myapps.bayer.com Cross Site Scripting vulnerability OBB-3550105

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

myapps-dev.bayer.com Cross Site Scripting vulnerability OBB-3550103

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mobileaccess.bayer.com Cross Site Scripting vulnerability OBB-3550101

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

naturpark-bayer-wald.de Cross Site Scripting vulnerability OBB-3448602

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2016-2328

libswscale/swscaleunscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows remote attackers to cause a denial of service out-of-bounds array read access or possibly have unspecified other impact via a crafted .cine file, related to the bayertorgb24wrapper and...

OSV-2020-1445 Use-of-uninitialized-value in LibRaw::copy_bayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23712 Crash type: Use-of-uninitialized-value Crash state: LibRaw::copybayer LibRaw::raw2imageex LibRaw::dcrawprocess...

A week in security (April 1 – 7)

Last week, Malwarebytes Labs took readers on a brief tour of some of the world's most notable data privacy laws, explored how gamers can protect themselves against cyberthreats, and offered thoughts about the reports that a 23-year-old Chinese woman gained access to President Donald Trump’s...

LibRaw 'copy_bayer' function null pointer backreference vulnerability

LibRaw is a C++ library developed by the LibRaw team for processing RAW CRW/CR2, NEF, RAF, DNG and others format images. A null pointer back-reference vulnerability exists in the 'copybayer' function of the librawcxx.cpp file in LibRaw version 0.19.1. An attacker can exploit this vulnerability to...

DEBIAN-CVE-2018-20364

LibRaw::copybayer in librawcxx.cpp in LibRaw 0.19.1 has a NULL pointer dereference...

bayerpensions.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-680535 Description| Value ---|--- Affected Website:| bayerpensions.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

career.bayer.com XSS vulnerability

Open Bug Bounty ID: OBB-671287 Description| Value ---|--- Affected Website:| career.bayer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

career.bayer.com XSS vulnerability

Open Bug Bounty ID: OBB-650985 Description| Value ---|--- Affected Website:| career.bayer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cropscience.bayer.jp XSS vulnerability

Open Bug Bounty ID: OBB-539764 Description| Value ---|--- Affected Website:| cropscience.bayer.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

gesundheit.bayer.de XSS vulnerability

Vulnerable URL: https://www.gesundheit.bayer.de/de/SSL/contactpopup.php?website=canesten Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

bayer.com.ar XSS vulnerability

Open Bug Bounty ID: OBB-270178 Description| Value ---|--- Affected Website:| bayer.com.ar Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Siemens, Bayer Expected to Patch Medical Devices Hit By WannaCry

It was initially thought just Windows machines were vulnerable but it probably shouldn’t come as a surprise that medical devices and industrial control systems were subjected to the perils of this weekend’s WannaCry ransomware outburst as well. Over the past few days the Department of Homeland...

Bayer Agrar Wetter - Corrupted files, Exported components, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Bayer Agrar Wetter published at the 'play' market has multiple vulnerabilities...

Bayer 04 Leverkusen - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bayer 04 Leverkusen published at the 'play' market has multiple vulnerabilities...

The vulnerability of the FFmpeg multimedia library, which allows a intruder to trigger a service failure or cause other effects

The vulnerability of the libswscale/swscaleunscaled.c function in the FFmpeg multimedia library arises due to buffer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure reading beyond the array bounds or other effects by using a specially created .cine file...

pharma.bayer.com XSS vulnerability

Vulnerable URL: http://pharma.bayer.com/en/search/?tfwformidentifier=search=%22%3E%3Csvg%20onload=prompt%28%27XSSPOSED%27%29%3Epharmacy Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...