Lucene search
+L

1516 matches found

Openbugbounty
Openbugbounty
•added 2018/06/25 8:47 a.m.•10 views

journal.bonfring.org XSS vulnerability

Open Bug Bounty ID: OBB-636244 Description| Value ---|--- Affected Website:| journal.bonfring.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
OpenVAS
OpenVAS
•added 2018/06/14 12:00 a.m.•52 views

PKP Open Journal Systems 3.X XSS Vulnerability

PKP Open Journal Systems is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

6.1CVSS6.1AI score0.01796EPSS
SaveExploits0References2
CNVD
CNVD
•added 2018/06/14 12:00 a.m.•11 views

Public Knowledge Project Open Journal System Cross-Site Scripting Vulnerability

Public Knowledge Project PKP Open Journal System OJS is a journal management and publishing system. A cross-site scripting vulnerability exists in PKP OJS version 3.X prior to 3.1.1-2, which stems from the program failing to escape the '$authors' parameter. A remote attacker can use the '$authors...

6.1CVSS6AI score0.01796EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/06/13 3:22 p.m.•6 views

journal.tropika.net XSS vulnerability

Open Bug Bounty ID: OBB-631173 Description| Value ---|--- Affected Website:| journal.tropika.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.2AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2018/06/13 12:00 a.m.•23 views

PKP Open Journal Systems Detection (HTTP)

HTTP based detection of PKP Open Journal Systems. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

7.1AI score
SaveExploits0References1
OSV
OSV
•added 2018/06/12 11:29 a.m.•23 views

CVE-2018-12229

Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...

6.1CVSS6.2AI score
SaveExploits0References4
NVD
NVD
•added 2018/06/12 11:29 a.m.•19 views

CVE-2018-12229

Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...

6.1CVSS6.1AI score0.01796EPSS
SaveExploits0References4
CVE
CVE
•added 2018/06/12 11:00 a.m.•61 views

CVE-2018-12229

The CVE-2018-12229 issue affects PKP Open Journal System (OJS) versions 3.0.0 through 3.1.1-1. The root cause is a cross-site scripting flaw in the templates/frontend/pages/search.tpl, specifically via the By Author field, allowing remote attackers to inject arbitrary web script or HTML. Some sou...

6.1CVSS6AI score0.01796EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2018/06/12 11:00 a.m.•31 views

CVE-2018-12229

Cross-site scripting XSS vulnerability in Public Knowledge Project PKP Open Journal System OJS 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search.tpl parameter aka the By Author field...

6.1AI score0.01796EPSS
SaveExploits0References4
OSS-Fuzz
OSS-Fuzz
•added 2018/06/02 3:05 a.m.•20 views

systemd/fuzz-journal-remote: Heap-buffer-overflow in print_multiline

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=4788028143828992 Project: systemd Fuzzer: libFuzzersystemdfuzz-journal-remote Fuzz target binary: fuzz-journal-remote Job Type: libfuzzerasansystemd Platform Id: linux Crash Type: Heap-buffer-overfl...

6.8AI score
SaveExploits0Affected Software1
OSS-Fuzz
OSS-Fuzz
•added 2018/06/01 5:12 a.m.•30 views

systemd/fuzz-journal-remote: Use-of-uninitialized-value in ascii_is_valid

Project: https://github.com/systemd/systemd.git Detailed report: https://oss-fuzz.com/testcase?key=5661112182767616 Project: systemd Fuzzer: libFuzzersystemdfuzz-journal-remote Fuzz target binary: fuzz-journal-remote Job Type: libfuzzermsansystemd Platform Id: linux Crash Type:...

6.8AI score
SaveExploits0Affected Software1
Openbugbounty
Openbugbounty
•added 2018/05/10 6:56 a.m.•11 views

acriminalwasteofspace.com XSS vulnerability

Open Bug Bounty ID: OBB-614822 Description| Value ---|--- Affected Website:| acriminalwasteofspace.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2018/05/08 1:13 a.m.•18 views

journal-lessor.ch XSS vulnerability

Open Bug Bounty ID: OBB-613810 Description| Value ---|--- Affected Website:| journal-lessor.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SaveExploits0
CNVD
CNVD
•added 2018/05/08 12:00 a.m.•10 views

gofer Denial of Service Vulnerability

gofer is an open source, extensible lightweight Python agent program. A security vulnerability exists in gofer that stems from the program assigning global writable permissions to /var/lib/gofer/journal/watchdog. A local attacker can exploit this vulnerability to cause a denial of service by...

4.4CVSS6.5AI score0.00271EPSS
SaveExploits0References1
Prion
Prion
•added 2018/05/04 8:29 p.m.•20 views

Design/Logic Flaw

gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries...

3.6CVSS6.8AI score0.00271EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/05/04 8:00 p.m.•29 views

CVE-2012-5628

gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries...

4.6AI score0.00271EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/04/05 2:54 a.m.•11 views

mylocal.journal-news.com XSS vulnerability

Open Bug Bounty ID: OBB-597318 Description| Value ---|--- Affected Website:| mylocal.journal-news.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
CNVD
CNVD
•added 2018/03/05 12:00 a.m.•8 views

SQL Injection Vulnerability in Sancai Journal Acquisition and Editing System

Sancai Journal Acquisition and Editing System is a networked office platform. SQL injection vulnerability exists in Sancai Journal Editorial System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

7.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2018/02/21 12:00 a.m.•9 views

The vulnerability of the UpdateThemeVersionPortalComponent component in the SAP NetWeaver software integration platform allows a hacker to execute arbitrary JavaScript code on the client side.

The vulnerability of the UpdateThemeVersionPortalComponent component in the SAP NetWeaver software integration platform exists due to insufficient cleaning of data entered by users when they are displayed on the journal viewing page. Exploiting this vulnerability allows a malicious actor to execu...

6.4CVSS6AI score
SaveExploits0References2Affected Software1
Openbugbounty
Openbugbounty
•added 2018/02/17 7:06 p.m.•17 views

triz-journal.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-561613 Description| Value ---|--- Affected Website:| triz-journal.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

6.7AI score
SaveExploits0
Rows per page
Query Builder