Softbank, NTT Docomo, KDDI Security Vulnerabilities

endeca.ohsu.edu XSS vulnerability

Open Bug Bounty ID: OBB-660219 Description| Value ---|--- Affected Website:| endeca.ohsu.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

canadianhotelsupply.com XSS vulnerability

Open Bug Bounty ID: OBB-650126 Description| Value ---|--- Affected Website:| canadianhotelsupply.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

ntt.goo.ne.jp XSS vulnerability

Open Bug Bounty ID: OBB-642275 Description| Value ---|--- Affected Website:| ntt.goo.ne.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

torontopubliclibrary.ca XSS vulnerability

Open Bug Bounty ID: OBB-641409 Description| Value ---|--- Affected Website:| torontopubliclibrary.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-0563

Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an...

archivestore.co.za XSS vulnerability

Open Bug Bounty ID: OBB-633005 Description| Value ---|--- Affected Website:| archivestore.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

Six years since World IPv6 Launch: entering the majority phases

As reported in an ISOC report last year, IPv6 adoption is now solidly in the "early majority phase" of the technology adoption life cycle by many metrics (well past "innovators" and "early adopters"), with progress beyond that in some areas. Akamai continues to see solid growth in IPv6, including.....

americanhotel.com XSS vulnerability

Open Bug Bounty ID: OBB-620072 Description| Value ---|--- Affected Website:| americanhotel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

bhphotovideo.com XSS vulnerability

Open Bug Bounty ID: OBB-618110 Description| Value ---|--- Affected Website:| bhphotovideo.com Open Bug Bounty Program:| View Open Bug Bounty Program Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

bowlsclub.org XSS vulnerability

Open Bug Bounty ID: OBB-613912 Description| Value ---|--- Affected Website:| bowlsclub.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

walgreens.com XSS vulnerability

Open Bug Bounty ID: OBB-605177 Description| Value ---|--- Affected Website:| walgreens.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

jpcycles.com XSS vulnerability

Open Bug Bounty ID: OBB-599824 Description| Value ---|--- Affected Website:| jpcycles.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

sportscene.co.za XSS vulnerability

Open Bug Bounty ID: OBB-595713 Description| Value ---|--- Affected Website:| sportscene.co.za Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

About the security content of Safari 11.1

About the security content of Safari 11.1 This document describes the security content of Safari 11.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available......

simonandschuster.com XSS vulnerability

Open Bug Bounty ID: OBB-581163 Description| Value ---|--- Affected Website:| simonandschuster.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

wow.lk XSS vulnerability

Open Bug Bounty ID: OBB-566880 Description| Value ---|--- Affected Website:| wow.lk Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on.....

ntt-east.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-564758 Description| Value ---|--- Affected Website:| ntt-east.co.jp Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure...

jpcycles.com XSS vulnerability

Open Bug Bounty ID: OBB-560751 Description| Value ---|--- Affected Website:| jpcycles.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure...

CVE-2018-0517

Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified...

JVN#70615027: The installer of Anshin net security for Windows may insecurely load Dynamic Link Libraries

Anshin net security for Windows provided by KDDI CORPORATION is an Internet Security suite. The installer of Anshin net security for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). ## Impact Arbitrary code may be executed...

CVE-2018-0507

Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified...

dorothyperkins.com XSS vulnerability

Open Bug Bounty ID: OBB-544215 Description| Value ---|--- Affected Website:| dorothyperkins.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

simonandschuster.com XSS vulnerability

Open Bug Bounty ID: OBB-512110 Description| Value ---|--- Affected Website:| simonandschuster.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

igi-global.com XSS vulnerability

Open Bug Bounty ID: OBB-501428 Description| Value ---|--- Affected Website:| igi-global.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]...

www4.dowcorning.com XSS vulnerability

Open Bug Bounty ID: OBB-467052 Description| Value ---|--- Affected Website:| www4.dowcorning.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

bibliovirtuelle.ca XSS vulnerability

Open Bug Bounty ID: OBB-457349 Description| Value ---|--- Affected Website:| bibliovirtuelle.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention...

virtualreferencelibrary.ca XSS vulnerability

Open Bug Bounty ID: OBB-457348 Description| Value ---|--- Affected Website:| virtualreferencelibrary.ca Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS...

RHEL 7 : heketi (RHSA-2017:3481)

An update for heketi is now available for Red Hat Gluster Storage 3.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is...

(RHSA-2017:3481) Important: heketi security update

Heketi provides a RESTful management interface which can be used to manage the life cycle of GlusterFS volumes. With Heketi, cloud services like OpenStack Manila, Kubernetes, and OpenShift can dynamically provision GlusterFS volumes with any of the supported durability types. Heketi will...

bradymiddleeast.com XSS vulnerability

Open Bug Bounty ID: OBB-452237 Description| Value ---|--- Affected Website:| bradymiddleeast.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention.....

brady.eu XSS vulnerability

Open Bug Bounty ID: OBB-452238 Description| Value ---|--- Affected Website:| brady.eu Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat...

fr.topman.com XSS vulnerability

Open Bug Bounty ID: OBB-452227 Description| Value ---|--- Affected Website:| fr.topman.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat.....

eu.topman.com XSS vulnerability

Open Bug Bounty ID: OBB-452228 Description| Value ---|--- Affected Website:| eu.topman.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat.....

th.topman.com XSS vulnerability

Open Bug Bounty ID: OBB-452225 Description| Value ---|--- Affected Website:| th.topman.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat.....

de.topman.com XSS vulnerability

Open Bug Bounty ID: OBB-452226 Description| Value ---|--- Affected Website:| de.topman.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat.....

my.topman.com XSS vulnerability

Open Bug Bounty ID: OBB-452224 Description| Value ---|--- Affected Website:| my.topman.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat.....

sg.topman.com XSS vulnerability

Open Bug Bounty ID: OBB-452223 Description| Value ---|--- Affected Website:| sg.topman.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat.....

CVE-2017-10874

PWR-Q200 does not use random values for source ports of DNS query packets, which allows remote attackers to conduct DNS cache poisoning...

kddi-hikari.com XSS vulnerability

Open Bug Bounty ID: OBB-444298 Description| Value ---|--- Affected Website:| kddi-hikari.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention...

simonandschuster.com XSS vulnerability

Open Bug Bounty ID: OBB-441394 Description| Value ---|--- Affected Website:| simonandschuster.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention....

victra.com XSS vulnerability

Vulnerable URL: https://www.victra.com/store/search/?Ntt=123%22%27--!%3E%3CScript%20/K/%3Econfirm(%27openbugbounty%27)//%3C/Script%20/K/%3E%3C!--# Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 877752 VIP...

WordPress TablePress plugin <=1.8 - Authenticated XML External Entity (XXE) vulnerability

Authenticated XML External Entity (XXE) vulnerability found by Yuji Tounai of NTT Communications Corporation in WordPress TablePress plugin (versions &lt;=1.8). Solution Update the WordPress TablePress plugin to the latest available version (at least version...

ashford.com XSS vulnerability

Open Bug Bounty ID: OBB-432026 Description| Value ---|--- Affected Website:| ashford.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat...

forgeworld.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-429797 Description| Value ---|--- Affected Website:| forgeworld.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention...

walgreens.com XSS vulnerability

Open Bug Bounty ID: OBB-429731 Description| Value ---|--- Affected Website:| walgreens.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1...

bhphotovideo.com XSS vulnerability

Open Bug Bounty ID: OBB-428831 Description| Value ---|--- Affected Website:| bhphotovideo.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention...

cellsignal.com XSS vulnerability

Open Bug Bounty ID: OBB-428810 Description| Value ---|--- Affected Website:| cellsignal.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat....

topman.com XSS vulnerability

Open Bug Bounty ID: OBB-423563 Description| Value ---|--- Affected Website:| topman.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat...

burton.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-423561 Description| Value ---|--- Affected Website:| burton.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention Cheat...

missselfridge.com XSS vulnerability

Open Bug Bounty ID: OBB-423560 Description| Value ---|--- Affected Website:| missselfridge.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS (Cross Site Scripting) / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Remediation Guide:| OWASP XSS Prevention...