Debian DLA-1384-1 : xdg-utils security update

It was found that the openenvvar function in xdg-utils does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL. For Debian 7 'Wheezy', these problems have been...

myhealth.umassmemorial.org XSS vulnerability

Open Bug Bounty ID: OBB-623783 Description| Value ---|--- Affected Website:| myhealth.umassmemorial.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| StayWell Solutions Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...

butterflyleahin.com XSS vulnerability

Open Bug Bounty ID: OBB-622207 Description| Value ---|--- Affected Website:| butterflyleahin.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jewishhistory.org.il XSS vulnerability

Open Bug Bounty ID: OBB-621454 Description| Value ---|--- Affected Website:| jewishhistory.org.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

noithatnhapkhau.net.vn XSS vulnerability

Open Bug Bounty ID: OBB-596922 Description| Value ---|--- Affected Website:| noithatnhapkhau.net.vn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

matvdirect.vivaprix.com XSS vulnerability

Open Bug Bounty ID: OBB-586152 Description| Value ---|--- Affected Website:| matvdirect.vivaprix.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

phpMyAdmin db_central_columns.php cross-site scripting vulnerability

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A cross-site scripting vulnerability exists in the...

batemanps.wa.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-563946 Description| Value ---|--- Affected Website:| batemanps.wa.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7032

webcheckout in myrepos through 1.20171231 does not sanitize URLs that are passed to git clone, allowing a malicious website operator or a MitM attacker to take advantage of it for arbitrary code execution, as demonstrated by an "ext::sh -c" attack or an option injection attack...

tw.sasa.com XSS vulnerability

Open Bug Bounty ID: OBB-545885 Description| Value ---|--- Affected Website:| tw.sasa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

greatlakescalibration.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-544268 Description| Value ---|--- Affected Website:| greatlakescalibration.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-5705

Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine the t parameter to the /search URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admins. By sending users an infected URL, code will ...

shop1.x.com.cn XSS vulnerability

Open Bug Bounty ID: OBB-530842 Description| Value ---|--- Affected Website:| shop1.x.com.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tlrautos.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-471000 Description| Value ---|--- Affected Website:| tlrautos.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

price-mag.net XSS vulnerability

Open Bug Bounty ID: OBB-454651 Description| Value ---|--- Affected Website:| price-mag.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Design/Logic Flaw

lilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as demonstrated by a --proxy-pac-file argument...

aboutmybaby.com XSS vulnerability

Open Bug Bounty ID: OBB-367668 Description| Value ---|--- Affected Website:| aboutmybaby.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

wilsonorwoskyfuneralhome.com XSS vulnerability

Open Bug Bounty ID: OBB-363769 Description| Value ---|--- Affected Website:| wilsonorwoskyfuneralhome.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-site Scripting (XSS)

next is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary JavaScript through the url...

avaz.es XSS vulnerability

Open Bug Bounty ID: OBB-230340 Description| Value ---|--- Affected Website:| avaz.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...