novoidplus.com XSS vulnerability

Open Bug Bounty ID: OBB-591858 Description| Value ---|--- Affected Website:| novoidplus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

galaiosphoto.gr XSS vulnerability

Open Bug Bounty ID: OBB-583220 Description| Value ---|--- Affected Website:| galaiosphoto.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-7548

In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using $PA... on an empty array result...

Null pointer dereference

In subst.c in zsh through 5.4.2, there is a NULL pointer dereference when using $PA... on an empty array result...

fashionvalet.com XSS vulnerability

Open Bug Bounty ID: OBB-559681 Description| Value ---|--- Affected Website:| fashionvalet.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

handelsondernemingploem.nl XSS vulnerability

Open Bug Bounty ID: OBB-553259 Description| Value ---|--- Affected Website:| handelsondernemingploem.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors...

CVE-2018-0510

CVE-2018-0510 affects the epg search result viewer (kkcald). A buffer overflow exists in version 0.7.19 and earlier, allowing remote attackers to cause unintended operations or a denial of service. Connected sources jointly confirm this vulnerability and list the affected product as kkcald’s epg ...

CVE-2018-0509

CVE-2018-0509 is a CSRF vulnerability in the epg search result viewer (kkcald) affecting version 0.7.21 and earlier. The exposed issue allows an attacker to hijack the authentication of administrators via unspecified vectors. The related CNVD/JVN records corroborate this CSRF flaw and cite the af...

CVE-2018-0508

Cross-site scripting vulnerability in epg search result viewer kkcald 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors...

JVN#91393903: Multiple vulnerabilities in epg search result viewer(kkcald)

epg search result viewerkkcald provided by kkcal contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2018-0508 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/AU:N/C:N/I:P/A:N| Base Score:...

eunis.eea.europa.eu XSS vulnerability

Open Bug Bounty ID: OBB-548537 Description| Value ---|--- Affected Website:| eunis.eea.europa.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

woodman.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-547837 Description| Value ---|--- Affected Website:| woodman.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

chsfc.com.tw XSS vulnerability

Open Bug Bounty ID: OBB-546827 Description| Value ---|--- Affected Website:| chsfc.com.tw Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

valueisit.com XSS vulnerability

Open Bug Bounty ID: OBB-546434 Description| Value ---|--- Affected Website:| valueisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Dahua Technology IP Camera Predictable Password Algorithm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Dahua Technology IP Camera. Authentication is not required to exploit this vulnerability. The specific flaw exists within the disaster recovery password functionality. If the device uses its defaul...

analizmerkezi.com XSS vulnerability

Open Bug Bounty ID: OBB-477872 Description| Value ---|--- Affected Website:| analizmerkezi.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

WordPress wp-concours plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers. wp-concours plugin is used in one of the contests to create the plugin. A cross-site scripting vulnerability exist...

CVE-2017-17719

A cross-site scripting XSS vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the resultmessage parameter to includes/concourspage.php...

beleuchtungdirekt.ch XSS vulnerability

Open Bug Bounty ID: OBB-453843 Description| Value ---|--- Affected Website:| beleuchtungdirekt.ch Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...