Lucene search
+L

556 matches found

BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•14 views

The vulnerability of the Junos operating system arises from the lack of measures taken to protect the web page structure. This allows attackers to intercept the HTTP/HTTPS session of the target user and perform administrative actions.

The vulnerability of the Junos operating system exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to capture the HTTP/HTTPS session of the target user and perform administrative actions...

10CVSS7.6AI score0.01556EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/12/15 12:00 a.m.•18 views

The vulnerability of the Jenkins automation server, related to the lack of protective measures for website structures, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Jenkins automation server exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.01237EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/12/15 12:00 a.m.•13 views

The vulnerability of the Jenkins RapidDeploy Plugin’s connected server module, related to the lack of security measures for the website structure, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Jenkins RapidDeploy Plugin’s connected server module exists due to the lack of security measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.5CVSS5.6AI score0.00735EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/12/11 12:00 a.m.•14 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute arbitrary JavaScript code in the user’s browser.

The vulnerability of the Adobe Experience Manager content and media data management system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...

6.8CVSS5.9AI score0.01678EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2020/11/23 12:00 a.m.•0 views

PT-2021-6684

Name of the Vulnerable Software and Affected Versions macOS Big Sur versions prior to 11.3 iOS versions prior to 14.5 iPadOS versions prior to 14.5 watchOS versions prior to 7.4 tvOS versions prior to 14.5 Description A logic issue was addressed with improved restrictions. Processing maliciously...

6.1CVSS0.01144EPSS
SaveExploits0References161
BDU FSTEC
BDU FSTEC
•added 2020/11/18 12:00 a.m.•13 views

The vulnerability in the web-based management interface of Cisco SD-WAN allows a attacker to execute cross-site attacks.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.1CVSS6AI score0.0084EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•15 views

PT-2020-4803 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to the failure to protect the web page structure in Microsoft Dynamics 365, allowing for potential cross-site scripting attacks. An attacker...

5.5CVSS5.1AI score0.01432EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•15 views

PT-2020-4769 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited by a remote attacker to perform a...

5.5CVSS5.1AI score0.01432EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•11 views

PT-2020-4802 · Microsoft · Dynamics 365

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 on-premises affected versions not specified Description: The issue is related to a lack of protection for the web page structure in Microsoft Dynamics 365, which can be exploited for cross-site scripting attacks. This...

5.5CVSS5AI score0.01432EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
•added 2020/10/13 12:00 a.m.•17 views

The vulnerability of the OLYMPOX educational control system’s web application, which arises from the failure to protect the structure of the web page, allows a hacker to inject arbitrary code.

The vulnerability of the OLYMPOX educational control system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

6.5CVSS6.5AI score0.13112EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/09/22 12:00 a.m.•16 views

The vulnerability of the Microsoft SharePoint Foundation software, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft SharePoint Foundation software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks using specially crafted requests...

5.4CVSS6AI score0.01634EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/09/17 12:00 a.m.•4 views

PT-2020-5883

Name of the Vulnerable Software and Affected Versions: NETGEAR WC7500 versions prior to 6.5.5.24 NETGEAR WC7600 versions prior to 6.5.5.24 NETGEAR WC7600v2 versions prior to 6.5.5.24 NETGEAR WC9500 versions prior to 6.5.5.24 Description: The issue is related to stored XSS and is caused by the...

4.9CVSS0.00517EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2020/09/17 12:00 a.m.•17 views

The vulnerability of the ColdFusion interpreter, related to the lack of measures taken to protect the structure of web pages, allows attackers to inject arbitrary web scripts or HTML code and gain access to protected information.

The vulnerability of the ColdFusion interpreter is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to inject arbitrary web scripts or HTML code remotely, gain access to protected information, and modify the appearance of the...

6.1CVSS6.9AI score0.02391EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/09/10 12:00 a.m.•0 views

PT-2020-5429

Name of the Vulnerable Software and Affected Versions eDocLib affected versions not specified Description The issue arises from inadequate protection of the web page structure in the eDocLib platform for storing and processing corporate data. This allows a remote attacker to execute arbitrary cod...

6.5CVSS6.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/10 12:00 a.m.•2 views

PT-2020-5431

Name of the Vulnerable Software and Affected Versions eDocLib affected versions not specified Description The issue arises from inadequate protection of the web page structure in the eDocLib platform for storing and processing corporate data. This allows a remote attacker to execute arbitrary cod...

6.5CVSS6.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/09/10 12:00 a.m.•1 views

PT-2020-5427

Name of the Vulnerable Software and Affected Versions eDocLib affected versions not specified Description The issue exists due to inadequate protection of the web page structure in the eDocLib platform for storing and processing corporate data. Exploitation of this issue allows a remote attacker ...

6.5CVSS6.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/08/20 12:00 a.m.•3 views

PT-2020-3970

Name of the Vulnerable Software and Affected Versions: VMware App Volumes versions 2.x prior to 2.18.6 VMware App Volumes 4 versions prior to 2006 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. A malicious actor with access to create and edit applications or...

5.5CVSS0.00521EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/07/29 12:00 a.m.•24 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to execute cross-site scripting attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

5.4CVSS6AI score0.01604EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/07/15 12:00 a.m.•2 views

PT-2020-3551

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Analytical Applications Infrastructure versions 8.0.6 through 8.1.0 Description The issue is related to the lack of protection of the web page structure in the Oracle Financial Services Analytical Applications...

7.5CVSS0.00962EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2020/07/14 12:00 a.m.•11 views

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to read arbitrary messages within the AI system.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to read arbitrary messages within the AI system remotely...

7.4CVSS5.5AI score
SaveExploits0Affected Software1
Rows per page
Query Builder