petersfieldherald.com XSS vulnerability

Vulnerable URL: http://www.petersfieldherald.com/search.cfm?sectionIs=search=LocalNews=2011="= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 9133532 VIP website status:| No...

bengilmore.ca XSS vulnerability

Vulnerable URL: http://bengilmore.ca/index.php?action=searchresults"'--!=&price-min;=50000&price-max;=500000KNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26176889 VIP websi...

International Components for Unicode (ICU) for C/C++ Buffer Overflow Vulnerability (CNVD-2017-05982)

International Components for Unicode ICU is the U.S. IBM and other companies to develop a C / C + + and Java programming languages provide a complete set of Unicode data manipulation function library, but also an open-source project to support the internationalization of software. A heap buffer...

CVE-2017-7868

International Components for Unicode ICU for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8TextAccess function in common/utext.cpp and the utextmoveIndex32 function...

Threat Outbreak Alert RuleID28758: Email Messages Distributing Malicious Software on April 13, 2017

Medium Alert ID: 53445 First Published: 2017 April 13 14:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28758 may contain the following files: Name | Si...

CVE-2017-3006

creationtimestamp| type| source ---|---|--- 2017-04-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41878...

Asterisk 13.13 < 13.13-cert3 / 13.x < 13.14.1 / 14.x < 14.3.1 CDR user Field RCE (AST-2017-001)

According to its SIP banner, the version of Asterisk running on the remote host is 13.13 prior to 13.13-cert3, 13.x prior to 13.14.1, or 14.x prior to 14.3.1. Is it, therefore, affected by a buffer overflow condition due to a failure to check the size when setting the user field on a CDR. An...

vda.gtarcade.com XSS vulnerability

Vulnerable URL: http://vda.gtarcade.com/?q="'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure Timeline:...

Threat Outbreak Alert RuleID28256: Email Messages Distributing Malicious Software on March 13, 2017

Medium Alert ID: 53005 First Published: 2017 March 13 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28256 may contain the following files: Name | Si...

atlantisbahamas.com XSS vulnerability

Vulnerable URL: http://www.atlantisbahamas.com/find?perpage=12= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 84628 VIP website status:| No Coordinated Disclosure Timeline:...

sucksex.com XSS vulnerability

Vulnerable URL: https://www.sucksex.com/?s=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%27OPENBUGBOUNTY%27%29%3B%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 30951 VIP website...

eferding.at XSS vulnerability

Vulnerable URL: http://www.eferding.at/system/web/suche.aspx?search='-confirmopenbugbounty-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8390205 VIP website status:| No Check...

Threat Outbreak Alert RuleID27753: Email Messages Distributing Malicious Software on February 13, 2017

Medium Alert ID: 52652 First Published: 2017 February 13 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27753 may contain the following files: Name |...

at.mcmworldwide.com XSS vulnerability

Vulnerable URL:...

eClinicalWorks Patient Portal SQL Injection Vulnerability (CNVD-2017-01321)

eClinicalWorks Patient Portal is a product for healthcare applications from eClinicalWorks, Inc. that provides patients with a secure means of communicating to view their Personal Health Record PHR, view lab results, and more. An SQL injection vulnerability exists in the template.jsp file in...

CVE-2016-1566

Cross-site scripting XSS vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename. NOTE: this vulnerability was fixed in...

CVE-2017-5570

An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band...

gerbergear.com XSS vulnerability

Vulnerable URL: http://www.gerbergear.com/content/search/%27"--!confirmOPENBUGBOUNTY%3C/script /K/' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 110136 VIP website status:| No...

MS11-072: Description of the security update for Office 2010 (Oart.dll): September 13, 2011

MS11-072: Description of the security update for Office 2010 Oart.dll: September 13, 2011 Microsoft has released security bulletin MS11-072. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

MS11-074: Description of the security update for SharePoint Server 2010 (osrv): September 13, 2011

MS11-074: Description of the security update for SharePoint Server 2010 osrv: September 13, 2011 INTRODUCTION Microsoft has released security bulletin MS11-074. To view the complete security bulletin, visit one of the following Microsoft websites: Home...