian and Horizon network monitoring systems lies in the lack of security measures taken to protect the structure of the web pages. This allows attackers to gain unauthorized access to the protected information related to sessions.

The vulnerability of the OpenNMS Meridian and Horizon network monitoring systems exists due to the lack of measures taken to protect the structure of the web pages. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information related to sessions...

PT-2024-41414 · Ооо "Ивс" · Videograce

Уязвимость функции создания нового пользователя клиента программного обеспечения видеоконференцсвязи VideoGrace связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, провести атаку межсайтового скриптинга XSS...

PT-2024-41419 · Ооо "Ивс" · Videograce

Уязвимость функции создания конференции клиента программного обеспечения видеоконференцсвязи VideoGrace связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, провести атаку межсайтового скриптинга XSS...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of measures taken to protect the structure of web pages. This allows attackers to gain unauthorized access to protected information.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird exists due to the lack of measures taken to protect the structure of web pages when processing HTML and body tags. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the structure of web pages, allows attackers to carry out XSS attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to carry out XSS attacks...

The vulnerability of Adobe Experience Manager’s content and media data management system, which stems from the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of Adobe Experience Manager’s content and media data management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks...

The vulnerability of the Jenkins HTML Publisher plugin, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Jenkins HTML Publisher plugin exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2024-2306 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue exists due to inadequate protection of the web page structure. Exploitation may allow a remote attacker to conduct a cross-site scripting XSS attack. If an attacker c...

PT-2024-2432 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.19 and earlier Description: The issue exists due to inadequate protection of the web page structure in Adobe Experience Manager, allowing a remote attacker to exploit the vulnerability and execute arbitra...

PT-2024-2819 · Netcat · Netcat

Name of the Vulnerable Software and Affected Versions: Netcat affected versions not specified Description: The issue is related to the lack of protection measures for the web page structure in the Netcat CMS system. Exploitation of this issue may allow a remote attacker to gain unauthorized acces...

The vulnerability of the WYSIWYG editor CKEditor’s preview function allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the WYSIWYG editor CKEditor’s preview function exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code remotely...