CVE-2017-14493

creationtimestamp| type| source ---|---|--- 2017-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42943...

Pixel / Nexus Security Bulletin—October 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of October 05, 2017 or later address all issues in this bulletin and all issues i...

CVE-2017-14492

creationtimestamp| type| source ---|---|--- 2017-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42942...

themahaffey.com XSS vulnerability

Vulnerable URL: http://www.themahaffey.com/places.php?=13'"83=attractions=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 945108 VIP website status:| No Coordinated Disclosure...

rtfm.be Open Redirect vulnerability

Vulnerable URL: http://www.rtfm.be/fpiette/cgi-php/goto.php?https://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

tracking.korecow.jp Open Redirect vulnerability

Vulnerable URL: http://tracking.korecow.jp/af/c81e728d9d4c2f636f067f89cc14862c/4f4adcbf8c6f66dcfc8a3282ac2bf10a/?r=data%3Atext%2Fhtml%3Bbase64%2CPHNjcmlwdD5hbGVydCgvT1BFTkJVR0JPVU5UWS8pPC9zY3JpcHQ%2B Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:|...

wonderfulmachine.com XSS vulnerability

Vulnerable URL: https://wonderfulmachine.com/ref?r=1=javascript:prompt/OPENBUGBOUNTY/; Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 465322 VIP website...

CVE-2015-5613

Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...

Cross site scripting

Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...

CVE-2015-5613: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...

MySQL Enterprise Monitor 3.2.x < 3.2.9.2249 / 3.3.x < 3.3.5.3292 / 3.4.x < 3.4.3.4225 Multiple Vulnerabilities (October 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.2.x prior to 3.2.9.2249, 3.3.x prior to 3.3.5.3292, or 3.4.x prior to 3.4.3.4225. It is, therefore, affected by multiple vulnerabilities as noted in the October 2017 Critical Patch...

CVE-2015-5613

Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...

CVE-2015-5613

CVE-2015-5613 describes a cross-site scripting (XSS) vulnerability in October CMS builds 271 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML through vectors involving a file title (and related caption/title contexts in several references). Affected so...

CVE-2015-5613

Cross-site scripting XSS vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title, a different vulnerability than CVE-2015-5612...

PT-2017-6872

Name of the Vulnerable Software and Affected Versions October CMS versions prior to build 272 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via vectors involving a file title. Recommendations For October CMS versions prior to build 272...

getmelyrics.com XSS vulnerability

Vulnerable URL: http://getmelyrics.com/mp3/%22%3E%3Cscript%3Ealert%28%2fOpenBug%2f%29%3C%2fscript%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 348465 VIP website status:| No Coordinated Disclosure Timeline:...

ads.scenicwa.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-300153 Description| Value ---|--- Affected Website:| ads.scenicwa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Memory corruption

LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service memory corruption and SIGSEGV via a crafted image file...

lsoft.net XSS vulnerability

Vulnerable URL: http://www.lsoft.net/killdiskscreen.aspx!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

intercontinentalmarkhopkins.com XSS vulnerability

Vulnerable URL: http://www.intercontinentalmarkhopkins.com/photo-gallery.aspx!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:|...