Fixed in Apache Tomcat 7.0.109

Low: Authentication weakness CVE-2021-30640 Queries made by the JNDI Realm did not always correctly escape parameters. Parameter values could be sourced from user provided data eg user names as well as configuration data provided by an administrator. In limited circumstances it was possible for...

ehd.liverpool.gov.uk Cross Site Scripting vulnerability OBB-1994278

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ehd.liverpool.gov.uk ---|--- Open Bug...

miamilakes-fl.gov Cross Site Scripting vulnerability OBB-1989901

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| miamilakes-fl.gov ---|--- Open Bug Boun...

mirassoldoeste.mt.gov.br Cross Site Scripting vulnerability OBB-1989458

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| mirassoldoeste.mt.gov.br ---|--- Open B...

torontopubliclibrary.ca Cross Site Scripting vulnerability OBB-1988822

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| torontopubliclibrary.ca ---|--- Open Bu...

minpromtorg.gov.ru Cross Site Scripting vulnerability OBB-1988332

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| minpromtorg.gov.ru ---|--- Open Bug...

southern.edu.my Cross Site Scripting vulnerability OBB-1987881

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| southern.edu.my ---|--- Open Bug Bounty...

fis.torbay.gov.uk Cross Site Scripting vulnerability OBB-1987682

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| fis.torbay.gov.uk ---|--- Open Bug Boun...

onlineservices.ipophil.gov.ph Cross Site Scripting vulnerability OBB-1987672

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| onlineservices.ipophil.gov.ph ---|---...

icara.sc.gov.br Cross Site Scripting vulnerability OBB-1986845

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| icara.sc.gov.br ---|--- Open Bug Bounty...

jacintomachado.sc.gov.br Cross Site Scripting vulnerability OBB-1986809

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| jacintomachado.sc.gov.br ---|--- Open B...

forquilhinha.sc.gov.br Cross Site Scripting vulnerability OBB-1986807

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| forquilhinha.sc.gov.br ---|--- Open Bug...

katusa.mil.kr Cross Site Scripting vulnerability OBB-1986597

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| katusa.mil.kr ---|--- Open Bug Bounty...

ww3.wirral.gov.uk Cross Site Scripting vulnerability OBB-1986516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| ww3.wirral.gov.uk ---|--- Open Bug Boun...

myswitzerland.com Cross Site Scripting vulnerability OBB-1986034

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| myswitzerland.com ---|--- Open Bug Boun...

openSUSE Security Update : clamav (openSUSE-2021-555)

This update for clamav fixes the following issues : - CVE-2021-1252: Fix for Excel XLM parser infinite loop. bsc1184532 - CVE-2021-1404: Fix for PDF parser buffer over-read; possible crash. bsc1184533 - CVE-2021-1405: Fix for mail parser NULL-dereference crash. bsc1184534 - Fix errors when scanni...

dmca.com Cross Site Scripting vulnerability OBB-1985719

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| dmca.com ---|--- Open Bug Bounty...

yamaha.com Cross Site Scripting vulnerability OBB-1985607

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| yamaha.com ---|--- Open Bug Bounty...

upload.bcb.gov.br Open Redirect vulnerability OBB-1983676

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| upload.bcb.gov.br ---|--- Open Bug Boun...

hrpdcva.gov Cross Site Scripting vulnerability OBB-1983547

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| hrpdcva.gov ---|--- Open Bug Bounty...