ogi2.fr XSS vulnerability

Vulnerable URL: http://www.ogi2.fr/catalogue/amenagement-urbain/amenagement-quartier-trapeze-boulogne-billancourt.html!prettyphoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.10.2017...

c8.fr XSS vulnerability

Open Bug Bounty ID: OBB-272139 Description| Value ---|--- Affected Website:| c8.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jobs-stages.letudiant.fr XSS vulnerability

Open Bug Bounty ID: OBB-269400 Description| Value ---|--- Affected Website:| jobs-stages.letudiant.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Design/Logic Flaw

An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...

Memory corruption

An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decodetlv" and a denial of service...

Memory corruption

An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode" and a denial of service...

Spoofing

An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in frdhcpdecodeoptions" and a denial of service...

Buffer overflow

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in radcoalesce" - this allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code...

Denial of service

An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...

CVE-2017-10981

CVE-2017-10981 affects FreeRADIUS 2.x prior to 2.2.10 with a DHCP memory leak in fr_dhcp_decode() that can lead to a denial of service. The vulnerability is fixed by upgrading FreeRADIUS to 2.2.10+ (or applying vendor advisories). Public references in the connected documents confirm the issue and...

CVE-2017-10978

FreeRADIUS is affected by CVE-2017-10978 (and related CVEs) with out-of-bounds memory handling in packet processing. The primary publicly documented issue for CVE-2017-10978 is an out-of-bounds read/write in make_secret() that can cause a crash and, in some disclosures, potential code execution, ...

CVE-2017-10987

CVE-2017-10987 affects FreeRADIUS Server (FreeRADIUS 3.x prior to 3.0.15). The issue is a DHCP-related out-of-bounds read in fr_dhcp_decode_suboptions(), leading to a denial-of-service (server crash) when processing crafted DHCP packets. Connected advisories/ Nessus entries corroborate multiple D...

CVE-2017-10986

FreeRADIUS 3.x prior to 3.0.15 is affected by CVE-2017-10986. The issue is an out-of-bounds read in the dhcp_attr2vp() function when decoding string DHCP options, which could trigger a denial of service via crafted packets. Arch Linux advisory confirms the vulnerability and lists upgrading to 3.0...

CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

CVE-2017-10978

An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...

CVE-2017-10982

An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in frdhcpdecodeoptions" and a denial of service...

CVE-2017-10980

An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decodetlv" and a denial of service...

UBUNTU-CVE-2017-10981

An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode" and a denial of service...

CVE-2017-10978

An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...

inscription-labex.univ-rennes1.fr XSS vulnerability

Open Bug Bounty ID: OBB-261009 Description| Value ---|--- Affected Website:| inscription-labex.univ-rennes1.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6...