CVE-2018-5403

Imperva SecureSphere gateway GW running v13, for both pre-First Time Login or post-First Time Login FTL, if the attacker knows the basic authentication passwords, the GW may be vulnerable to RCE through specially crafted requests, from the web access management interface...

SUSE SLED15 / SLES15 Security Update : gnutls (SUSE-SU-2018:2930-1)

This update for gnutls fixes the following security issues : Improved mitigations against Lucky 13 class of attacks CVE-2018-10846: 'Just in Time' PRIME + PROBE cache-based side channel attack can lead to plaintext recovery bsc1105460 CVE-2018-10845: HMAC-SHA-384 vulnerable to Lucky thirteen atta...

Facebook bug exposed private photos of 6.8M users to third-party developers

By Waqas Another day, another privacy breach - This time, the social media giant Facebook has announced that a bug in its Photo API exposed private photos of over 6.8 million users to third-party app developers. The breach took place from September 13 to September 25, 2018, which means for 12 day...

CVE-2017-1268

creationtimestamp| type| source ---|---|--- 2018-12-13 18:23:20+00:00| seen| https://t.me/cibsecurity/1630...

inzaneskins.com XSS vulnerability

Open Bug Bounty ID: OBB-710937 Description| Value ---|--- Affected Website:| inzaneskins.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

frenchtouche.com XSS vulnerability

Open Bug Bounty ID: OBB-710799 Description| Value ---|--- Affected Website:| frenchtouche.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

toto.ecomedes.com XSS vulnerability

Open Bug Bounty ID: OBB-710747 Description| Value ---|--- Affected Website:| toto.ecomedes.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

ialweb.it XSS vulnerability

Open Bug Bounty ID: OBB-710461 Description| Value ---|--- Affected Website:| ialweb.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Script injection of certain symbols bypass portal UI restrictions in Update Rollup 13 for Windows Azure Pack

None None...

Security Bulletin: The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Summary The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Vulnerability Details CVEID: CVE-2018-1650 Description: IBM QRadar Incide...

Security Bulletin: IBM QRadar SIEM is vulnerable to Cross-Site Scripting (CVE-2018-1728)

Summary The product allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality and allowing spoofing attacks. Vulnerability Details CVEID: CVE-2018-1728 Description: IBM QRadar is vulnerable to cross-site scripting. This vulnerability allows users to...

fischer.at XSS vulnerability

Open Bug Bounty ID: OBB-698031 Description| Value ---|--- Affected Website:| fischer.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

dotnet-camp.de XSS vulnerability

Open Bug Bounty ID: OBB-697901 Description| Value ---|--- Affected Website:| dotnet-camp.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Security update 2018-11-13

...

Description of the security update for Outlook 2016: November 13, 2018

None None...

Security update 2018-11-13

...

Security update 2018-11-13

...

jimpower.com XSS vulnerability

Open Bug Bounty ID: OBB-697831 Description| Value ---|--- Affected Website:| jimpower.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

myrapname.com XSS vulnerability

Open Bug Bounty ID: OBB-697658 Description| Value ---|--- Affected Website:| myrapname.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

glusterfs security, bug fix, and enhancement update

3.12.2-18 - fixes bugs bz1524336 bz1622029 bz1622452 3.12.2-17 - fixes bugs bz1615578 bz1619416 bz1619538 bz1620469 bz1620765 3.12.2-16 - fixes bugs bz1569657 bz1608352 bz1609163 bz1609724 bz1610825 bz1611151 bz1612098 bz1615338 bz1615440 3.12.2-15 - fixes bugs bz1589279 bz1598384 bz1599362...