CVE-2022-39813

Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/jsecuritycheck via the jusername parameter, or NMSCIWebGui/actloglineview.jsp via the name or actLine parameter. An attacker leveraging this vulnerability could inject arbitrary JavaScript. The...

j-vet.com Cross Site Scripting vulnerability OBB-3167880

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

j-summit.com Cross Site Scripting vulnerability OBB-3167879

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

j-plankagoshima.com Cross Site Scripting vulnerability OBB-3167867

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2015-10068

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is...

Sql injection

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is...

CVE-2015-10068 danynab movify-j ReviewServiceImpl.java getByMovieId sql injection

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is...

CVE-2015-10068

CVE-2015-10068 affects the danynab movify-j stack; the vulnerability exists in ReviewServiceImpl.java:getByMovieId where manipulating the movieId/username parameter enables SQL injection. Markets show a patch named c3085e01936a4d7eff1eda3093f25d56cc4d2ec5 was released, and remediation is to apply...

CVE-2015-10068 danynab movify-j ReviewServiceImpl.java getByMovieId sql injection

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is...

danynab movify-j SQL注入漏洞

danynab is an application by the individual developer of danynab. An SQL injection vulnerability exists in danynab movify-j, which stems from the fact that incorrect manipulation of the movieId/username parameter can lead to sql injection...

j-doradic.com Cross Site Scripting vulnerability OBB-3144680

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

j-shop.net Open Redirect vulnerability OBB-3141611

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2015-10034

A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 13cd6c3d1210640bfdb39872b2bb3597aa991279. It is recommended to apply a patch to fix this issue...

Sql injection

A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 13cd6c3d1210640bfdb39872b2bb3597aa991279. It is recommended to apply a patch to fix this issue...

CVE-2015-10034

CVE-2015-10034 affects j-nowak workout-organizer . The vulnerability arises from an unspecified part of the code, resulting in a SQL injection . The CVE entry lists a patch: the patch hash 13cd6c3d1210640bfdb39872b2bb3597aa991279 and recommends applying it. Various connected sources (Red Hat, CVE...

CVE-2015-10034 j-nowak workout-organizer sql injection

A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql injection. The patch is identified as 13cd6c3d1210640bfdb39872b2bb3597aa991279. It is recommended to apply a patch to fix this issue...

PT-2023-10213 · Unknown · J-Nowak Workout-Organizer

Name of the Vulnerable Software and Affected Versions: j-nowak workout-organizer affected versions not specified Description: A critical vulnerability has been found in the j-nowak workout-organizer, leading to sql injection. The manipulation affects unknown code. Recommendations: At the moment,...

K14317: OpenSSH J-PAKE vulnerability CVE-2010-4478

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate. F5 products do not include J-PAKE in the OpenSSH programs a...

fredmunleong.com Cross Site Scripting vulnerability OBB-3126381

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Updated java packages fix security vulnerability

Class compilation issue. CVE-2022-21540 Improper restriction of MethodHandle.invokeBasic. CVE-2022-21541 Integer truncation issue in Xalan-J. CVE-2022-34169 Improper MultiByte conversion can lead to buffer overflow. CVE-2022-21618 Improper handling of long NTLM client hostnames. CVE-2022-21619...