Lucene search
+L

1123 matches found

BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.7 views

The vulnerability of NETGEAR GS108Tv2 and GS110TPv2 microprogramming devices lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of NETGEAR GS108Tv2 and GS110TPv2 microprogrammed software devices is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

5.2CVSS6AI score0.00596EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.13 views

The vulnerability of the built-in Wi-Fi router software from NETGEAR, including models RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850, stems from insufficient measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks.

The vulnerability of NETGEAR Wi-Fi router software models such as RBK752, RBR750, RBS750, RBK852, RBR850, and RBS850 is related to the lack of security measures for website structures. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

6.5CVSS5.3AI score0.00418EPSS
SaveExploits0References3Affected Software15
BDU FSTEC
BDU FSTEC
added 2022/01/25 12:0 a.m.6 views

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software lies in the lack of protective measures for the website structure, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ built-in software relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow attackers to carry out cross-site scripting attacks...

6.8CVSS5.7AI score0.00539EPSS
SaveExploits0References3Affected Software1
Huntr
Huntr
added 2022/01/02 12:30 p.m.42 views

Code Injection in microweber/microweber

Description HTML Injection is a vulnerability in which the attacker can inject malicious html content in the webpage. Proof of Concept 1 Admin has enabled Comments module, so that people can comment on a blog post. 2 Attacker post the following comment: SOMETHING+SOMETHING Now, observe the change...

5CVSS1.4AI score0.01376EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2021/12/20 12:0 a.m.6 views

The vulnerability of the McAfee Network Security Manager device management system, related to the failure to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the McAfee Network Security Manager device’s management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially created malicious content...

4.9CVSS5.3AI score0.00575EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.5 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

6.1CVSS6.3AI score0.01498EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/07 12:0 a.m.6 views

The vulnerability of Adobe Experience Manager’s content and media data management system, related to the lack of measures taken to protect the structure of web pages, allows attackers to access confidential information.

The vulnerability of the Adobe Experience Manager content and media data management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential information...

6.1CVSS6.3AI score0.01498EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:0 a.m.9 views

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss protection software allows a perpetrator to execute cross-site scripting attacks.

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the lack of protective measures taken for the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks using a specially created...

8.5CVSS6AI score0.00786EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/15 12:0 a.m.11 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

5.4CVSS6.2AI score0.00899EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.10 views

The vulnerability of the WordPress website content management system is related to the lack of measures taken to protect the website’s structure, allowing attackers to inject arbitrary Web or HTML code.

The vulnerability of the WordPress website content management system is related to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code...

5.4CVSS6AI score0.0082EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/21 12:0 a.m.6 views

The vulnerability of the Fortinet FortiManager software and FortiAnalyzer network switch lies in the lack of security measures taken to protect the website structure. This allows attackers to redirect users to malicious web pages.

The vulnerability of the Fortinet FortiManager device management software and the FortiAnalyzer network monitoring software is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to redirect users to a...

6.1CVSS6.3AI score0.00647EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:0 a.m.6 views

The vulnerability of the Microsoft Dynamics 365 resource planning software lies in the insufficient protection of the website structure, which allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

7.8CVSS6.9AI score0.01545EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/08 12:0 a.m.7 views

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, arises from the lack of protective measures for the website structure. This allows attackers to redirect users to malicious web pages.

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to redirect...

6.1CVSS7.1AI score0.00899EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/23 12:0 a.m.8 views

The vulnerability of the Simple Behance Portfolio WordPress plugin lies in its lack of protection for website structures, allowing attackers to inject arbitrary web scripts.

The vulnerability of the file /titan-framework/iframe-font-preview.php in the Simple Behance Portfolio WordPress plugin exists due to the lack of security measures for protecting the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts through...

6.1CVSS6.4AI score0.00895EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/23 12:0 a.m.12 views

The vulnerability of the WYSIWYG Editor module of the Dolibarr resource planning and customer relationship management system allows a hacker to gain access to the administrator account.

The vulnerability of the WYSIWYG Editor module in the Dolibarr system for resource planning and managing customer relationships exists due to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to remotely gain control of the administrat...

9CVSS7.7AI score0.00893EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.9 views

The vulnerability of the text file viewing tool in the Git-based software platform for collaborative code development on GitLab arises from the lack of protective measures for website structure. This allows attackers to compromise data integrity.

The vulnerability of the text file viewing tool in the Git-based software platform for collaborative code development on GitLab is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability could allow a malicious actor to compromise the integrity o...

6.4CVSS6AI score0.00741EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.7 views

The vulnerability of the OTRS ticket request review screen’s display, related to the lack of protective measures for the website structure, allows attackers to access confidential data.

The vulnerability of the OTRS ticket request review screen relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created email...

7.5CVSS5.8AI score0.01226EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.12 views

The vulnerability of the Roundcube email client installation database, related to the lack of security measures for website structures, allows attackers to compromise data integrity.

The vulnerability of the Roundcube email client’s host and user database installation is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

5.4CVSS6.5AI score0.0092EPSS
SaveExploits1References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/20 12:0 a.m.5 views

The vulnerability of the Drupal CMS system’s kernel, related to the lack of protective measures for website structures, allows attackers to compromise data integrity.

The vulnerability of the Drupal CMS system’s kernel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the data...

6.1CVSS6.3AI score0.00662EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/09/08 12:0 a.m.17 views

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system for small and medium-sized businesses lies in the lack of security measures for the website structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the Microsoft Dynamics 365 Business Central and integrated enterprise management system relates to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created...

5.8CVSS6AI score0.0095EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder