bestofobergurgl.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155272 Security Researcher metamorfosec Helped patch 1963 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting bestofobergurgl.com...

CVE-2020-7947

An issue was discovered in the Login by Auth0 plugin before 4.0.0 for WordPress. It has numerous fields that can contain data that is pulled from different sources. One issue with this is that the data isn't sanitized, and no input validation is performed, before the exporting of the user data...

CVE-2020-7947

The CVE-2020-7947 issue affects the WordPress plugin Login by Auth0 prior to 4.0.0. The vulnerability stems from data fields being populated from multiple sources without sanitization or input validation before exporting user data, enabling CSV injection via a crafted Excel document. Public refer...

CVE-2019-7947

CVE-2019-7947 is a CSRF vulnerability in Magento’s GiftCardAccount removal feature. Affected products/versions are Magento Open Source < 1.9.4.2 and Magento Commerce < 1.14.4.2, and Magento 2 series: < 2.1.18, < 2.2.9, and

CVE-2015-7947

CVE-2015-7947 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

CVE-2015-7947

...

Security Bulletin: IBM Dynamic System Analysis (DSA) Preboot is affected by vulnerabilities in X.Org libs

Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in X.Org libs. Vulnerability Details Summary IBM Dynamic System Analysis DSA Preboot has addressed the following vulnerabilities in X.Org libs. Vulnerability Details CVEID: CVE-2016-7953 Description: X.Org...

CVE-2018-7947

Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153C00 have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific...

Security Advisory - Authentication Bypass Vulnerability in Some Huawei Mobile Phones

There is an authentication bypass vulnerability in some Huawei mobile phones. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific function. Successful exploit may cause som...

MGASA-2018-0011 Updated X11 client libraries packages fix security vulnerability

The XvQueryAdaptors and XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data CVE-2016-5407. The XGetImage function in X.org libX11 before 1.6.4 might allow remo...

CVE-2017-7947

CVE-2017-7947 affects NetApp Clustered Data ONTAP prior to 8.3.2P11, 9.0 prior to P4, and 9.1 prior to P5, enabling attackers to obtain sensitive password information by abusing how passwords entered on the command line are logged non-interactively. Root cause reported in connected documents is p...

GLSA-201704-03 : X.Org: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201704-03 X.Org: Multiple vulnerabilities Multiple vulnerabilities have been discovered in X.Org server and libraries. Please review the CVE identifiers referenced below for details. Impact : A local or remote users can utilize th...

Design/Logic Flaw

Divide-by-zero vulnerability in the opjtcdinittile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service application crash via a crafted jp2 file. NOTE: this issue exists because of an incorrect fix for CVE-2014-7947...

CVE-2016-4797

CVE-2016-4797 affects OpenJPEG prior to 2.1.1. A divide-by-zero in opj_tcd_init_tile (tcd.c) causes denial of service via crafted JP2 files; issue linked to an earlier fix for CVE-2014-7947. Remediation: upgrade to OpenJPEG 2.1.1 or later as indicated in connected advisories.

SUSE SLES11 Security Update : xorg-x11-libs (SUSE-SU-2016:3189-1)

This update for xorg-x11-libs fixes the following issues : - insufficient validation of data from the X server can cause a one byte buffer read underrun bsc1003023, CVE-2016-7953 - insufficient validation of data from the X server can cause out of boundary memory access or endless loops Denial of...

UBUNTU-CVE-2016-7947

Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response...

BELL-CVE-2016-7947 CVE-2016-7947 does not affect BellSoft software

Bulletin has no description...

CVE-2016-7947

CVE-2016-7947 affects X.Org libXrandr. Multiple integer overflows in libXrandr before 1.5.1 can be exploited by remote X servers to trigger out-of-bounds write operations through a crafted response. Public advisories and vendor pages (e.g., Fedora libXrandr 1.5.1, Debian libXrandr fixes, Mageia n...

CVE-2016-7947

Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response...

SUSE SLED12 / SLES12 Security Update : X Window System client libraries (SUSE-SU-2016:2828-1)

This update for the X Window System client libraries fixes a class of privilege escalation issues. A malicious X Server could send specially crafted data to X clients, which allowed for triggering crashes, or privilege escalation if this relationship was untrusted or crossed user or permission...