i-funbox.com XSS vulnerability

Open Bug Bounty ID: OBB-596629 Description| Value ---|--- Affected Website:| i-funbox.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Ubuntu 16.04 LTS : Linux (HWE) vulnerabilities (USN-3617-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3617-2 advisory. USN-3617-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement H...

i-ero.com XSS vulnerability

Open Bug Bounty ID: OBB-594835 Description| Value ---|--- Affected Website:| i-ero.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

i-kluch.ru XSS vulnerability

Open Bug Bounty ID: OBB-593526 Description| Value ---|--- Affected Website:| i-kluch.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2018-1243 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.15.15 Description: The issue is related to the ext4 iget function in the Linux kernel, which mishandles a specific case involving a root directory with a zero i links count. This can be exploited by attackers t...

Allen Bradley Micrologix 1400 Series B Unauthenticated Data/Program/Function File Improper Access Control Vulnerability

Summary An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive...

Improper access control

I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access read, write and delete to project discussions...

Cross site request forgery (csrf)

I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...

Cross site scripting

I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...

CVE-2018-1000139

I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...

CVE-2018-1000138

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

CVE-2018-1000139

I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...

CVE-2018-1000138

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

CVE-2018-1000137

I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...

CVE-2018-1000137

I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...

CVE-2018-1000139

I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...

CVE-2018-1000138

I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources...

CVE-2018-1000141

The CVE-2018-1000141 entry concerns Librarian (Scilico I, Librarian) 4.9 and earlier, with an Incorrect Access Control flaw in ajaxdiscussion.php that lets any user read, write, or delete project discussions. The connected Red Hat/CNVD/EUVD/OSV/PRION/CVE listings corroborate the same description....

CVE-2018-1000137

The provided connected sources confirm CVE-2018-1000137 affects I, Librarian

CVE-2018-1000137

I, Librarian version 4.8 and earlier contains a Cross site Request Forgery CSRF vulnerability in users.php that can result in the password of the admin being forced to be changed without the administrator's knowledge...