929 matches found
CVE-2019-5815
Type confusion in xsltNumberFormatGetMultipleLevel prior to libxslt 1.1.33 could allow attackers to potentially exploit heap corruption via crafted XML data...
PT-2019-20128
Name of the Vulnerable Software and Affected Versions modoboa-dmarc plugin version 1.1.0 Description The issue allows for an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting...
PT-2019-15920
Name of the Vulnerable Software and Affected Versions Modoboa modoboa-dmarc plugin version 1.1.0 Description The issue allows for an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to perform a denial of service against the DMARC reporting...
foodbeverageasia.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1034977 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting foodbeverageasia.com...
dudy.fr Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1032727 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
cclwebinars.webvent.tv Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1030419 Security Researcher devl00p Helped patch 2974 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting cclwebinars.webvent.tv...
EulerOS 2.0 SP2 : libxml2 (EulerOS-SA-2019-2491)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the...
wonkyspanner.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1029023 Security Researcher geeknik Helped patch 8781 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting wonkyspanner.com website a...
signia-audifonos.es Cross Site Scripting vulnerability
Security Researcher metamorfosec Helped patch 1935 vulnerabilities Received 9 Coordinated Disclosure badges Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting signia-audifonos.es website and its users. Following...
stealthmonitoring.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting stealthmonitoring.com website and its users. Following...
pokemontrash.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1021960 Security Researcher ftLoic Helped patch 157 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting pokemontrash.com website and...
congresdutravail.ca Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1020959 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
idmedia.de Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1020355 Security Researcher PoisoNBlEedinG Helped patch 114 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting idmedia.de website and its users. Following...
sunsky-online.com Cross Site Scripting vulnerability OBB-1019318
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| sunsky-online.com ---|--- Open Bug Boun...
airesources.org Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1016963 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting airesources.org website a...
trapeza.ru Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1010695 Security Researcher g0bl1nsec Helped patch 3768 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting trapeza.ru website and it...
techhouse.brown.edu Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1009526 Security Researcher devl00p Helped patch 3000 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting techhouse.brown.edu...
CVE-2019-8158
An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data...
Design/Logic Flaw
An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data...
CVE-2019-8158: XML Injection (aka Blind XPath Injection)
An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data...