10071 matches found
calculator.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1147155 Security Researcher MrRain1996 Helped patch 1003 vulnerabilities Received 5 Coordinated Disclosure badges Received 9 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting calculator.net website a...
profile.usatoday.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1146706 Security Researcher Rbcafe Helped patch 258 vulnerabilities Received 3 Coordinated Disclosure badges Received 7 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting profile.usatoday.com website...
toptbdev.net Open Redirect vulnerability
Open Bug Bounty ID: OBB-1146530 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting toptbdev.net website and its users. Following...
m.onenewspage.co.uk Open Redirect vulnerability
Open Bug Bounty ID: OBB-1145816 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting m.onenewspage.co.uk website and its users. Following...
magicode.me Open Redirect vulnerability
Open Bug Bounty ID: OBB-1145640 Security Researcher myNickName Helped patch 200 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting magicode.me website and its users. Following...
@01/service-core (1.2.1), @adyen/api-library (>=2.0.0, <=2.1.5) +348 more potentially affected by unknown CVE via https-proxy-agent (>=2.0.0, <=2.2.2)
https-proxy-agent NPM version =2.0.0, =2.0.0, =3.9.0-alpha.0, =0.1.0, =0.1.0, =2.0.3, =2.1.3 - @back4app/ant 0.0.19 - @back4app/ant-cli 0.0.19 - @back4app/ant-core 0.0.19 - @back4app/ant-graphql 0.0.19 - @back4app/ant-graphql-express 0.0.19 - @back4app/ant-serverless 0.0.19 and more Source cves:...
@01/service-core (1.2.1), @adyen/api-library (>=2.0.0, <=2.1.5) +348 more potentially affected by unknown CVE via https-proxy-agent (>=2.0.0, <=2.2.2)
https-proxy-agent NPM version =2.0.0, =2.0.0, =3.9.0-alpha.0, =0.1.0, =0.1.0, =2.0.3, =2.1.3 - @back4app/ant 0.0.19 - @back4app/ant-cli 0.0.19 - @back4app/ant-core 0.0.19 - @back4app/ant-graphql 0.0.19 - @back4app/ant-graphql-express 0.0.19 - @back4app/ant-serverless 0.0.19 and more Source cves:...
Machine-In-The-Middle in https-proxy-agent
Versions of https-proxy-agent prior to 2.2.3 are vulnerable to Machine-In-The-Middle. The package fails to enforce TLS on the socket if the proxy server responds the to the request with a HTTP status different than 200. This allows an attacker with access to the proxy server to intercept...
PT-2020-21436
Name of the Vulnerable Software and Affected Versions https-proxy-agent versions prior to 2.2.3 Description The issue allows an attacker with access to the proxy server to intercept unencrypted communications, which may include sensitive information such as credentials, by failing to enforce TLS ...
Oracle Java SE 1.7.0_261 / 1.8.0_251 / 1.11.0_7 / 1.14.0_1 Multiple Vulnerabilities (Apr 2020 CPU) (Unix)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 7 Update 261, 8 Update 251, 11 Update 7, or 14 Update 1. It is, therefore, affected by multiple vulnerabilities related to the following components : - Oracle Java SE and Java SE Embedded are...
CVE-2020-2816
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability c...
CVE-2020-2816
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability c...
CVE-2020-2781
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to...
CVE-2020-2778
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...
DEBIAN-CVE-2020-2767
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...
CVE-2020-2767
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...
CVE-2020-2778
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...
Design/Logic Flaw
Vulnerability in the Oracle Application Express component of Oracle Database Server. The supported version that is affected is Prior to 19.2. Easily exploitable vulnerability allows low privileged attacker having End User Role privilege with network access via HTTPS to compromise Oracle Applicati...
Design/Logic Flaw
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...
Design/Logic Flaw
Vulnerability in the Java SE product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 11.0.6 and 14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of this vulnerability...