MySQL 5.5.x < 5.5.62 Multiple Vulnerabilities (October 2018 CPU)

The version of MySQL running on the remote host is 5.5.x prior to 5.5.62. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...

MySQL 5.6.x < 5.6.42 Multiple Vulnerabilities (October 2018 CPU)

The version of MySQL running on the remote host is 5.6.x prior to 5.6.42. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory. Please consult the CVRF details for the applicable CVEs for additional information. Note that Nessus has no...

MySQL 5.7.x < 5.7.24 Multiple Vulnerabilities (Oct 2018 CPU) (Jul 2019 CPU)

The version of MySQL running on the remote host is 5.7.x prior to 5.7.24 It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 and July 2019 Critical Patch Update advisories. Please consult the CVRF details for the applicable CVEs for additional information. Note tha...

f-f.ir XSS vulnerability

Open Bug Bounty ID: OBB-687934 Description| Value ---|--- Affected Website:| f-f.ir Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

Oracle VM VirtualBox < 5.2.20 Multiple Vulnerabilities (Oct 2018 CPU)

The version of Oracle VM VirtualBox running on the remote host is 5.2.x prior to 5.2.20. It is, therefore, affected by multiple vulnerabilities as noted in the October 2018 Critical Patch Update advisory : - An unspecified vulnerability in the Oracle VM VirtualBox component of Oracle Virtualizati...

Oracle WebLogic Server Multiple Vulnerabilities (October 2018 CPU)

The version of Oracle WebLogic Server installed on the remote host is affected by multiple vulnerabilities: - Vulnerabilities in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Easily exploitable vulnerabilities allow unauthenticated attacker wi...

kryptonitelock.fr XSS vulnerability

Open Bug Bounty ID: OBB-687602 Description| Value ---|--- Affected Website:| kryptonitelock.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

ww1.seriestreamings.org XSS vulnerability

Open Bug Bounty ID: OBB-687494 Description| Value ---|--- Affected Website:| ww1.seriestreamings.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

CVE-2018-10822

creationtimestamp| type| source ---|---|--- 2018-10-17 15:59:08+00:00| seen| MISP/5bc75ba6-2c64-4e54-8cc6-0b7f0a021402 2018-10-18 14:15:52+00:00| seen| https://t.me/sysodmins/3928...

comunesandemetriocorone.it XSS vulnerability

Open Bug Bounty ID: OBB-687239 Description| Value ---|--- Affected Website:| comunesandemetriocorone.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

hyva.cz XSS vulnerability

Open Bug Bounty ID: OBB-686903 Description| Value ---|--- Affected Website:| hyva.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

commercialistatelematico.com XSS vulnerability

Open Bug Bounty ID: OBB-686879 Description| Value ---|--- Affected Website:| commercialistatelematico.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

blog.satyr.nl XSS vulnerability

Open Bug Bounty ID: OBB-686506 Description| Value ---|--- Affected Website:| blog.satyr.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Oracle Releases October 2018 Security Bulletin

Oracle has released its Critical Patch Update for October 2018 to address 301 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. NCCIC encourages users and administrators to review the Oracle October 2018...

kola-online.cz XSS vulnerability

Open Bug Bounty ID: OBB-686443 Description| Value ---|--- Affected Website:| kola-online.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

conectcar.com XSS vulnerability

Open Bug Bounty ID: OBB-686424 Description| Value ---|--- Affected Website:| conectcar.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

vaassen-online.nl XSS vulnerability

Open Bug Bounty ID: OBB-686336 Description| Value ---|--- Affected Website:| vaassen-online.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

Zendesk: CSRF on developer.zendesk.com via Cache Deception

October 2018 - It was found under certain circumstances when arbitrary files were requested the response would be cached leading to leakage of a CSRF token. The scope of this was limited to developer.zendesk.com. We appreciate the great submission and work from @imran1121!...

dozenten-boerse.de XSS vulnerability

Open Bug Bounty ID: OBB-686207 Description| Value ---|--- Affected Website:| dozenten-boerse.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

brausezimt.de XSS vulnerability

Open Bug Bounty ID: OBB-686144 Description| Value ---|--- Affected Website:| brausezimt.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...