Archive
20 August 2018
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Medium 5.3
Paymorrow Improper Input Validation vulnerability
An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. To do so, the attacker mu…
-
Medium 5.4
Multiple IBM Rational products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…
-
Medium 5.9
A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflic…
-
Medium 5.4
Multiple IBM Rational products are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, wh…
-
Medium 6.1
Cobbler XSS Vulnerability
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting (XSS) vulnerability in cobbler-web that can result in Privilege esc…
-
Medium 6.1
OpenCart-Overclocked Cross-site Scripting Vulnerability
OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions and access to data, stealing session information, denial of …