Stack overflow

GnuCOBOL 2.2 has a stack-based buffer overflow in cbencodeprogramid in cobc/typeck.c via crafted COBOL source code...

Debian DLA-1486-1 : spice security update

A vulnerability was discovered in SPICE before version 0.14.1 where the generated code used for demarshalling messages lacked sufficient bounds checks. A malicious client or server, after authentication, could send specially crafted messages to its peer which would result in a crash or,...

Exploit for CVE-2017-3248

exploits/weblogic/exploit-CVE-2017-3248-bobsecq.py The script...

CVE-2018-3611

Bounds check vulnerability in User Mode Driver in Intel Graphics Driver 15.40.x.4 and 21.20.x.x allows unprivileged user to cause a denial of service via local access...

DRUPAL-CONTRIB-2018-015

This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration entities. The module doesn't sufficiently associate cacheability metadata in certain situations thereby causing an access bypass vulnerability. This vulnerability is mitigated b...

bucksfootball.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-461714 Description| Value ---|--- Affected Website:| bucksfootball.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

IKEv2 Protocol Denial of Service Vulnerability in Multiple Huawei Products

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A denial-of-service vulnerability exists in the IKE...

CVE-2017-11013

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, countOffset in function UnpackCore is increased for each loop, while there is no boundary check against "pIe-arraybound"...

Huawei FusionSphere OpenStack Path Checksum Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. A path checking vulnerability exists in Huawei...

thechessworld.com XSS vulnerability

Vulnerable URL: https://www.thechessworld.com/?s=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 166455 VIP website status:| No...

boardreader.com XSS vulnerability

Vulnerable URL: http://boardreader.com/?src=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 184848 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

hamrosms.com XSS vulnerability

Vulnerable URL: http://www.hamrosms.com/websms/default.asp?msg="Access Denied!! Please login Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17554173 VIP website status:| No...

narcom.ru Open Redirect vulnerability

Vulnerable URL: http://www.narcom.ru/redirect.php?http://openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.12.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 1562612 VIP website status:| No Coordinated...

RHEL 5 / 6 : spacewalk-backend (RHSA-2017:1259)

An update for spacewalk-backend is now available for Red Hat Satellite 5.6 and Red Hat Satellite 5.7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

ivybridge-today.co.uk XSS vulnerability

Vulnerable URL: http://www.ivybridge-today.co.uk/search.cfm?sectionIs=search=LocalNews=2011="= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6664122 VIP website status:| No...

nu3.de XSS vulnerability

Vulnerable URL: https://www.nu3.de/catalog/?q="-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 100164 VIP website status:| No Coordinated Disclosure Timeline: Description| Value...

CVE-2016-7266

CVE-2016-7266 affects multiple Microsoft Office/Excel variants (Windows: Excel 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016; macOS: Excel 2016) and the Office Compatibility Pack, Excel Viewer, and Excel for Mac. The root cause is mishandling of a registry check when running embedded content, d...

omicsonline.org XSS vulnerability

Vulnerable URL: https://www.omicsonline.org/searchresult.php?keyword="= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 22268 VIP website status:| Yes Check omicsonline.org SSL...

CVE-2016-5689

The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks...

funny-games.biz XSS vulnerability

Vulnerable URL: http://www.funny-games.biz/searchadultres.html?searchstring=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...