GHSA-XJ3H-VC9J-J823 Directory Traversal in nodeaaaaa

Affected versions of nodeaaaaa resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

PT-2018-10474 · Roku · Roku

Name of the Vulnerable Software and Affected Versions: Roku and Roku TV products affected versions not specified Description: The issue allows unauthorized access to the device via a DNS Rebind attack, potentially resulting in remote device control and the exfiltration of privileged device and...

PT-2018-5361 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A command injection issue exists in the web server functionality, allowing a specially crafted HTTP POST to cause a privilege escalation, resulting in a root shell. An attacker can inject O...

PT-2018-16245 · Hyland · Hyland Perceptive Document Filters

Name of the Vulnerable Software and Affected Versions: Hyland Perceptive Document Filters version 11.4.0.2647 Description: A stack-based buffer overflow exists in the DOC-to-HTML conversion functionality. This issue can be exploited by a crafted .doc document, leading to a stack-based buffer...

PT-2018-1300 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: Multiple vulnerabilities in the Application Layer Protocol Inspection...

PT-2018-15530 · Sap · Sap Business Client

Name of the Vulnerable Software and Affected Versions: SAP Business Client version 6.5 Description: The issue allows an attacker to access restricted information under certain conditions. Recommendations: For SAP Business Client version 6.5, at the moment, there is no information about a newer...

PT-2018-5977 · Apache · Apache Qpid Dispatch Router

Name of the Vulnerable Software and Affected Versions: Apache Qpid Dispatch Router versions 0.7.0 through 0.8.0 Description: A Denial of Service issue was found in the software. To exploit this, a remote user must establish an AMQP connection to the Qpid Dispatch Router and send a specifically...

WordPress <=4.9.2 - Application Denial of Service (DoS) vulnerability

Application Denial of Service DoS vulnerability found in WordPress versions =4.9.2. Solution 2/5/2018 - no patch available...

PT-2018-16856 · Malwarebytes · Malwarebytes Premium

Name of the Vulnerable Software and Affected Versions: Malwarebytes Premium version 3.3.1.2183 Description: The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40E020 in the driver file...

yucatanview.com XSS vulnerability

Vulnerable URL: http://yucatanview.com/es/%22+%3E%3C%252Fsvg%3E%3C%252F|%3E%3Csvg%252Fonload=prompt2%3E/7/0-0--g-p-0/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

arcspider.com XSS vulnerability

Vulnerable URL: http://www.arcspider.com/tsearch.exe?search=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 19.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

grandcarrentals.com XSS vulnerability

Vulnerable URL: http://www.grandcarrentals.com/?A=%22/%3E%27%3E%22%3EI%3Ci%3EI%3Csvg/onload=alert/openbugbounty/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

smallbusinessadvocate.com XSS vulnerability

Vulnerable URL: https://www.smallbusinessadvocate.com/widget/contents/article.php?id=%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

firstaid101.com XSS vulnerability

Vulnerable URL: http://www.firstaid101.com/search-results.aspx?keywords=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%22OPENBUGBOUNTY%22%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

scrubs-music.de XSS vulnerability

Vulnerable URL: http://scrubs-music.de/netaudio-player/flashdetection.swf?flashContentURL=javascript:prompt5389 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

antiquariat-vinke.de XSS vulnerability

Vulnerable URL: http://www.antiquariat-vinke.de/flashdetection.swf?flashContentURL=javascript:alert5389 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

whitney.med.yale.edu XSS vulnerability

Vulnerable URL: http://whitney.med.yale.edu/gsdl/cgi-bin/library?a=p=about=salpetre%22%3E%3Csvg%2Fonload%3Dalert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

it.sixt.com XSS vulnerability

Vulnerable URL: https://it.sixt.com/gfx/leasing/firmenwagen/angebote/audi-tt.swf?motxt=Jetzt%20informieren!=javascript:alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

manpower.hu XSS vulnerability

Vulnerable URL:...

it-matchmaker.com XSS vulnerability

Vulnerable URL: https://www.it-matchmaker.com/core/classes/pChart/examples/sandbox/script/session.php?%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 16.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...