technical-sales-jobs.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-410597 Description| Value ---|--- Affected Website:| technical-sales-jobs.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

Google Android AOSP Messaging Memory Corruption Vulnerability

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected applicatio...

Red Hat Resteasy Remote Code Execution Vulnerability

Red Hat RESTEasy is the United States Red Hat Red Hat, Inc. of a JBoss open source project , which provides a variety of frameworks for building RESTful Web Services and RESTful Java applications . A remote code execution vulnerability exists in Resteasy. An attacker could exploit this issue to...

Less Compiler Arbitrary Code Execution Vulnerability

LESS is a dynamic cascading style sheet language designed by Alexis Sellier. An arbitrary code execution vulnerability exists in Less Compiler. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application...

Barco ClickShare Remote Code Execution Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. A remote code execution vulnerability exists in Barco ClickShare. The vulnerability allows an attacker to execute arbitrary code in the context o...

ABB RobotWare Remote Code Execution Vulnerability

ABB is a global leader in power and automation technology, ranked among the top 500 companies in the world. ABB RobotWare suffers from a remote code execution vulnerability that could be exploited by an attacker to execute arbitrary code in the context of an affected application...

Multiple Buffer Overflow Vulnerabilities in ABB RobotWare

ABB is a global leader in power and automation technology, ranked among the top 500 companies in the world. Multiple buffer overflow vulnerabilities exist in ABB RobotWare, which could be exploited by an attacker to execute arbitrary code within the context of an affected application...

Potrace Null Pointer Denial of Service Vulnerability

potrace is a set of bitmap image processing tools developed by software developer Peter Selinger. The tool offers the ability to add smoothing effects, free scaling of images, and more. A security vulnerability exists in potrace version 1.12. An attacker who exploits this vulnerability could caus...

OwnCloud Gallery Application HTML Injection Vulnerability

OwnCloud is a free and open source personal cloud storage solution from German company OwnCloud. The solution offers file management, music storage, calendars and more. An HTML injection vulnerability exists in the OwnCloud Gallery Application, which could be exploited by an attacker to steal...

phpMyAdmin Remote Code Execution Vulnerability

phpmyadmin is an online management tool for MySQL databases. A remote code execution vulnerability exists in phpMyAdmin, which can be exploited by an attacker to execute arbitrary code in the context of an affected application...

Enpass DLL Load Local Code Execution Vulnerability

Enpass is a complete password management solution. A local code execution vulnerability exists in Enpass DLL loading. This allows a local attacker to exploit the vulnerability to execute arbitrary code within the context of the affected application...

ASUS 'asio.sys' Security Bypass Vulnerability

ASUS asio.sys is a sound card driver product from ASUS. A security bypass vulnerability exists in the ASUS asio.sys driver, which can be exploited by an attacker to bypass security restrictions and perform unauthorized operations in the affected application...

Huawei P8 Local Buffer Overflow Vulnerability

The Huawei P8 is a smartphone product from the Chinese company Huawei Huawei. A local buffer overflow vulnerability exists in Huawei P8, which can be exploited by a local attacker to execute arbitrary code in an affected application...

Kguard Digital Video Recorder Command Injection Vulnerability

The Kguard Digital Video Recorder DVR is a digital hard disk recorder from Kguard. A command injection vulnerability exists in Kguard Digital Video Recorder. An attacker could use this vulnerability to execute arbitrary commands within the context of an affected application...

Adobe Flash Player Double Release Remote Code Execution Vulnerability

Adobe Flash Player is a widely used, proprietary multimedia program player. A security vulnerability exists in Adobe Flash Player that could be exploited by remote attackers to execute arbitrary code within the context of an affected application or to launch a denial-of-service attack...

GNU Coreutils Insecure Temporary File Creation Vulnerability

The GNU Coreutils are the basic file, shell and text manipulation tools used by the GNU operating system. An insecure temporary file creation vulnerability exists in GNU Coreutils that allows a local access attacker to potentially obtain sensitive information or perform a symbolic link attack to...

Call of Duty 4 1.5 - Malformed 'stats' command Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29026/info Call of Duty is prone to a denial-of-service vulnerability because the application fails to handle specially crafted commands. An attacker can exploit this issue to crash the affected application, denying servi...

xterm DECRQSS Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33060/info The 'xterm' program is prone to a remote command-execution vulnerability because it fails to sufficiently validate user input. Successfully exploiting this issue would allow an attacker to execute arbitrary...

LoveCMS 1.4 install/index.php step Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacker ca...

Microsoft Windows Vista Windows Mail Local File Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into...