Browse / Vimeo

Vimeo

See its reports on the map

What gets reported to Vimeo

• Cross-site Scripting17
• Access Control15
• Authentication10
• Misconfiguration8
• Information Disclosure7
• Cross-Site Request Forgery7

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Misconfigured crossdomain.xml - vimeo.comInformativeCryptographic Issues - Generic
   5 votes
2. CSRF bypassInformativeCross-Site Request Forgery (CSRF)
   4 votes
3. Brute force on "vimeo" cookieInformativeImproper Authentication - Generic
   3 votes
4. Full account takeover via Add a New Email to account without email verified and without password confirmation.InformativeViolation of Secure Design Principles
   3 votes
5. Bypassing Email verification InformativeImproper Access Control - Generic
   2 votes
6. USER PRIVACY VIOLATED (PRIVATE DATA GETTING TRANSFER OVER INSECURE CHANNEL ) InformativeViolation of Secure Design Principles
   2 votes
7. May cause account take over (Via invitation page)InformativeViolation of Secure Design Principles
   1 votes