Oracle Primavera Gateway Multiple Vulnerabilities (July 2017 CPU)

According to its self-reported version number, the Oracle Primavera Gateway installation running on the remote web server is prior to 14.2.3, 15.x prior to 15.2.12, or 16.x prior to 16.2.4. It is, therefore, affected by the following vulnerabilities : - A remote code execution vulnerability exist...

Oracle WebCenter Content Server Multiple Vulnerabilities (July 2017 CPU)

The version of Oracle WebCenter Content running on the remote host is affected by multiple vulnerabilities : - An unspecified flaw exists in the Content Server component that allows an unauthenticated, remote attacker to impact confidentiality and integrity. Note that this issue only applies to...

Oracle Primavera Unifier Multiple Vulnerabilities (July 2017 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.x prior to 16.2.8.1. It is, therefore, affected by the following vulnerabilities : - A unspecified flaw exists in the Platform component that allows an authenticated,...

Oracle E-Business Multiple Vulnerabilities (July 2017 CPU) (SWEET32)

The version of Oracle E-Business installed on the remote host is missing the July 2017 Oracle Critical Patch Update CPU. It is, therefore, affected by the following vulnerabilities : - Multiple integer overflow conditions exist in the OpenSSL component in s3srvr.c, sslsess.c, and t1lib.c due to...

Oracle Java SE Multiple Vulnerabilities (July 2017 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 8 Update 141, 7 Update 151, or 6 Update 161. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the 2D component that allows an unauthenticated, remote...

Oracle VM VirtualBox 5.1.x < 5.1.24 (July 2017 CPU)

The version of Oracle VM VirtualBox installed on the remote host is 5.1.x prior to 5.1.24. It is, therefore, affected by multiple vulnerabilities : - Multiple unspecified vulnerabilities exist in the Core component that allow a local attacker to have an impact on confidentiality, integrity, and...

Oracle Solaris Critical Patch Update : jul2017_SRU11_3_22_3_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: CDE Calendar. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows...

hotelbrugge-oostkamp.be XSS vulnerability

Vulnerable URL: https://www.hotelbrugge-oostkamp.be/overnachten/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for July 2017 to address 308 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the Oracle July...

vcharkarn.com XSS vulnerability

Vulnerable URL: http://www.vcharkarn.com/vcafe/search?searchkey=aaaaa%22+foo%3Dbar+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.10.2017 Vulnerability type:| XSS...

nat-geo.ru Open Redirect vulnerability

Vulnerable URL: http://www.nat-geo.ru/go.php?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.09.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 32581 VIP website status:| Yes Check...

drive.be XSS vulnerability

Vulnerable URL: https://www.drive.be/fr/recherche/$0022-alert$0028$0027OPENBUGBOUNTY$0027$0029-$0022/0/1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 152278 VIP website status:| ...

webempresa.com XSS vulnerability

Vulnerable URL: https://www.webempresa.com/foro/42-Administración-PrestaShop/140942-searchindex-muy-grande-y-creciendo.html/"--!" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 115...

lis.co.th XSS vulnerability

Vulnerable URL: http://www.lis.co.th/products/products.php?pmainid=1&=Carpet%22%27--!%3E%3Cscript%3EalertOPENBUGBOUNTY%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

remax.de XSS vulnerability

Vulnerable URL: http://www.remax.de/publiclistinglist.aspx Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 413118 VIP website status:| Yes Coordinated Disclosure Timeline:...

noisefx.ru XSS vulnerability

Vulnerable URL: http://noisefx.ru/?s=aaaaa%22+onmouseover%3Dprompt%2FOPENBUGBOUNTY%2F+autofocus%3Dx+bad%3D%22%3Eaa%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%2FOPENBUGBOUNTY%2F%3Edemonium%3C%2Ftag%3E=%D0%9F%D0%BE%D0%B8%D1%81%D0%BA+%D0%A8%D1%83%D0%BC%D0%BE%D0%B2 Details:...

zaagmachineshop.nl XSS vulnerability

Vulnerable URL: https://www.zaagmachineshop.nl/category/191387%22-prompt%22XSSPOSED%22-%22'onclick='promptlocation.search.slice1'/afkortzagen.html?XSSPOSED Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 931621 V...

July 2017 security update release

Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this...

burbankca.gov XSS vulnerability

Vulnerable URL: http://www.burbankca.gov/%22?t=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 349705 VIP website status:| No Check burbankca.gov SSL connection:| Grade: F...

July 2017 security update release

Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this...