55 matches found
CVE-2017-6298
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "1 of 9. Null Pointer Deref / calloc return value not checked."...
imavipublicidad.com.mx XSS vulnerability
Vulnerable URL: http://imavipublicidad.com.mx/search.php?s=%22%3E%27%3E%3C?title%3E%3C?script%3E%3Csvg%20onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...
store.tcpress.com XSS vulnerability
Vulnerable URL: http://store.tcpress.com/cgi/sc/productsearch.cgi?storeid=1cc791e49059f22ee17156dbbbea33c2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...
ohtaka.sakura.ne.jp XSS vulnerability
Vulnerable URL: http://ohtaka.sakura.ne.jp/matome/search.php?q=%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
Samsung SyncThru Web Service unauthenticated access
User's account is not checked...
libgadu certificate check bypass
Server certificate is not checked...
UBUNTU-CVE-2013-6825
1 movescu.cc and 2 storescp.cc in dcmnet/apps/, 3 dcmnet/libsrc/scp.cc, 4 dcmwlm/libsrc/wlmactmg.cc, 5 dcmprscp.cc and 6 dcmpsrcv.cc in dcmpstat/apps/, 7 dcmpstat/tests/msgserv.cc, and 8 dcmqrdb/apps/dcmqrscp.cc in DCMTK 3.6.1 and earlier does not check the return value of the setuid system call,...
Security: Ability to determine if username is valid via DaoAuthenticationProvider
DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password if the user is not found, which makes the response delay shorter and might allow remote attackers to enumerate valid usernames via a series of logi...
Quake 3 / ioquake3 traffic amplification vulnerability
Source of getstatus UDP message is not checked...
Apache Tomcat information leakage
Some security limitations are not checked for sendfile...
Harris Stratex StarMAX crossite request forgery
Referer for GET request is not checked...
Jscape Secure FTP Applet sessions spoofing
SSH key is not checked...
Zyxel Zywall crossite request forgery
Referer is not chacked on data submission...