CVE-2017-17691

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack...

CVE-2017-17691

CVE-2017-17691 affects Homeputer CL Studio for HomeMatic (4.0 Rel 160808 and earlier). The vulnerability arises from cleartext exchange of username and password between server and client, enabling a remote attacker to capture credentials via a man-in-the-middle attack. The provided connected docu...

CVE-2017-17691

Homeputer CL Studio fur HomeMatic 4.0 Rel 160808 and earlier uses cleartext to exchange the username and password between server and client instances, which allows remote attackers to obtain sensitive information via a man in the middle attack...

whc2.123.cl XSS vulnerability

Open Bug Bounty ID: OBB-654266 Description| Value ---|--- Affected Website:| whc2.123.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cato5.cl Improper Access Control vulnerability

Open Bug Bounty ID: OBB-654052 Description| Value ---|--- Affected Website:| cato5.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

seguro.los40.cl XSS vulnerability

Open Bug Bounty ID: OBB-613761 Description| Value ---|--- Affected Website:| seguro.los40.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cl.jooble.org XSS vulnerability

Open Bug Bounty ID: OBB-592057 Description| Value ---|--- Affected Website:| cl.jooble.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

13.cl XSS vulnerability

Open Bug Bounty ID: OBB-584113 Description| Value ---|--- Affected Website:| 13.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ca2015.t13.cl XSS vulnerability

Open Bug Bounty ID: OBB-577468 Description| Value ---|--- Affected Website:| ca2015.t13.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the Switch Configuration Tools Backend component (clcmd_server) of the Cumulus Linux operating system allows a hacker to execute arbitrary commands.

The vulnerability of the Switch Configuration Tools Backend component clcmdserver in the Cumulus Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary commands using metashell shells, utilizing the “cl-rctl”...

derecho24.cl XSS vulnerability

Open Bug Bounty ID: OBB-457022 Description| Value ---|--- Affected Website:| derecho24.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

santillanainfantilyjuvenil.cl XSS vulnerability

Open Bug Bounty ID: OBB-453652 Description| Value ---|--- Affected Website:| santillanainfantilyjuvenil.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

proyecto.webescuela.cl XSS vulnerability

Open Bug Bounty ID: OBB-453320 Description| Value ---|--- Affected Website:| proyecto.webescuela.cl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

seguro.los40.cl Open Redirect vulnerability

Open Bug Bounty ID: OBB-449719 Description| Value ---|--- Affected Website:| seguro.los40.cl Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Cumulus Linux Switch Configuration Tools Backend (clcmd_server) Security Vulnerability

Cumulus Linux is an open network operating system from Cumulus Networks, Inc. Switch Configuration Tools Backend clcmdserver is one of the backend gateway configuration tools. A security vulnerability exists in Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier...

code49.cl XSS vulnerability

Vulnerable URL: https://www.code49.cl/paginas-web-inmobiliarias-en-chile.php?page=1%22%3E%3Csvg/onload=confirm/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

13.cl XSS vulnerability

Open Bug Bounty ID: OBB-254000 Description| Value ---|--- Affected Website:| 13.cl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the Linux operating system’s DRM driver allows a violator to trigger a service failure or exert other effects.

The vulnerability of the vc4getbcl function in the VideoCore DRM driver for the Linux operating system is due to a numerical overflow. Exploiting this vulnerability could allow an attacker, operating locally, to cause a service failure or other adverse effects through a specially crafted call to...

Linux Kernel Integer Overflow Vulnerability (CNVD-2017-01299)

The Linux Kernel is the kernel of the Linux operating system. A security vulnerability exists in the drivers/gpu/drm/vc4/vc4gem.c/vc4getbcl function in the VideoCore DRM driver in versions of Linux kernel prior to 4.9.7. A local user can cause a denial of service by calling the internally...

DEBIAN-CVE-2017-5576

Integer overflow in the vc4getbcl function in drivers/gpu/drm/vc4/vc4gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 allows local users to cause a denial of service or possibly have unspecified other impact via a crafted size value in a VC4SUBMITCL ioctl call...