CVE-2017-16239

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters for example, the ImagePropertiesFilter or the IsolatedHostsFilter. All setups using Nova Filter...

UBUNTU-CVE-2017-16239

In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters for example, the ImagePropertiesFilter or the IsolatedHostsFilter. All setups using Nova Filter...

16-25railcard.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-367489 Description| Value ---|--- Affected Website:| 16-25railcard.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-14328

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot...

CVE-2017-14327

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files...

CVE-2017-14329

The CVE-2017-14329 entry affects Extreme EXOS 16.x, 21.x, and 22.x. Multiple connected documents confirm an elevation-of-privilege issue that can yield a root shell via vectors involving an exsh debug shell. Impact is described as gaining root-level access on affected EXOS versions; the vulnerabi...

smithsworldwide.org XSS vulnerability

Vulnerable URL: http://www.smithsworldwide.org/tng/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 18.11.2017 Vulnerability type:| XSS...

ct.pinterest.com Open Redirect vulnerability

Vulnerable URL: https://ct.pinterest.com///redirect/?userid=522980712886972779=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

documentabalear.cat XSS vulnerability

Vulnerable URL: http://www.documentabalear.cat/cataleg.php?id=13'" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 14246855 VIP website status:| No Coordinated Disclosure Timeline:...

GLSA-201710-16 : Shadow: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-201710-16 Shadow: Buffer overflow Malformed input in the newusers tool may produce crashes and other unspecified behaviors. Impact : A remote attacker could possibly cause a Denial of Service condition or bypass privilege boundari...

nesterovsky-bros.com Open Redirect vulnerability

Vulnerable URL: http://www.nesterovsky-bros.com/weblog/ct.ashx?id=982af0b6-9789-4368-b75f-29c832f2a0ec=data%3Atext%2Fhtml%3Bbase64%2CPHNjcmlwdD5hbGVydCgvT1BFTkJVR0JPVU5UWS8pPC9zY3JpcHQ%2B Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 01.01.2018...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

Razer US: Open redirect on oauth2.razerzone.com due to missing verification of redirect-uri paramether on /thirdparty endpoint

Thanks to SP1D3RS for a great report. Although there was some initial difficulty verifying this vulnerability in triage, he was very professional and helpful working with the team to make sure this was understood. This was fixed in production on 10/16. I discovered the Open Redirect on the...

streamly.com Open Redirect vulnerability

Vulnerable URL: https://www.streamly.com/R/18Kg4fj0StZ?url=https%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 974317 VIP website status:| ...

conpas.net XSS vulnerability

Vulnerable URL: https://www.conpas.net/search/%22%3e%3csvg%20onload=alert%22OPENBUGBOUNTY%22%3e Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 218860 VIP website status:| No...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

CVE-2017-14502

readheader in archivereadsupportformatrar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archivereadformatrarreadheader...

sp-direct.jp XSS vulnerability

Vulnerable URL: https://sp-direct.jp/products/list/?transactionid=109277f4de35e559bb3a08a890dba6eebc06e82a=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=%E6%A4%9C%E7%B4%A2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.12.2017 Vulnerability...

jhmt.org.uk Open Redirect vulnerability

Vulnerable URL: http://jhmt.org.uk/go.php?id=3666=http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 15486074 VIP website status:| No Coordinated...