Lucene search
K

13 matches found

Redos
Redos
added 2026/04/01 12:0 a.m.6 views

ROS-20260401-73-0002

A vulnerability in RoundCube Webmail email client is related to the failure to take measures to protect the structure of a web page. Exploitation of the vulnerability could allow an attacker acting remotely to conduct cross-site scripting XSS attacks...

7.2CVSS6AI score0.19769EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2025/01/19 12:0 a.m.3 views

The vulnerability of the Markdown Marp Core presentation creation tool is related to insufficient protection of website structures, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Markdown-based presentation creation tool Marp Core is related to insufficient protection of the web page structure when processing HTML content. Exploiting this vulnerability could allow attackers to perform cross-site scripting attacks...

5.3CVSS5.2AI score0.00307EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/12 12:0 a.m.3 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to carry out cross-site scripting attacks...

5.5CVSS5.2AI score0.00534EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/09 12:0 a.m.2 views

The vulnerability of the RESTEasy software lies in the lack of protective measures for website structures, allowing attackers to carry out XSS attacks.

The vulnerability of the RESTEasy software is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

6.4CVSS6.7AI score0.01394EPSS
Exploits1References6Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.2 views

Microsoft Edge browser’s vulnerability, related to the lack of protection for website structure, allows attackers to enhance their privileges.

The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

7.5CVSS6.9AI score0.01121EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/11 12:0 a.m.3 views

The vulnerability of the jQuery library lies in its lack of protection for website structures, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the jQuery library is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting using AJAX requests...

6.4CVSS6.7AI score0.30224EPSS
Exploits2References39Affected Software50
BDU FSTEC
BDU FSTEC
added 2023/02/17 12:0 a.m.3 views

The vulnerability of the monitoring system for critical equipment, StruxureWare Data Center Expert, arises due to the lack of measures taken to protect the structure of the web page. This vulnerability allows attackers to carry out XSS attacks.

The vulnerability of the StruxureWare Data Center Expert monitoring system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

8.5CVSS6.3AI score0.00392EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:0 a.m.2 views

The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, as well as in browsers like Safari, multimedia player iTunes, and iCloud service for Windows operating systems, allows attackers to execute cross-site scripting attacks.

The vulnerability of the web page rendering modules in WebKitGTK and WPE for Apple operating systems such as iPadOS, watchOS, iOS, tvOS, the Safari browser, the multimedia player iTunes, and the iCloud service for Windows operating systems is related to the lack of measures taken to protect the...

7.1CVSS6.3AI score0.01092EPSS
Exploits0References15Affected Software14
BDU FSTEC
BDU FSTEC
added 2021/02/04 12:0 a.m.1 views

The vulnerability of the eDocLib platform for storing and processing corporate data arises from the lack of measures taken to protect the website structure. This vulnerability allows attackers to carry out cross-site scripting attacks.

The vulnerability of the eDocLib platform for storing and processing corporate data exists due to the lack of measures taken to protect its web page structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code in the user’s browser by creating a...

6.5CVSS5.9AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:0 a.m.1 views

The vulnerability of the Mozilla Firefox browser, related to the lack of measures taken to protect the structure of web pages, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Mozilla Firefox browser is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

7.5CVSS7.2AI score0.01522EPSS
Exploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2020/08/12 12:0 a.m.1 views

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, stems from the lack of security measures taken to protect the structure of web pages. This vulnerability allows attackers to execute cross-site scripting attacks (XSS).

The software platform for managing virtual environments, CloudForms Management Engine, is vulnerable due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

6.5CVSS5.6AI score0.00661EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/05/26 12:0 a.m.3 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

6.1CVSS6.3AI score0.0151EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/05/06 12:0 a.m.3 views

The vulnerability of the Etlas electronic document management system allows a perpetrator to execute arbitrary codes.

The vulnerability of the Etlas e-mail processing system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the user’s browser by placing it in the “Description” field when creating ...

5.5CVSS5.9AI score
Exploits0Affected Software1
Rows per page
Query Builder