CVE-2019-0277

SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated developer with privileges to the SAP space XML External Entity vulnerability...

staralliance.com Cross Site Scripting vulnerability OBB-751432

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| staralliance.com ---|--- Open Bug Bount...

tgrthaber.com.tr Cross Site Scripting vulnerability OBB-731362

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

com.ahome-it:ahome-tooling-server-core (>=1.0.83-RC1 <=1.1.36-RELEASE), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.88-RC1 <=1.1.27-RELEASE) +684 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (>=1.0-m2 <=2.4.3.RELEASE)

org.springframework.ws:spring-xml MAVEN version =1.0-m2, =1.0.83-RC1, =1.0.88-RC1, =1.0.83-RC1, =1.1.0-RELEASE, =1.0.83-RC1, =1.0.83-RC1, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.1.7, =1.2.0.M5 - com.coherentlogic.cmr.api:cmr-api-core =2.0.2.1-RELEASE - com.coherentlogic.cmr.api:cmr-api-core-bo...

cloud.altemista.fwk.integration:cloud-altemistafwk-core-integration-ws-conf (>=3.0.0.RELEASE <=3.0.1.RELEASE), com.antheminc.oss:nimbus-starter (>=1.3.0 <=1.3.2.M1) +520 more potentially affected by CVE-2019-3773 via org.springframework.ws:spring-xml (>=3.0.0.RELEASE <=3.0.5.RELEASE)

org.springframework.ws:spring-xml MAVEN version =3.0.0.RELEASE, =3.0.0.RELEASE, =1.3.0, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.2.1, =2.3.3 - com.coherentlogic.cmr.api:cmr-api-core =2.0.3-RELEASE - com.coherentlogic.cmr.api:cmr-api-core-boot =2.0.3-RELEASE -...

DNN 9.1 XML Related Cross Site Scripting

Cross-site Scripting via XML Vulnerability in DNN 9.1 Information -------------------- Advisory by Netsparker Name: Cross-site Scripting via XML Vulnerability in DNN 9.1 Affected Software: DNN Affected Versions: 9.1 Homepage: http://dnnsoftware.com Vulnerability: Cross-site Scripting via XML...

CVE-2018-20592

In Mini-XML aka mxml v2.12, there is a use-after-free in the mxmlAdd function of the mxml-node.c file. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted xml file, as demonstrated by mxmldoc...

CVE-2018-20318

An issue was discovered in weixin-java-tools v3.2.0. There is an XXE vulnerability in the getXmlDoc method of the BaseWxPayResult.java file...

edwin.co.in XSS vulnerability

Open Bug Bounty ID: OBB-707745 Description| Value ---|--- Affected Website:| edwin.co.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dobsonacademy.org XSS vulnerability

Open Bug Bounty ID: OBB-705650 Description| Value ---|--- Affected Website:| dobsonacademy.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sau29.org XSS vulnerability

Open Bug Bounty ID: OBB-705592 Description| Value ---|--- Affected Website:| sau29.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wall.k12.nj.us XSS vulnerability

Open Bug Bounty ID: OBB-705526 Description| Value ---|--- Affected Website:| wall.k12.nj.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bloomfield.k12.nj.us XSS vulnerability

Open Bug Bounty ID: OBB-705372 Description| Value ---|--- Affected Website:| bloomfield.k12.nj.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

southsideowls.org XSS vulnerability

Open Bug Bounty ID: OBB-705356 Description| Value ---|--- Affected Website:| southsideowls.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

soarcharteracademy.org XSS vulnerability

Open Bug Bounty ID: OBB-705235 Description| Value ---|--- Affected Website:| soarcharteracademy.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

efpsb.k12.la.us XSS vulnerability

Open Bug Bounty ID: OBB-705223 Description| Value ---|--- Affected Website:| efpsb.k12.la.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

svncharter.org XSS vulnerability

Open Bug Bounty ID: OBB-705004 Description| Value ---|--- Affected Website:| svncharter.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

liverpool.spydus.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-704420 Description| Value ---|--- Affected Website:| liverpool.spydus.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

especiais.g1.globo.com XSS vulnerability

Open Bug Bounty ID: OBB-704232 Description| Value ---|--- Affected Website:| especiais.g1.globo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

thefreethoughtproject.com XSS vulnerability

Open Bug Bounty ID: OBB-703433 Description| Value ---|--- Affected Website:| thefreethoughtproject.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...