3823 matches found
Input validation
Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis NQA packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the...
CVE-2017-15324
Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis NQA packets. A remote attacker could exploit this vulnerability by sending malformed NQA packets to the target device. Successful exploitation could make the...
qualitycarsuk.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-455715 Description| Value ---|--- Affected Website:| qualitycarsuk.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...
Applying Lean to Information Risk Management
Lean Manufacturing brings significant benefits to industry, including cost reduction, quality improvement, reduced cycle time, and greater customer satisfaction See “The Machine that Changed the World”, Womak, J., Jones, D., and Roos, D., Free, Press, 1990 for the groundbreaking analysis of...
December 12, 2017—KB4056342 Update for Windows 10 Mobile (OS Build 15254.124)
December 12, 2017—KB4056342 Update for Windows 10 Mobile OS Build 15254.124 Improvements and Fixes This update includes quality improvements. No new operating system features are being introduced in this update. This build includes all the improvements from KB4053580. If you installed earlier...
Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2017-37724)
Huawei S12700 and others are intelligent routing switches from Huawei China. A denial of service vulnerability exists in multiple Huawei products due to the device failing to adequately validate Network Quality Analysis NQA messages. A remote attacker could exploit this vulnerability by sending...
The vulnerability of the microprogrammed software of the BINOM3 Universal Multifunctional Electric Power Quality Meter lies in the lack of authentication, which allows attackers to gain access to the device’s settings.
The vulnerability of the microprogrammed software of the BINOM3 Universal Multifunctional Electric Power Quality Meter is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the device and perform arbitrary settin...
qualitycarsuk.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-449379 Description| Value ---|--- Affected Website:| qualitycarsuk.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...
[SECURITY] Fedora 26 Update: mupdf-1.11-9.fc26
MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...
[SECURITY] Fedora 27 Update: mupdf-1.11-9.fc27
MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...
Xiaofeng Air Ching App for Android suffers from arbitrary account password reset vulnerability
Xiaofeng Air Dorje APP is the APP developed by Shenzhen Xiaofeng Technology Co., Ltd. to work with Xiaofeng Air Dorje system, mainly used to monitor the indoor air quality and Xiaofeng Air Dorje internal and external machine operation status, monitoring items including PM2.5, formaldehyde, oxygen...
November 14, 2017—KB4048954 (OS Build 15063.726 and 15063.728)
None None...
November 14, 2017—KB4048961 (Security-only update)
None None...
November 14, 2017—KB4048960 (Security-only update)
None None...
November 2017 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB 4049016)
November 2017 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 updates for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB 4049016 View products that this article applies to. Summary This article lists the Quality Rollup for the .NET Framework 3.5.1,...
qualitycarsuk.co.uk XSS vulnerability
Vulnerable URL: http://www.qualitycarsuk.co.uk/searchpage.php?make==any+model=%27%22%3e%3csvg/onload=confirm/openbugbounty/%3e Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16165723 VIP website status:| No...
Infogram: Non Critical Code Quality Bug / Self XSS on Map Editor
Hi Team, I've found non-critical XSS on map editor. It is not for bounty just for code quality. This is my url: https://infogram.com/app/edit/c024c717-31c2-4c31-8491-1cc9534e9adb When i added map on form then edit Country name and replace with "alert1;" it is executed. Attached screenshots...
October 2017 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 (KB 4043766)
October 2017 Security and Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 7 SP1 and Windows Server 2008 R2 SP1 KB 4043766 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 3.5.1, 4.5.2, 4.6, 4.6.1,...
October 2017 Security and Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 (KB 4043768)
October 2017 Security and Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008 SP2 KB 4043768 Notice This update has been released as part of the October 2017 Preview of Quality Rollup for .NET Framework 2.0 SP2, 4.5.2, and 4.6 updates for Windows Server 2008...