14619 matches found
CVE-2017-14415
Summary of CVE-2017-14415 : A cross-site scripting (XSS) vulnerability exists in D-Link DIR-850L REV. A devices (firmware up to FW114WWb07_h2ab_beta1) in the action parameter of htdocs/web/sitesurvey.php. The root cause is unsanitized input for the action parameter, enabling an attacker to inject...
CVE-2017-14423
CVE-2017-14423 affects D-Link DIR-850L REV. A devices (firmware FW114WWb07_h2ab_beta1 and earlier). The vulnerability resides in the htdocs/parentalcontrols/bind.php file, where unauthenticated nonce-guessing could allow remote attackers to change DNS configuration by sending a sequence of reques...
rejestracja.usos.uw.edu.pl XSS vulnerability
Vulnerable URL: https://rejestracja.usos.uw.edu.pl/index.php?msg=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...
hardysselfstorage.com XSS vulnerability
Vulnerable URL: https://hardysselfstorage.com/login.php?facilityName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 12.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
PT-2017-13472 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of /var/run/hostapd files, which have 0666 permissions. Recommendations: For D-Li...
PT-2017-13470 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of the /var/etc/shadow file, also known as the /etc/shadow symlink target, which...
PT-2017-13474 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via crafted LAN traffic...
PT-2017-13466 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the use of a hardcoded private key in the /etc/stunnel.key file across different installations,...
PT-2017-13467 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue allows remote attackers to change the DNS configuration via a series of requests, due to the failure to prevent unauthenticated nonce-guessing attacks in the...
mirtrik.by XSS vulnerability
Vulnerable URL: https://www.mirtrik.by/search/%22%3E%3Csvg%20onload%3Dalert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 154113 VIP website status:| No Chec...
hts.edu XSS vulnerability
Vulnerable URL: https://hts.edu/public/sv/gallery.php?bg=xss%22%3E%3Csvg/onload=prompt/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3385757 VIP website status:|...
CVE-2017-14333
The processversionsections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service Integer Overflow, and hang because of a time-consuming loop or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vnnext, during "readelf -a...
Integer overflow
The processversionsections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service Integer Overflow, and hang because of a time-consuming loop or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vnnext, during "readelf -a...
wiiw.ac.at XSS vulnerability
Vulnerable URL: https://wiiw.ac.at/request-new-password-verification.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1487951 VIP website status:| No Check wiiw.ac.at SSL connection:| Grade: A+ Coordinated...
mecknc.gov XSS vulnerability
Vulnerable URL: https://www.mecknc.gov/countymanagersoffice/bocc/layouts/15/viewlsts.aspx?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
seroundtable.com XSS vulnerability
Vulnerable URL: https://www.seroundtable.com/google-brand-title-appending-16432.html/"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 33325 VIP website status:| Yes Check...
Debian: Security Advisory (DSA-3970-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
D-Link DIR-850L REV.A and REV.B Denial of Service Vulnerabilities
The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. The security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions, and firmware FW208WWb02 and prior versions. A remote attacker could exploit th...
vicky.co.jp XSS vulnerability
Vulnerable URL: http://vicky.co.jp/blog.php?brand="';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 7162850 VIP website status:| No Check vicky.co.jp SSL connection:| Grade: A-...
