Lucene search
+L

36 matches found

OSV
OSV
added 2020/11/16 4:15 a.m.5 views

CVE-2020-28656

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainmen...

6.8CVSS6.9AI score0.00348EPSS
SaveExploits1References1
NVD
NVD
added 2020/11/16 4:15 a.m.25 views

CVE-2020-28656

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainmen...

7.2CVSS7AI score0.00348EPSS
SaveExploits1References1
Prion
Prion
added 2020/11/16 4:15 a.m.18 views

Code injection

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainmen...

7.2CVSS7AI score0.00348EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2020/11/16 3:55 a.m.26 views

CVE-2020-28656

The update functionality of the Discover Media infotainment system in Volkswagen Polo 2019 vehicles allows physically proximate attackers to execute arbitrary code because some unsigned parts of a metainfo file are parsed, which can cause attacker-controlled files to be written to the infotainmen...

7AI score0.00348EPSS
SaveExploits1References1
CVE
CVE
added 2020/11/16 3:55 a.m.59 views

CVE-2020-28656

The CVE-2020-28656 entry concerns Volkswagen’s Discover Media infotainment system in Polo 2019 vehicles. The issue arises from parsing unsigned parts of a metainfo file, enabling attacker-controlled files to be written to the infotainment system and executed with root privileges when the attacker...

7.2CVSS7AI score0.00348EPSS
SaveExploits1References1Affected Software1
Openbugbounty
Openbugbounty
added 2020/10/24 9:02 a.m.8 views

marco-polo-peich.de Cross Site Scripting vulnerability OBB-1441877

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/10/21 8:38 a.m.24 views

marco-polo-peich.de Cross Site Scripting vulnerability OBB-1431579

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2020/06/11 9:09 a.m.11 views

polo-publicitaire.pro Cross Site Scripting vulnerability OBB-1192313

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

0.7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2018/10/21 12:04 p.m.13 views

polo-motorrad.de XSS vulnerability

Open Bug Bounty ID: OBB-688692 Description| Value ---|--- Affected Website:| polo-motorrad.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

0.1AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/11/23 1:24 p.m.10 views

polo-motorrad.de XSS vulnerability

Open Bug Bounty ID: OBB-429281 Description| Value ---|--- Affected Website:| polo-motorrad.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

6.4AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2017/01/31 8:44 a.m.8 views

polo-motorrad.de XSS vulnerability

Open Bug Bounty ID: OBB-210259 Description| Value ---|--- Affected Website:| polo-motorrad.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
hackapp
hackapp
added 2017/01/23 1:02 p.m.18 views

Marco Polo Video Walkie Talkie - BSD license, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Marco Polo Video Walkie Talkie published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:34 a.m.256 views

MARCO POLO Touren - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MARCO POLO Touren published at the 'play' market has multiple vulnerabilities...

0.5AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:33 a.m.15 views

MARCO POLO Guides - Exported components, External URLs, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application MARCO POLO Guides published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
added 2015/12/04 8:30 p.m.12 views

losangeleswaterpolo.com XSS vulnerability

Vulnerable URL: http://www.losangeleswaterpolo.com/regForm.php?email=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

6.3AI score
SaveExploits0
xssed
xssed
added 2009/05/03 12:00 a.m.28 views

Unfixed XSS vulnerability at www.polo-motorrad.de

Security researcher SkyOut, has submitted on 05/03/2009 a cross-site-scripting XSS vulnerability affecting www.polo-motorrad.de, which at the time of submission ranked 97971 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is...

0.1AI score
SaveExploits0References1
Rows per page
Query Builder