ya39.su XSS vulnerability

Open Bug Bounty ID: OBB-74942 Description| Value ---|--- Affected Website:| ya39.su Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ya16.su XSS vulnerability

Open Bug Bounty ID: OBB-74941 Description| Value ---|--- Affected Website:| ya16.su Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ya24.su XSS vulnerability

Open Bug Bounty ID: OBB-74940 Description| Value ---|--- Affected Website:| ya24.su Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

t96.su XSS vulnerability

Vulnerable URL: http://t96.su/sitesearch?a=0term=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2015 Latest check for patch:| 12.08.2015 00:47 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

se96.su XSS vulnerability

Vulnerable URL: http://se96.su/sitesearch?a=0term=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 12.08.2015 Latest check for patch:| 12.08.2015 00:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

SUSE SLED12 Security Update : flash-player (SUSE-SU-2015:1255-1)

flash-player was updated to fix two security issues. These security issues were fixed : - CVE-2015-5123: Use-after-free vulnerability in the BitmapData class in the ActionScript 3 AS3 implementation in Adobe Flash Player allowed remote attackers to execute arbitrary code or cause a denial of...

kvadrat-m2.su XSS vulnerability

Vulnerable URL: http://kvadrat-m2.su/sitesearch?a=0term=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 04.08.2015 Latest check for patch:| 04.08.2015 18:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

gusballad14.su XSS vulnerability

Vulnerable URL: http://gusballad14.su/?a=0=%22%3E%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

ak74.su XSS vulnerability

Vulnerable URL: http://ak74.su/search.php?a=0=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E=%3Cscript%3Ealert%28%2FXSSPOSED%2F%29%3B%3C%2Fscript%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Public...

SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1137-1)

Adobe Flash Player was updated to 11.2.202.468, fixing a security issue, where attackers could have triggered a heap overflow and could have executed code. https://helpx.adobe.com/security/products/flash-player/apsb15-1 4.html Note that Tenable Network Security has extracted the preceding...

SUSE SLED12 / SLES12 Security Update : autofs (SUSE-SU-2015:1020-1)

autofs was updated to fix one security issue. This security issue was fixed : - CVE-2014-8169: Prevent potential privilege escalation via interpreter load path for program-based automount maps bnc917977. The update package also includes non-security fixes. See advisory for details. Note that...

SUSE SLES12 Security Update : apache2 (SUSE-SU-2015:0974-1)

Apache2 updated to fix four security issues and one non-security bug. The following vulnerabilities have been fixed : - modheaders rules could be bypassed via chunked requests. Adds 'MergeTrailers' directive to restore legacy behavior. bsc871310, CVE-2013-5704 - An empty value in Content-Type cou...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2015:0960-1)

This update to Firefox 31.7.0 ESR bsc930622 fixes the following issues : - MFSA 2015-46/CVE-2015-2708/CVE-2015-2709 bmo1120655, bmo1143299, bmo1151139, bmo1152177, bmo1111251, bmo1117977, bmo1128064, bmo1135066, bmo1143194, bmo1146101, bmo1149526, bmo1153688, bmo1155474 Miscellaneous memory safet...

SUSE SLED12 / SLES12 Security Update : compat-openssl098 (SUSE-SU-2014:1512-1) (POODLE)

compat-openssl098 was updated to fix three security issues. NOTE: this update alone DOESN'T FIX the POODLE SSL protocol vulnerability. OpenSSL only adds downgrade detection support for client applications. See https://www.suse.com/support/kb/doc.php?id=7015773 for mitigations. These security issu...

SUSE SLED10 / SLES10 Security Update : Samba (SUSE-SU-2013:0325-1)

The Samba Web Administration Tool SWAT in Samba versions 3.0.x to 4.0.1 was affected by a cross-site request forgery CVE-2013-0214 and a click-jacking attack CVE-2013-0213. This has been fixed. Additionally a bug in mount.cifs has been fixed which could have lead to file disclosure CVE-2012-1586...

SUSE SLES11 Security Update : Mozilla Firefox (SUSE-SU-2015:0173-1)

Mozilla Firefox has been updated to the 31.4.0ESR release, fixing bugs and security issues. Mozilla NSS has been updated to 3.17.3, fixing a security issue and updating the root certificates list. For more information, please refer to https://www.mozilla.org/en-US/security/advisories/ . Note that...

SUSE SLES10 Security Update : Mozilla Firefox (SUSE-SU-2014:0727-1)

This Mozilla Firefox update provides several security and non-security fixes. Mozilla Firefox has been updated to 24.5.0esr, which fixes the following issues : - MFSA 2014-34/CVE-2014-1518 Miscellaneous memory safety hazards - MFSA 2014-37/CVE-2014-1523 Out of bounds read while decoding JPG image...

SUSE SLES11 Security Update : vsftpd (SUSE-SU-2015:0136-1)

The vsftp daemon was not handling the 'denyfile' option properly, allowing unauthorized access in some specific scenarios.bnc900326. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically...

SUSE SLED12 / SLES12 Security Update : vorbis-tools (SUSE-SU-2015:0367-1)

This update fixes the following security issue : - A crafted raw file used as input could cause a segmentation fault CVE-2014-9640, bsc914938 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE SLED10 / SLES10 Security Update : IBM Java 1.5.0 (SUSE-SU-2012:1489-1)

IBM Java 1.5.0 has been updated to SR15 which fixes bugs and security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ CVEs fixed: CVE-2012-3216, CVE-2012-3143, CVE-2012-5073, CVE-2012-5075, CVE-2012-5083, CVE-2012-5083, CVE-2012-1531, CVE-2012-5081,...