UBUNTU-CVE-2018-11307

An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6...

homes.com Cross Site Scripting vulnerability OBB-880965

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| homes.com ---|--- Open Bug Bounty...

CVE-2019-12457

FileRun 2019.05.21 allows images/extjs Directory Listing. This issue has been fixed in FileRun 2019.06.01...

dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or...

CVE-2019-0284

SLD Registration in SAP HANA fixed in versions 1.0, 2.0 does not sufficiently validate an XML document accepted from an untrusted source. The attacker can call SLDREG with an XML file containing a reference to an XML External Entity XXE. This can cause SLDREG to, for example, continuously loop,...

CVE-2019-8273

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212...

Out-of-bounds

UltraVNC revision 1210 has out-of-bounds read vulnerability in VNC client code inside Ultra decoder, which results in a denial of service DoS condition. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1211...

CVE-2019-8274

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212...

directory.warwickshire.gov.uk Cross Site Scripting vulnerability OBB-761326

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| directory.warwickshire.gov.uk ---|---...

nedirnedemek.com Cross Site Scripting vulnerability OBB-752072

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| nedirnedemek.com ---|--- Open Bug Bount...

CVE-2019-1000011

API Platform version from 2.2.0 to 2.3.5 contains an Incorrect Access Control vulnerability in GraphQL delete mutations that can result in a user authorized to delete a resource can delete any resource. This attack appears to be exploitable via the user must be authorized. This vulnerability...

CVE-2018-0259

creationtimestamp| type| source ---|---|--- 2018-12-31 07:31:23+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/cisco-korjasi-kriittisia-haavoittuvuuksia...

hayneseec.org XSS vulnerability

Open Bug Bounty ID: OBB-715239 Description| Value ---|--- Affected Website:| hayneseec.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

aviation-safety.net XSS vulnerability

Open Bug Bounty ID: OBB-713016 Description| Value ---|--- Affected Website:| aviation-safety.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

avis-verifies.com XSS vulnerability

Open Bug Bounty ID: OBB-706401 Description| Value ---|--- Affected Website:| avis-verifies.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

phacs.org XSS vulnerability

Open Bug Bounty ID: OBB-705701 Description| Value ---|--- Affected Website:| phacs.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

theratnerschool.org XSS vulnerability

Open Bug Bounty ID: OBB-705696 Description| Value ---|--- Affected Website:| theratnerschool.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

is7vikings.org XSS vulnerability

Open Bug Bounty ID: OBB-705500 Description| Value ---|--- Affected Website:| is7vikings.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

washingtonmetropolitanhs.org XSS vulnerability

Open Bug Bounty ID: OBB-705485 Description| Value ---|--- Affected Website:| washingtonmetropolitanhs.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

northwesternbulls.org XSS vulnerability

Open Bug Bounty ID: OBB-705450 Description| Value ---|--- Affected Website:| northwesternbulls.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...