262 matches found
@boyuai/fe-base (>=0.37.0, <=0.42.6), @boyuai/markdown (>=0.1.0, <=0.6.0) +29 more potentially affected by unknown CVE via markdown-it-texmath (>=0.4.7, <=0.8.0)
markdown-it-texmath NPM version =0.4.7, =0.37.0, =0.1.0, =0.1.1, =0.2.1, =0.0.1, =0.0.7, =1.0.0, =2.15.3-alpha.0, =1.1.0, =0.1.0, =0.1.0, =0.6.0, =1.3.5 - @navanjr/vuetify-markdown-editor 1.0.0 - @suehok/vuetify-markdown-editor 3.3.4 and more Source cves: unknown CVE Source advisory:...
fe-mail.gr Cross Site Scripting vulnerability OBB-1307734
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Arbitrary file reading vulnerability in fe***.php file of Tuan ah VIP movie system
Tuan ah VIP movie system is a set of VIP movie video watching website source code with registered member agent version. Tuan ah VIP movie system fe.php file exists arbitrary file reading vulnerability, an attacker can use this vulnerability to read arbitrary files...
CVE-2009-1959
Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...
santa-fe.listado-empresas.es Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-980047 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...
SQL Injection Vulnerability in MetInfo fe***.php File
MetInfo is a content management system developed using PHP and Mysql. A SQL injection vulnerability exists in the MetInfo fe.php file. An attacker can exploit the vulnerability to obtain sensitive database information...
atccl.org.ar XSS vulnerability
Open Bug Bounty ID: OBB-600250 Description| Value ---|--- Affected Website:| atccl.org.ar Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
boeking.vakantie24.nl XSS vulnerability
Open Bug Bounty ID: OBB-596751 Description| Value ---|--- Affected Website:| boeking.vakantie24.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
mavitravel.nl XSS vulnerability
Open Bug Bounty ID: OBB-596741 Description| Value ---|--- Affected Website:| mavitravel.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
lionsdivehotelcuracao.nl XSS vulnerability
Open Bug Bounty ID: OBB-596730 Description| Value ---|--- Affected Website:| lionsdivehotelcuracao.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Design/Logic Flaw
Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service board reset via vectors involving a large amount of traffic from the GE port to the FE port...
CVE-2015-2255
Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service board reset via vectors involving a large amount of traffic from the GE port to the FE port...
CVE-2015-2255
Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service board reset via vectors involving a large amount of traffic from the GE port to the FE port...
UF FE office platform /assetsGroupReport/vendorContacts. jsp parameters startDate injection vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.api.request import req from pocsuite.api.poc import register from pocsuite.api.poc import Output, POCBase import re import requests class TestPOCPOCBase: vulID = '' ssvid version = '1.0' author = '烽火戏诸侯' vulDate =...
UF FE /flex/newsmessage. jsp parameter uname injection vulnerability
No description provided by source...
UF FE /feform/createprinttemplete. jsp parameters formid injection vulnerability
No description provided by source...
UF FE office platform /fenc/ncsubjass. jsp parameters subjcode SQL injection vulnerability
No description provided by source...
用友FE协作办公系统 /security/addRole.jsp 文件 dept 参数SQL注入漏洞
http://www.wooyun.org/bugs/wooyun-2014-060793...