Lucene search
+L

14 matches found

osv_ghsa
osv_ghsa
•added 2022/05/14 4:01 a.m.•59 views

GHSA-336H-Q7MH-8VF8 Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks

scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

8.8CVSS8.4AI score0.0123EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2020/09/06 3:07 p.m.•16 views

rtv-vonarx.ch Cross Site Scripting vulnerability OBB-1309112

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/09/03 12:39 p.m.•17 views

rtv-vonarx.ch Cross Site Scripting vulnerability OBB-1299416

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SaveExploits0
Openbugbounty
Openbugbounty
•added 2020/08/31 10:29 a.m.•15 views

rtv-vonarx.ch Cross Site Scripting vulnerability OBB-1289370

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
SaveExploits0
NVD
NVD
•added 2017/12/14 4:29 p.m.•43 views

CVE-2017-17516

scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

8.8CVSS8.5AI score0.0123EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2017/12/14 4:29 p.m.•41 views

CVE-2017-17516

scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

8.8CVSS6.9AI score0.0123EPSS
SaveExploits0References1
Prion
Prion
•added 2017/12/14 4:29 p.m.•26 views

Design/Logic Flaw

scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

6.8CVSS8.4AI score0.0123EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2017/12/14 4:29 p.m.•27 views

CVE-2017-17516

scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

8.8CVSS7.2AI score0.0123EPSS
SaveExploits0References3
CVE
CVE
•added 2017/12/14 4:00 p.m.•90 views

CVE-2017-17516

CVE-2017-17516 affects Reddit Terminal Viewer (RTV) 1.19.0. The vulnerability lies in scripts/inspect_webbrowser.py, which does not validate strings before launching the program specified by the BROWSER environment variable. This may allow remote attackers to perform argument-injection attacks vi...

8.8CVSS7.8AI score0.0123EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/12/14 12:00 a.m.•5 views

CVE-2017-17516: Improper Neutralization of Special Elements in Output Used by a Downstream Component

scripts/inspectwebbrowser.py in Reddit Terminal Viewer RTV 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL...

8.8CVSS7.8AI score0.0123EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2017/03/03 4:54 p.m.•18 views

rtvutrecht.nl XSS vulnerability

Vulnerable URL: http://www.rtvutrecht.nl/zoeken/?search='"--!confirmopenbugbounty...

6.9AI score
SaveExploits0
hackapp
hackapp
•added 2016/04/01 8:59 a.m.•11 views

rtv Fernsehprogramm - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application rtv Fernsehprogramm published at the 'play' market has multiple vulnerabilities...

0.9AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2011/05/09 12:00 a.m.•13 views

PT-2011-3054

Name of the Vulnerable Software and Affected Versions Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers versions 6.x through 10.x NEC IP38X series routers versions 6.x through 10.x Description The issue is related to the improper handling of IP header options, which can be exploited by remote...

7.8CVSS0.01633EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/05/09 12:00 a.m.•13 views

CVE-2011-1323: Improper Input Validation

Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not properly handle IP header options, which allows remote attackers to cause a denial of service device reboot via a crafted option that triggers...

7.8CVSS5.8AI score0.01633EPSS
SaveExploits0References2
Rows per page
Query Builder