RHEL 5 : mysql (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - mysql: Server: Partition unspecified vulnerability CPU Jan 2018 CVE-2018-2562 - mysql: Server: Replicatio...

RHEL 6 / 7 : rh-mysql56-mysql (RHSA-2018:0587)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0587 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...

Oracle MySQL Connectors Multiple Vulnerabilities (Jan 2018 CPU)

The version of Oracle MySQL Connectors installed on the remote host is Connector/NET 6.9.x prior to 6.9.11 or 6.10.x prior to 6.10.6, or Connector/ODBC 5.3.x prior to 5.3.10. It is, therefore, affected by multiple vulnerabilities as noted in the January 2018 Critical Patch Update advisory: - An...

EulerOS Virtualization 2.5.0 : mariadb (EulerOS-SA-2018-1346)

According to the versions of the mariadb packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - mysql: Client programs unspecified vulnerability CPU Jul 2017 CVE-2017-3636 - mysql: Server: DML unspecified vulnerability CPU J...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Guardium

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 used by IBM Security Guardium. These issues were disclosed as part of the IBM Java SDK updates in Jan 2018. Vulnerability Details CVEID: CVE-2018-2579 DESCRIPTION: An unspecified vulnerability in Oracle Jav...

Moodle 3.x SSRF Vulnerability (Jan 2018) - Linux

Moodle is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Oracle Primavera Unifier Platform Component Unspecified Remote Issue (January 2018 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is missing the January 2018 Critical Patch Update. It is, therefore, affected by an unspecified issue in the platform component as described in the advisory. %NASLMINLEVEL 703...

test.cw-midas.com XSS vulnerability

Open Bug Bounty ID: OBB-531130 Description| Value ---|--- Affected Website:| test.cw-midas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

learning.ifla.org XSS vulnerability

Open Bug Bounty ID: OBB-530778 Description| Value ---|--- Affected Website:| learning.ifla.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Microsoft Office Multiple Remote Code Execution Vulnerabilities (Jan 2018) - Mac OS X

This host is missing an important security update for Microsoft Office 2016 on Mac OS X according to Microsoft security update January 2018 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

rdmathis.com XSS vulnerability

Open Bug Bounty ID: OBB-494071 Description| Value ---|--- Affected Website:| rdmathis.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based ...

etsglobal.org XSS vulnerability

Open Bug Bounty ID: OBB-457916 Description| Value ---|--- Affected Website:| etsglobal.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

wiki.cfunited.com XSS vulnerability

Open Bug Bounty ID: OBB-385722 Description| Value ---|--- Affected Website:| wiki.cfunited.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

tworld.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-362941 Description| Value ---|--- Affected Website:| tworld.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

ebikecult.it XSS vulnerability

Vulnerable URL: http://www.ebikecult.it/ricerca/?cx=003092896620864067482%3Av4ediudnsxm=FORID%3A11=%22%22%3E%3Csvg+onload%3Dalert%28%2FXSS%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 476711 VIP websi...

buzznet.com XSS vulnerability

Vulnerable URL: http://www.buzznet.com/?s=%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 144312 VIP website status:| No Coordinate...

ahorrativa.com.ar XSS vulnerability

Vulnerable URL: http://ahorrativa.com.ar/viewitem?id=3671%22%3E%3Cscript%3Ealert0;%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websit...

bata.it XSS vulnerability

Vulnerable URL: http://www.bata.it/web/search?query="'--! Details: Description| Value ---|--- Patched:| Yes, at 11.01.2018 Latest check for patch:| 11.01.2018 08:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 199623 VIP website status:| No Check bata.it SSL...