158 matches found
eknives.ru XSS vulnerability
Vulnerable URL: https://www.eknives.ru/search/?text=%22%3E%3Csvg%20onload%3Dalert%2FXSSPOSED%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 400238 VIP website status:| No...
Oracle GlassFish Server 3.0.1.x < 3.0.1.17 / 3.1.2.x < 3.1.2.18 (October 2017 CPU)
According to its self-reported version, the Oracle GlassFish Server running on the remote host is 3.0.1.x prior to 3.0.1.17 or 3.1.2.x prior to 3.1.2.18. It is, therefore, affected by multiple vulnerabilities, including multiple denial of service vulnerabilities and unauthorized access to sensiti...
Oracle Java SE Multiple Vulnerabilities (October 2017 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...
MySQL 5.5.x < 5.5.58 Multiple Vulnerabilities (RPM Check) (October 2017 CPU)
The version of MySQL running on the remote host is 5.5.x prior to 5.5.58. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...
Oracle WebCenter Content Server Component Unspecified Issue (October 2017 CPU)
The version of Oracle WebCenter Content running on the remote host is affected by an unspecified flaw in the Content Server component that allows an unauthenticated, remote attacker to impact confidentiality and integrity. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
MySQL 5.6.x < 5.6.38 Multiple Vulnerabilities (RPM Check) (October 2017 CPU)
The version of MySQL running on the remote host is 5.6.x prior to 5.6.38. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...
Oracle Database Multiple Vulnerabilities (October 2017 CPU)
The remote Oracle Database Server is missing the October 2017 Critical Patch Update CPU. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note tha...
Oracle Secure Global Desktop Web Services Component Remote Authentication Bypass (October 2017 CPU)
The version of Oracle Secure Global Desktop installed on the remote host is 5.3 and is missing a security patch from the October 2017 Critical Patch Update CPU. It is, therefore, affected by an Apache HTTP server remote authentication bypass vulnerability in the web services component. The Apache...
Oracle Java SE Multiple Vulnerabilities (October 2017 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...
smithsworldwide.org XSS vulnerability
Vulnerable URL: http://www.smithsworldwide.org/tng/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 18.11.2017 Vulnerability type:| XSS...
ct.pinterest.com Open Redirect vulnerability
Vulnerable URL: https://ct.pinterest.com///redirect/?userid=522980712886972779=https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
Oracle JRockit R28.3.15 Multiple Vulnerabilities (October 2017 CPU)
The version of Oracle JRockit installed on the remote Windows host is R28.3.15. It is, therefore, affected by multiple vulnerabilities. See advisory for details. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103932; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/12...
Oracle WebLogic Server Multiple Vulnerabilities (October 2017 CPU)
The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid103935; scriptversion"1.16";...
CVE-2017-15595
creationtimestamp| type| source ---|---|--- 2017-10-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43014...
Oracle Business Intelligence Publisher Multiple Vulnerabilities (October 2017 CPU)
The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.171017 or 11.1.1.9.x prior to 11.1.1.9.171017. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CV...
Oracle VM VirtualBox 5.1.x < 5.1.30 (October 2017 CPU)
The version of Oracle VM VirtualBox running on the remote host is 5.1.x prior to 5.1.30. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Nessus h...
baker1865.com XSS vulnerability
Open Bug Bounty ID: OBB-340998 Description| Value ---|--- Affected Website:| baker1865.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
familytree.turse.org XSS vulnerability
Vulnerable URL: http://familytree.turse.org/browsemedia.php?mediasearch=bug=headstones=Relatives=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 17.11.2017 Vulnerability type:| XSS Vulnerability...
October 2017 Adobe Flash Security Update
This security update addresses the following vulnerability, which is described in Adobe Security Bulletin APSB17-32: CVE-2017-11292...
omicsonline.org XSS vulnerability
Vulnerable URL: https://www.omicsonline.org/searchresult.php?keyword='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10802 VIP website status:| Yes Coordinated Disclosure Timelin...