PT-2018-13067

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server Liberty versions prior to 18.0.0.2 Description The issue is caused by the mishandling of exceptions by the SAML Web SSO feature, which could allow a remote attacker to obtain sensitive information...

CVE-2018-1553: Exposure of Sensitive Information to an Unauthorized Actor

IBM WebSphere Application Server Liberty prior to 18.0.0.2 could allow a remote attacker to obtain sensitive information, caused by mishandling of exceptions by the SAML Web SSO feature. IBM X-Force ID: 142890...

gps-pamcary.com.br XSS vulnerability

Open Bug Bounty ID: OBB-636876 Description| Value ---|--- Affected Website:| gps-pamcary.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

demonstrativo.lecom.com.br XSS vulnerability

Open Bug Bounty ID: OBB-636872 Description| Value ---|--- Affected Website:| demonstrativo.lecom.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

processosdigitais.santos.sp.gov.br XSS vulnerability

Open Bug Bounty ID: OBB-636871 Description| Value ---|--- Affected Website:| processosdigitais.santos.sp.gov.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

federation.usbank.com XSS vulnerability

Open Bug Bounty ID: OBB-636669 Description| Value ---|--- Affected Website:| federation.usbank.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

federated.countrypassport.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-633859 Description| Value ---|--- Affected Website:| federated.countrypassport.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

vega.apps.valeo.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-633839 Description| Value ---|--- Affected Website:| vega.apps.valeo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

auth.axaltacs.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-633829 Description| Value ---|--- Affected Website:| auth.axaltacs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

login.good.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-633823 Description| Value ---|--- Affected Website:| login.good.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

ident.lds.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-633821 Description| Value ---|--- Affected Website:| ident.lds.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

sso-dev.carrefour.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-633784 Description| Value ---|--- Affected Website:| sso-dev.carrefour.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

ers.lib.cyut.edu.tw XSS vulnerability

Open Bug Bounty ID: OBB-628977 Description| Value ---|--- Affected Website:| ers.lib.cyut.edu.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Adobe Reader DC (Classic Track) Security Updates (APSB18-09) - Mac OS X

Adobe Reader DC Classic Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat 2017 Security Updates (APSB18-09) - Windows

Adobe Acrobat 2017 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobat";...

Adobe Reader DC (Classic Track) Security Updates (APSB18-09) - Windows

Adobe Reader DC Classic Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2018-16692

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2018.011.20038 and earlier Adobe Acrobat and Reader versions 2017.011.30079 and earlier Adobe Acrobat and Reader versions 2015.006.30417 and earlier Description The issue allows attackers to obtain sensitive...

Oracle Access Manager Multiple Vulnerabilities (Apr 2018 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid109733; scriptversion"1.8";...

minnow.rfsuny.org XSS vulnerability

Open Bug Bounty ID: OBB-614077 Description| Value ---|--- Affected Website:| minnow.rfsuny.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Input validation

Spring Cloud SSO Connector, version 2.1.2, contains a regression which disables issuer validation in resource servers that are not bound to the SSO service. In PCF deployments with multiple SSO service plans, a remote attacker can authenticate to unbound resource servers which use this version of...