17430 matches found
CVE-2018-1000131
Pradeep Makone wordpress Support Plus Responsive Ticket System version 9.0.2 and earlier contains a SQL Injection vulnerability in the function to get tickets, the parameter email in cookie was injected that can result in filter the parameter. This attack appear to be exploitable via web site,...
Microsoft ASP.NET Core CVE-2018-0787 Remote Privilege Escalation Vulnerability
Description Microsoft ASP.NET Core is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft ASP.NET Core 2.0 Recommendations Block external access at the network boundary, unless external parties requi...
dssmove.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-578702 Description| Value ---|--- Affected Website:| dssmove.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
flower.flower080.net XSS vulnerability
Open Bug Bounty ID: OBB-578118 Description| Value ---|--- Affected Website:| flower.flower080.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
van-spares.co XSS vulnerability
Open Bug Bounty ID: OBB-577546 Description| Value ---|--- Affected Website:| van-spares.co Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Code injection
IBM Financial Transaction Manager FTM for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, Financial Transaction Manager FTM for Check Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp0013, and Financial Transaction Manager FTM for Corporate Payment Services CPS for...
rolimpexsa.pl XSS vulnerability
Open Bug Bounty ID: OBB-577093 Description| Value ---|--- Affected Website:| rolimpexsa.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
web.cpsusa.com XSS vulnerability
Open Bug Bounty ID: OBB-576947 Description| Value ---|--- Affected Website:| web.cpsusa.com Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until disclosure Disclosure Standard:| Coordinated Disclosure based on ISO 2914...
web.anglia.ac.uk XSS vulnerability
Open Bug Bounty ID: OBB-576224 Description| Value ---|--- Affected Website:| web.anglia.ac.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-0087
A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...
CVE-2018-0087
A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...
CVE-2018-0087
A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...
Cisco Web Security Appliance FTP Authentication Bypass Vulnerability
Designed to help organizations address the growing challenges of protecting and controlling network traffic, the Cisco Web Security Appliance WSA can be easier and faster to deploy, while reducing maintenance requirements, latency, and operational costs. An FTP authentication bypass vulnerability...
PT-2018-8597
Name of the Vulnerable Software and Affected Versions: Cisco Web Security Appliance WSA versions 10.5.1 Description: A vulnerability in the FTP server could allow an unauthenticated, remote attacker to log in without a valid password, provided they have a valid username. This is due to incorrect...
CVE-2018-0087: Improper Authentication
A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...
panachebridalusa.com XSS vulnerability
Open Bug Bounty ID: OBB-575682 Description| Value ---|--- Affected Website:| panachebridalusa.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2018-7733
An issue was discovered in YxtCMF 3.1. RbacController.class.php has CSRF, as demonstrated by modifying an administrator account via index.php/admin/user/addpost.html...
Magento Product Attributes Cross Site Scripting
DefenseCode Security Advisory Magento Stored Cross-Site Scripting a Product Attributes Advisory ID: DC-2018-03-004 Advisory Title: Magento Stored Cross-Site Scripting a Product Attributes Advisory URL: http://www.defensecode.com/advisories.php Software: Magento Version: Magento 2.0 prior to 2.0.1...
blaircandy.com XSS vulnerability
Open Bug Bounty ID: OBB-573074 Description| Value ---|--- Affected Website:| blaircandy.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...