CVE-2018-5326

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

Code injection

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

CVE-2018-5326

CVE-2018-5326 affects Cheetah Mobile CM Browser 5.22.06.0012 on older Android platforms, described as a Same Origin Policy bypass . External documents confirm the vulnerability exists in this specific version, enabling cross-origin policy circumvention. The CVSS data provided indicates a network-...

cm-covilha.pt XSS vulnerability

Open Bug Bounty ID: OBB-449532 Description| Value ---|--- Affected Website:| cm-covilha.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-15865

CVE-2017-15865 affects FRR (bgpd) in FRRouting before 2.0.2 and in 3.x before 3.0.2, used in Cumulus Linux before 3.4.3. A malformed BGP UPDATE from a connected peer can trigger transmission of up to thousands of unintended bytes, causing information disclosure. The issue stems from mishandled at...

CVE-2017-15865

bgpd in FRRouting FRR before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes...

Code injection

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address...

CVE-2017-9477

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot...

CVE-2017-9487

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST and DPC3941T firmware version DPC39412.5s3PRODsey devices allows remote attackers to discover a WAN IPv6 IP address by leveraging knowledge of the CM MAC address...

CVE-2017-9477

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot...

CVE-2017-9484

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic...

Design/Logic Flaw

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover the CM MAC address by connecting to the device's xfinitywifi hotspot...

CVE-2017-9484

The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST and DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to discover a CM MAC address by sniffing Wi-Fi traffic and performing simple arithmetic...

cm-condeixa.pt XSS vulnerability

Open Bug Bounty ID: OBB-270654 Description| Value ---|--- Affected Website:| cm-condeixa.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-caminha.pt XSS vulnerability

Open Bug Bounty ID: OBB-262152 Description| Value ---|--- Affected Website:| cm-caminha.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cm-oaz.pt XSS vulnerability

Vulnerable URL: https://www.cm-oaz.pt/?op=search=%27%22--%21%3E%3Cimg+src%3Dx+onerror%3Dalert%28%22openbugbounty%22%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1189466 VIP...

cm-loures.pt XSS vulnerability

Vulnerable URL: http://www.cm-loures.pt/Pesquisa.aspx?DisplayId=1=%22%3E%3Csvg%2fonload%3dprompt%28%2fOPENBUGBOUNTY%2f%29%3E Details: Description| Value ---|--- Patched:| Yes, at 31.05.2017 Latest check for patch:| 31.05.2017 13:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

cm-serpa.pt XSS vulnerability

Vulnerable URL: http://www.cm-serpa.pt/pesquisa.asp?pesquisar=1%27%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E&input.x;=0&input.y;=0=frase Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

cm-amares.pt XSS vulnerability

Vulnerable URL: http://www.cm-amares.pt/pesquisa Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4723409 VIP website status:| No Check cm-amares.pt SSL connection:| Grade: F...

CVE-2017-3808

A vulnerability in the Session Initiation Protocol SIP UDP throttling process of Cisco Unified Communications Manager Cisco Unified CM could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient rate...