uimm-maine-et-loire.fr XSS vulnerability

Open Bug Bounty ID: OBB-710774 Description| Value ---|--- Affected Website:| uimm-maine-et-loire.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

CVE-2018-13805

A vulnerability has been identified in SIMATIC ET 200SP Open Controller All versions = V2.0 and = V2.0 and = V2.0 and V2.5. An attacker can cause a denial-of-service condition on the network stack by sending a large number of specially crafted packets to the PLC. The PLC will lose its ability to...

SIEMENS SIMATIC S7-1500,SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP Open Denial of Service Vulnerability

The SIEMENS SIMATIC S7-1500 CPU family is designed for discrete and continuous control in industrial environments such as manufacturing, the global food and beverage, and the chemical industry.SIEMENS SIMATIC S7-1500 Software Controller is the SIMATIC software controller for PC-based automation...

Siemens SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP OpenController (Update A)

1. EXECUTIVE SUMMARY CVSS v3 5.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC S7-1500, SIMATIC S7-1500 Software Controller and SIMATIC ET 200SP Open Controller Vulnerability: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is...

Siemens OpenSSL Vulnerability in Industrial Products (Update E)

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable remotely Vendor : Siemens Equipment : Industrial Products Vulnerability : Cleartext Transmission of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory titled ICSA-18-226-02 Siemens...

science-et-surface.fr XSS vulnerability

Open Bug Bounty ID: OBB-637043 Description| Value ---|--- Affected Website:| science-et-surface.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

inra.fr XSS vulnerability

Open Bug Bounty ID: OBB-609417 Description| Value ---|--- Affected Website:| inra.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cristal-et-bronze.com XSS vulnerability

Open Bug Bounty ID: OBB-598847 Description| Value ---|--- Affected Website:| cristal-et-bronze.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

soin-et-nature.com XSS vulnerability

Open Bug Bounty ID: OBB-593221 Description| Value ---|--- Affected Website:| soin-et-nature.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-4843

A vulnerability has been identified in SIMATIC S7-400 CPU 414-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 414F-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 416-3 PN/DP V7 All versions V7.0.3, SIMATIC S7-400 CPU 416F-3 PN/DP V7 All versions V7.0.3, SIMATIC CP 343-1 incl. SIPLUS varian...

gerard-pere-et-fils.com XSS vulnerability

Open Bug Bounty ID: OBB-579645 Description| Value ---|--- Affected Website:| gerard-pere-et-fils.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

microscopie-et-services.com XSS vulnerability

On the 02.01.2018 security researcher reported a XSS vulnerability affecting the microscopie-et-services.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 2...

microscopie-et-services.com XSS vulnerability

Open Bug Bounty ID: OBB-472606 Description| Value ---|--- Affected Website:| microscopie-et-services.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS...

vaux-et-chantegrue.fr XSS vulnerability

Open Bug Bounty ID: OBB-459434 Description| Value ---|--- Affected Website:| vaux-et-chantegrue.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

science-et-vie.com XSS vulnerability

Vulnerable URL: http://www.science-et-vie.com/content/search?SearchText=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E=ok\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Memory Corruption Vulnerability in WPS Forms (CNVD-2017-34135)

WPS Office is an office software suite developed independently by Kingsoft Corporation. A memory corruption vulnerability exists in the etmain module of the form et.exe in WPS when parsing a specific xls file, which can be exploited by an attacker to cause a denial of service or code execution...

Null Pointer Vulnerability in WPS Forms

WPS Office is an office software suite developed independently by Kingsoft Corporation. A null pointer vulnerability exists in the form et.exe in WPS when parsing a specific xls file etmain, which can be exploited by an attacker to cause a denial of service or code execution...

science-et-vie.com XSS vulnerability

Vulnerable URL: https://www.science-et-vie.com/article/combien-faut-il-chauffer-la-chambre-a-coucher-7364/"'--! Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 108535 VIP website status:| No Coordinated Disclosur...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update F)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...

Siemens devices using the PROFINET Discovery and Configuration Protocol (Update G)

CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low skill level to exploit. Vendor: Siemens Equipment: Devices using the PROFINET Discovery and Configuration Protocol DCP Vulnerability: Denial of Service UPDATE INFORMATION This updated advisory is a follow-up to the updated advisory...