amtrib.com XSS vulnerability

Vulnerable URL: http://www.amtrib.com/search?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4886358 VIP website status:| No Check amtrib.com SSL connection:| Grade: A-...

ricambi-vespa.it XSS vulnerability

Vulnerable URL: http://www.ricambi-vespa.it/find.php?query=coprigambe" autofocus onfocus="prompt/openbugbounty/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1644274 VIP website...

secure.optionelements.com XSS vulnerability

Vulnerable URL: https://secure.optionelements.com/m/login.cfm?emailaddress=%27==%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E=0.987632 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

mail.clintonvillewi.org XSS vulnerability

Vulnerable URL: http://mail.clintonvillewi.org:32000/webmail/?color=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Cisco IOS Multiple OpenSSL Vulnerabilities (CSCut46130)

The remote Cisco IOS device is missing a vendor-supplied security patch and has an IOS service configured to use TLS or SSL. It is, therefore, affected by the following vulnerabilities in the bundled OpenSSL library : - A use-after-free condition exists in the d2iECPrivateKey function due to...

SUSE-SU-2016:0857-1 Security update for rubygem-activesupport-4_1

This update for rubygem-activesupport-41 fixes the following issues: The previous security patch for CVE-2015-7576 was adding a new file but this file was not being added in the gemspec, thus the resulting gem didn't have it. This update includes the patch in the gem file too...

retina.postech.ac.kr XSS vulnerability

Vulnerable URL: https://retina.postech.ac.kr/center/inc/postcode.jsp?form=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

water.soundprint.org Open Redirect vulnerability

Vulnerable URL: http://water.soundprint.org/link.php?link=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pageran...

login.flipora.com XSS vulnerability

Vulnerable URL: http://login.flipora.com/signup.jsp?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Goog...

users.cs.jmu.edu XSS vulnerability

Vulnerable URL: https://users.cs.jmu.edu/bernstdh/web/common/lectures/phpexamples/xss/trusted/preview.php?message=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

firstline-pharmacy.com XSS vulnerability

Vulnerable URL: http://firstline-pharmacy.com/site/search?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=11=9 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4928058 Google...

soundmakers.ca XSS vulnerability

Vulnerable URL: http://www.soundmakers.ca/soundstreams-commissions.aspx?gclid=CIXh666EscCFRUrjgodT3APEw=%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Oracle Identity Manager End User Self Service (January 2014 CPU)

The remote host is missing the January 2014 Critical Patch Update for Oracle Identity Manager. It is, therefore, potentially affected by multiple, unspecified vulnerabilities in the End User Self Service sub-component of Oracle Identity Manager. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

AIX 5.3 TL 9 : sendmail (IZ72835)

'sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name CN field of an X.509 certificate, which 1 allows man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers via a crafted server certificate issued by a legitimate Certification Authority, and 2 allows...

AIX 610005 : U841417

The remote host is missing AIX PTF U841417 which is related to the security of the package bos.64bit.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...

Linux Kernel “sound/oss/midi_synth.c”内存破坏漏洞

BUGTRAQ ID: 47007 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel “sound/oss/midisynth.c”在实现上存在内存破坏漏洞，本地攻击者可利用此漏洞造成内存破坏，在非x86架构上，可允许攻击者运行任意代码，造成拒绝服务。此漏洞亦可影响OSS子系统。 传递到midisynthloadpatch的偏移可以是任意的，如果大于标头值，会造成copyfromuserdst, src,...

AIX 6.1 TL 3 : bos.net.tcp.client (U839021)

The remote host is missing AIX PTF U839021, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U839021. The text itself is copyright C...

AIX 530011 : U840352

The remote host is missing AIX PTF U840352 which is related to the security of the package devices.pci.1410bd02.diag You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc...

TomatoCMS 2.0.6 任意文件上传和跨站脚本漏洞

BUGTRAQ ID: 40544 CVE ID: CVE-2010-1514,CVE-2010-1515 TomatoCMS是一款开源的内容管理系统。 在向TomatoCMS添加新文章时没有对所上传的文件执行重复的验证，拥有Add new article、Upload file to server和Browse uploaded files权限的用户可以向服务器上传并执行恶意文件。 TomatoCMS没有正确地过滤提交给index.php/admin/news/article/list页面的keyword和article-...

AIX 530009 : U832969

The remote host is missing AIX PTF U832969 which is related to the security of the package bos.net.tcp.server You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...