14 matches found
GHSA-336H-Q7MH-8VF8 Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks
scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
rtv-vonarx.ch Cross Site Scripting vulnerability OBB-1309112
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
rtv-vonarx.ch Cross Site Scripting vulnerability OBB-1299416
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
rtv-vonarx.ch Cross Site Scripting vulnerability OBB-1289370
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2017-17516
scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
CVE-2017-17516
scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
Design/Logic Flaw
scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
CVE-2017-17516
scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
CVE-2017-17516
CVE-2017-17516 affects Reddit Terminal Viewer (RTV) 1.19.0. The vulnerability lies in scripts/inspect_webbrowser.py, which does not validate strings before launching the program specified by the BROWSER environment variable. This may allow remote attackers to perform argument-injection attacks vi...
CVE-2017-17516: Improper Neutralization of Special Elements in Output Used by a Downstream Component
scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...
rtvutrecht.nl XSS vulnerability
Vulnerable URL: http://www.rtvutrecht.nl/zoeken/?search='"--!confirmopenbugbounty...
rtv Fernsehprogramm - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application rtv Fernsehprogramm published at the 'play' market has multiple vulnerabilities...
PT-2011-3054
Name of the Vulnerable Software and Affected Versions Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers versions 6.x through 10.x NEC IP38X series routers versions 6.x through 10.x Description The issue is related to the improper handling of IP header options, which can be exploited by remote...
CVE-2011-1323: Improper Input Validation
Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service device reboot via a crafted option that triggers...