openSUSE Security Update : hostapd (openSUSE-2017-1201) (KRACK)

This update for hostapd fixes the following issues : - Fix KRACK attacks on the AP side boo1063479, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088 : Hostap was updated to upstream release 2.6 - fixed EAP-pwd last fragment validation...

Oracle Sun Systems Products Suite SPARC M7, T7 and S7 based Servers Component Denial of Service Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.SPARC M7, T7, and S7 based Servers are among the servers that... A security vulnerability exists in the Firmware subcomponent of the SPARC M7, T7, and S7 based Servers component of the Oracle Sun Systems...

webstarts.com XSS vulnerability

Vulnerable URL: https://www.webstarts.com/affiliateSignup.php/x%22%3E%3CsvG%20onLoad=prompt9%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 54505 VIP website status:| No Check...

krasnoyarsk.ucheba.ru XSS vulnerability

Vulnerable URL: http://krasnoyarsk.ucheba.ru/search?eq%5B%5D=s%3A%3Cscript%3Ealert%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3Efr=to=\n Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17516 VIP website status:| Yes...

streamcloud.eu XSS vulnerability

Vulnerable URL: http://streamcloud.eu?op=registersaveemail=JD2hf8j9responsefield=KC138ijei2password="onfocus="confirm/openbugbounty/"autofocus="login=password2= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 15.01.2018 Vulnerability type:| XSS Vulnerability status:|...

HPESBHF03785 rev.1 - HPE B-Series SAN Network Advisor Software, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP B-series SAN Network Advisor Software 14.0.2 and prior CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-8204 |...

HPESBHF03784 rev.1 - HPE B-Series SAN Network Advisor Software Running WildFly (formerly JBoss Application Server), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP B-series SAN Network Advisor Software 14.0.2 and prior running on a Windows OS CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-0793 |...

leszcz.pl XSS vulnerability

Vulnerable URL: http://www.leszcz.pl/relacja.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2085506 VIP website status:| No Check leszcz.pl SSL connection:| Grade: B Coordinated Disclosure Timeline:...

atsgmembers.com XSS vulnerability

Vulnerable URL: http://www.atsgmembers.com/bannerads/out.php?id=13'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16830137 VIP website status:| No Check atsgmembers.com SSL connection:| Grade: B Coordinated...

gcu.ac.uk XSS vulnerability

Vulnerable URL: http://www.gcu.ac.uk/study/undergraduate/search/search.php?t=ug=uk=1=all=l=ft=title'"=asc Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 56111 VIP website status:| No Check gcu.ac.uk SSL...

halledesprix.fr XSS vulnerability

Vulnerable URL: http://www.halledesprix.fr/s/" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 577767 VIP website status:| No Check halledesprix.fr SSL connection:| Grade: B+...

vectorworks.cn Improper Access Control vulnerability

Vulnerable URL: http://www.vectorworks.cn/en/support/quality-tested-hardware?id=12 Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 11.01.2018 Vulnerability type:| Improper Access Control Vulnerability status:| Publicly disclosed Alexa Rank| 1282169...

tamildailycalendar.com XSS vulnerability

Vulnerable URL: http://www.tamildailycalendar.com/tamilmonthlycalendar.php?msg=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

asterisk -- Buffer overflow in CDR's set user

The Asterisk project reports: No size checking is done when setting the user field for Party B on a CDR. Thus, it is possible for someone to use an arbitrarily large string and write past the end of the user field storage buffer. The earlier AST-2017-001 advisory for the CDR user field overflow w...

braininjuryprofessional.com Open Redirect vulnerability

Vulnerable URL: http://braininjuryprofessional.com/?adsclick=1=415-397-396-238-1=7a6bd16db0=http%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa...

spu.ac.th XSS vulnerability

Vulnerable URL: https://www.spu.ac.th/fac/graduate/th/content.php?cid=6693%27%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 87986 VIP...

urbis.com.hk XSS vulnerability

Vulnerable URL: http://www.urbis.com.hk/en/projects/index.php?category=13'"13 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 03.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8037502 VIP website status:| No Check urbis.com.hk SSL...

CVE-2017-0825

An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37305633. References: B-V2017063002...

Information disclosure

An information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions: Android kernel. Android ID: A-37305633. References: B-V2017063002...

hintce-turkce.cevirsozluk.com XSS vulnerability

Vulnerable URL: https://hintce-turkce.cevirsozluk.com/hi|tr|%3Cscript%3Ealertdocument.domain%3C/script%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...