12181 matches found
ontariorvda.ca XSS vulnerability
Vulnerable URL: http://www.ontariorvda.ca/wp-content/plugins/shadowbox-js/shadowbox/player.swf?debug=alert%27openbugbounty%27 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10857868 VIP website status:| No Check...
himeji.lover.ms XSS vulnerability
Vulnerable URL: http://himeji.lover.ms/gals.php?staffid=3830 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check himeji.lover.ms SSL connection:| Grade: F...
Code injection
Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php...
CVE-2017-5554
An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can iss...
Authentication flaw
An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can iss...
CVE-2017-5554
The CVE covers OnePlus 3/3T devices running OxygenOS before 4.0.2. A physical attacker can boot into fastboot without authentication by pressing Volume Up during boot and using adb reboot bootloader. Once in fastboot, the attacker can issue fastboot oem selinux permissive to set SELinux to Permis...
CVE-2017-5554
An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot mode, which could be done without any authentication. A physical attacker can press the "Volume Up" button during device boot, where an attacker with ADB access can iss...
[SECURITY] Fedora 24 Update: webkitgtk4-2.14.3-1.fc24
WebKitGTK+ is the port of the portable web rendering engine WebKit to the GTK+ platform. This package contains WebKitGTK+ for GTK+ 3...
Code injection
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available...
CVE-2017-2576
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...
Code injection
In Moodle 3.x, glossary search displays entries without checking user permissions to view them...
CVE-2016-8644
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...
CVE-2016-5012
In Moodle 3.x, glossary search displays entries without checking user permissions to view them...
CVE-2017-2578
In Moodle 3.x, there is XSS in the assignment submission page...
Code injection
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...
Design/Logic Flaw
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...
CVE-2017-2578
In Moodle 3.x, there is XSS in the assignment submission page...
CVE-2016-5013
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...