CVE-2018-12588: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project PKP Open Monograph Press OMP v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter aka the Searc...

lockwoodpressonline.com XSS vulnerability

Open Bug Bounty ID: OBB-633510 Description| Value ---|--- Affected Website:| lockwoodpressonline.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| OMP 3.X Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pblpubs.org XSS vulnerability

Open Bug Bounty ID: OBB-633509 Description| Value ---|--- Affected Website:| pblpubs.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| OMP 1.2 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sci-en-tech.com XSS vulnerability

Open Bug Bounty ID: OBB-633507 Description| Value ---|--- Affected Website:| sci-en-tech.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| OMP 1.2 Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ebooks.epublishing.ekt.gr XSS vulnerability

Open Bug Bounty ID: OBB-633506 Description| Value ---|--- Affected Website:| ebooks.epublishing.ekt.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| OMP 3.X Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Charamin OMP Untrustworthy Search Path Vulnerability

Charamin OMP is a media player that automatically generates dance animations by analyzing music files. An untrustworthy search path vulnerability exists in Charamin OMP versions 1.1.7.4 and earlier and 1.2.0.0 Beta and earlier. An attacker can exploit this vulnerability to gain privileges with th...

CVE-2017-2227

Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2227

Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2227

Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-2227

The CVE-2017-2227 entry concerns the Charamin OMP installer: an untrusted search path (DLL search order) vulnerability that allows arbitrary code execution with the privileges of the user invoking the installer. A Trojan horse DLL in an unspecified directory can be loaded during installation. Aff...

CVE-2017-2227: Untrusted Search Path

Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

PT-2017-15276

Name of the Vulnerable Software and Affected Versions Charamin OMP versions 1.1.7.4 and earlier Charamin OMP Version 1.2.0.0 Beta and earlier Description The issue is related to an untrusted search path vulnerability in the installer. This allows an attacker to gain privileges via a Trojan horse...

JVN#09293613: Installer of Charamin OMP may insecurely load Dynamic Link Libraries

The installer of Charamin OMP provided by Charamin steering committee contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

GSM Community Edition and lagging OpenVAS Plugin Feed

As I already wrote in "Installing OpenVAS 9 from the sources", since May 2017 OpenVAS 9 is available in a form of free virtual appliance. It is called GSM Community Edition GCE and is based on Greenbone commercial product GSM ONE. What's the difference between GSM ONE and free GCE? GSM Community...

[SECURITY] Fedora 23 Update: openvas-manager-6.0.9-1.fc23

The OpenVAS Manager is the central service that consolidates plain vulnerab ility scanning into a full vulnerability management solution. The Manager control s the Scanner via OTP and itself offers the XML-based, stateless OpenVAS Manageme nt Protocol OMP. All intelligence is implemented in the...

[SECURITY] Fedora 24 Update: openvas-manager-6.0.9-1.fc24

The OpenVAS Manager is the central service that consolidates plain vulnerab ility scanning into a full vulnerability management solution. The Manager control s the Scanner via OTP and itself offers the XML-based, stateless OpenVAS Manageme nt Protocol OMP. All intelligence is implemented in the...

Cross site scripting

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

PT-2016-4926

Name of the Vulnerable Software and Affected Versions Greenbone Security Assistant versions 6.0.0 through 6.0.7 Description A cross-site scripting issue exists due to insufficient input validation in the charts module. This allows remote attackers to inject arbitrary web script or HTML via the...

[SECURITY] Fedora 22 Update: openvas-manager-6.0.3-4.fc22

The OpenVAS Manager is the central service that consolidates plain vulnerab ility scanning into a full vulnerability management solution. The Manager control s the Scanner via OTP and itself offers the XML-based, stateless OpenVAS Manageme nt Protocol OMP. All intelligence is implemented in the...