48 matches found
CVE-2023-28858
redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4....
Design/Logic Flaw
redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4....
CVE-2023-28858
redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4....
httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling
A flaw was found in httpd. The inbound connection is not closed when it fails to discard the request body, which may expose the server to HTTP request smuggling...
Huawei EulerOS: Security Advisory for wget (EulerOS-SA-2019-1155)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Authorization Bypass
evolution-ews is vulnerable to authorization bypass. The vulnerability exists as all certificate errors ignored if configured to ignore an initial error in gnome-online-accounts creation resulting in the connection open to being viewed and modified...
dbcost.com XSS vulnerability
Vulnerable URL: http://dbcost.com/find.php?q= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19880199 VIP website status:| No Check dbcost.com SSL connection:| Grade: F Coordinated...
zm.barclays.com XSS vulnerability
Vulnerable URL: http://zm.barclays.com/personal-banking/treasury/treasury-services/index.htmltab= Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 15.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
swinfordparishcouncil.gov.uk Open Redirect vulnerability
Vulnerable URL: http://www.swinfordparishcouncil.gov.uk/go.php?id=892518=http://openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 07.09.2017 Latest check for patch:| 07.09.2017 08:25 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank|...
eryri-gweithgareddau.pageturn.co.uk Open Redirect vulnerability
Vulnerable URL: http://eryri-gweithgareddau.pageturn.co.uk/link.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.10.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...
jalshamoviez.org XSS vulnerability
Vulnerable URL: http://jalshamoviez.org/search.php?search=%3E%27%3E%22%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E=All Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 92765 VIP website status:|...
ouisharefestparis2017.sched.com XSS vulnerability
Vulnerable URL: https://ouisharefestparis2017.sched.com/speaker/quatorze.cc/"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...
hostmidia.com.br XSS vulnerability
Vulnerable URL: https://www.hostmidia.com.br/registro-de-dominio/?dominio='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 453272 VIP website status:| Yes Check hostmidia.com.br S...
heure-exacte-a.info XSS vulnerability
Vulnerable URL: http://heure-exacte-a.info/Quelleheureest-ilàScottsdale,Arizona,États-UnisdAmérique/"'--! Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:26 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...
kcdb.bipm.org XSS vulnerability
Vulnerable URL: http://kcdb.bipm.org/appendixC/search.asp?met=EM"'--! Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...
core.co.uk XSS vulnerability
Vulnerable URL: http://core.co.uk/events?FollowSite=0=%27-confirm%27OPENBUGBOUNTY%27-%27 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 18:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2990978 VIP websit...
ratemyprofessors.com XSS vulnerability
Vulnerable URL: http://www.ratemyprofessors.com/search.jsp/"-confirmOPENBUGBOUNTY-"KNOXSS Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3581 VIP website status:| Yes Check ratemyprofessors.com SSL connection:|...
vroom.be XSS vulnerability
Vulnerable URL:...
infer-research.net XSS vulnerability
Vulnerable URL: http://www.infer-research.net/search.php?words=" LOL+LOL+LOL+LOL+LOL+LOL = Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1306853 VIP website status:| No Check...
apriliagenuineparts.co.uk XSS vulnerability
Vulnerable URL: http://www.apriliagenuineparts.co.uk/part-search.php?txtSearch='" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1289582 VIP website status:| No Check...