compare-processors.com XSS vulnerability

Open Bug Bounty ID: OBB-687118 Description| Value ---|--- Affected Website:| compare-processors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Net-SNMP Denial of Service Vulnerability

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices and so on. A security vulnerability exists in the 'snmpoidcompare' function in the snmplib/snmpapi.c file in Net-SNMP versions prior to 5.8. ...

UBUNTU-CVE-2018-18066

snmpoidcompare in snmplib/snmpapi.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service...

CVE-2018-18066

Net-SNMP CVE-2018-18066 is a NULL pointer dereference in snmp_oid_compare() within snmplib/snmp_api.c, affecting Net-SNMP versions before 5.8. An unauthenticated remote attacker can crash the agent by sending a crafted UDP packet, enabling a Denial of Service. Affected product scope includes Net-...

PT-2018-3134

Name of the Vulnerable Software and Affected Versions Net-SNMP versions prior to 5.8 Description The issue is related to a NULL Pointer Exception bug in the snmp oid compare function. This bug can be exploited by an unauthenticated attacker to remotely cause the instance to crash via a crafted UD...

Security Bulletin: Vulnerability in IBM Java SDK affects IBM Watson Compare and Comply: Element Classification on IBM Cloud Private

Summary There is a vulnerability CVE-2018-2783 in IBM® Runtime Environment Java™ Technology Edition, Version 8 that is used by IBM Watson™ Compare and Comply: Element Classification on IBM Cloud Private. The issue was disclosed as part of the IBM Java SDK updates for April 2018. Vulnerability...

Design/Logic Flaw

secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length...

CVE-2015-9238

secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length...

CVE-2015-9238

secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length...

CVE-2015-9238

The CVE-2015-9238 issue affects the secure-compare package (Node ecosystem). Versions prior to 3.0.1 incorrectly compare two strings: the check compares the first argument with itself, allowing any two strings of the same length to pass. Affected component: secure-compare (npm/Node.js environment...

CVE-2015-9238

secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length...

CVE-2015-9238: Incorrect Comparison

secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length...

PT-2018-4551

Name of the Vulnerable Software and Affected Versions secure-compare versions prior to 3.0.1 Description The issue arises from the secure-compare function comparing the first argument with itself instead of comparing two different strings. This results in the function always returning true when...

Adobe Acrobat Pro DC Compare Files Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Compare...

compare-dvd.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-597633 Description| Value ---|--- Affected Website:| compare-dvd.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

OpenSSL Security Restriction Bypass Vulnerability (CNVD-2018-06538)

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. A security vulnerability exists in the OpenSSL version 1.1.0-1.1.0g PA-RISC CRYPTOmemcmp function implementation, which can be exploited by an attacker via a constructed message to bypa...

DEBIAN-CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

Microsoft Edge Chakra JIT - Array.prototype.reverse Array Type Confusion

Microsoft Edge Chakra JIT - Array.prototype.reverse Array Type Confusion / This is simillar to the previous issue 1457. But this time, we use Array.prototype.reverse. Array.prototype.reverse can be inlined and may invoke EnsureNonNativeArray to convert the prototype of "this" to a Var array. Call...

Logic Vulnerability in Inventron VT Designer

INVISION is a key high-tech enterprise under the National Torch Plan. Relying on power electronics, automatic control and information technology, INVISION's business covers industrial automation, new energy vehicles, network energy and rail transportation. A logic vulnerability exists in INVITRO ...

as-seen-on-tv-compare.com XSS vulnerability

Open Bug Bounty ID: OBB-382583 Description| Value ---|--- Affected Website:| as-seen-on-tv-compare.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...