93 matches found
cloud-init bug fix and enhancement update
An update is available for cloud-init. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cloud-init packages provide a set of init scripts for cloud instances...
overlandpark913locksmith.com Cross Site Scripting vulnerability OBB-2364053
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Cross-site Scripting (XSS)
microweber/microweber is vulnerable to cross-site scripting. The vulnerability existsdue to the lack of sanitization in 'notifformentry.php', allowing an attacker to inject script into web pages and its leads to XSS attack...
Liferay Portal and Liferay DXP have unspecified vulnerabilities (CNVD-2021-62968)
Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...
CVE-2021-32610
In ArchiveTar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193...
americassmartcity.info Cross Site Scripting vulnerability OBB-1477275
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
bombbets.net Cross Site Scripting vulnerability OBB-1325847
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
centralservice.se Cross Site Scripting vulnerability OBB-1269931
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
excellis.ch Cross Site Scripting vulnerability OBB-1267666
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
nbparts.hu Cross Site Scripting vulnerability OBB-1228948
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
luluchemicals.com Improper Access Control vulnerability OBB-1214942
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
escriba.com.br Cross Site Scripting vulnerability OBB-1211910
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
intermediazioniimmobiliari.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1169534 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
mensshoecentre.co.za Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1163095 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2020-0674) (Deprecated)
This plugin was a workaround for unpatched vulnerability CVE-2020-0674 which was patched in the Feb 2020 rollups. The plugin smbntms20febinternetexplorer.nasl plugin ID 133619 includes the check for the new patch for this vulnerability. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...
Unspecified vulnerability in piSignage
piSignage is an HD video digital signage player. A security vulnerability exists in the web application component of piSignage versions prior to 2.6.4. A remote attacker can exploit the vulnerability to download arbitrary files from a Raspberry Pi...
Code injection
Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via addqueryarg and removequeryarg...
eu.experteer.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-882071 Security Researcher Inetizen01K Helped patch 938 vulnerabilities Received 4 Coordinated Disclosure badges Received 4 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting eu.experteer.com website...
Adobe Acrobat and Reader Buffer Errors (APSB19-18: CVE-2019-7824)
A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...
CVE-2018-11293
In all android releases Android for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, in wmandpconfirmeventhandler and wmandpindicationeventhandler, ndpcfg len and numndpappinfo is from fw. If they are not checked, it may cause buffer over-read once the value is too large...