PT-2018-2978

Name of the Vulnerable Software and Affected Versions CP 1604 All versions CP 1616 All versions Description A vulnerability has been identified that could allow Cross-Site Scripting XSS attacks if unsuspecting users are tricked into following a malicious link. User interaction is required for a...

The vulnerabilities of the components “/com.sap.portal.themes.integrity.personalization”, “/com.sap.portal.themes.integrity.url”, and “/com.sap.portal.themes.integrity.serverFrameworkCockpit” of the SAP NetWeaver software integration platform allow a malicious individual to inject arbitrary HTML tags into a page.

The vulnerability of the components “/com.sap.portal.themes.integrity.personalization”, “/com.sap.portal.themes.integrity.url”, and “/com.sap.portal.themes.integrity.serverFrameworkCockpit” of the SAP NetWeaver software integration platform exists due to the lack of measures taken to protect the...

The vulnerability of the ColdFusion interpreter, which allows a hacker to modify the structure of a web page

The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to remotely alter the structure of the web page...

PT-2017-1992

Name of the Vulnerable Software and Affected Versions Adobe ColdFusion 2016 versions Update 3 and earlier Adobe ColdFusion 11 versions update 11 and earlier Adobe ColdFusion 10 versions Update 22 and earlier Description The issue is related to a reflected cross-site scripting problem. It exists d...

The vulnerability of the iOS operating system, which allows a perpetrator to carry out a UXSS attack

The vulnerability of the Safari Reader component in the iOS operating system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out a UXSS attack using a specially crafted website...

The vulnerability of the iOS operating system, which allows attackers to carry out XSS attacks

The vulnerability of the WebKit component of the iOS operating system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform XSS attacks injection of malicious code on the Safari browser remotely...

The vulnerability of Google Chrome allows a hacker to obtain information about the integration platform and the operating system.

The vulnerability of the Blink component in Google Chrome exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain information about the integration platform and the operating system...

The vulnerability of the antivirus software Internet Security allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of the antivirus software Internet Security exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

The vulnerability of the ColdFusion interpreter allows attackers to inject arbitrary Web or HTML code.

The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired Web or HTML code remotely...

The vulnerability of the microprogramming software of the Storeonce Backup backup system allows a intruder to inject arbitrary Web or HTML code.

The vulnerability of Storeonce Backup’s microprogramming software exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code remotely...

The vulnerability of Microsoft Excel editors allows a hacker to inject arbitrary Web or HTML code.

The vulnerability of Microsoft Excel editors exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code through a specially crafted email message...

The vulnerability of Microsoft Exchange Server servers allows a hacker to inject arbitrary web or HTML code.

The vulnerability in Microsoft Exchange Server web applications exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code remotely...

The vulnerability of the ColdFusion interpreter allows attackers to inject any web script or HTML code.

The vulnerability of the ColdFusion interpreter exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject any desired web script or HTML code remotely...

PT-2015-1996

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2013 Cumulative Update 8 through 2013 Cumulative Update 9 and 2013 SP1 Description The issue exists due to inadequate protection of the web page structure in Outlook Web Access, allowing a remote attacker to...

The vulnerability of the Mac OS X operating system allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the Quick Look component in the Mac OS X operating system exists due to the lack of security measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code using a previously visited website, during t...

PT-2015-1577

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.5.10 Moodle versions 2.6.x through 2.6.10 Moodle versions 2.7.x through 2.7.7 Moodle versions 2.8.x through 2.8.5 Description A cross-site scripting XSS issue exists due to insufficient protection of the web page...