RHEL 9 : thunderbird (RHSA-2026:1415)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:1415 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Spoofing issue in the Downloads Panel component...

CVE-2026-1415

creationtimestamp| type| source ---|---|--- 2026-01-26 03:18:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdcbvaumbc2h...

EUVD-2025-16000

Malicious code in bioql PyPI...

CVE-2025-1415

A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM Mobile Device Management, as well as details of the devices like their UUIDs needed for exploitation of CVE-2025-1416. In order to perform the attack, one has to know a taskid, but since...

CVE-2019-1415

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

CVE-2025-1415

creationtimestamp| type| source ---|---|--- 2025-05-21 13:42:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17113...

CVE-2025-1415

A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM Mobile Device Management, as well as details of the devices like their UUIDs needed for exploitation of CVE-2025-1416. In order to perform the attack, one has to know a taskid, but since...

CVE-2025-1415 Information disclosure in Proget MDM

A low-privileged user is able to obtain information about tasks executed on devices controlled by Proget MDM Mobile Device Management, as well as details of the devices like their UUIDs needed for exploitation of CVE-2025-1416. In order to perform the attack, one has to know a taskid, but since...

CVE-2025-1415

In Proget MDM, the CVE-2025-1415 issue concerns a low-privileged user who can retrieve information about tasks run on managed devices and obtain device UUIDs needed for exploitation of CVE-2025-1416. The attack requires knowing a task_id, but brute-forcing is possible due to lack of request limit...

CVE-2024-1415 Responsive Contact Form Builder & Lead Generation Plugin <= 1.8.9 - Cross-Site Request Forgery

The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.9. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attacker...

CVE-2024-1415

CVE-2024-1415 affects the WordPress plugin Responsive Contact Form Builder & Lead Generation (lead-form-builder) up to version 1.8.9. Root cause: missing/incorrect nonce validation enables CSRF, allowing unauthenticated users to trigger actions (form deletion, lead signup, file upload) by trickin...

CVE-2010-1415

creationtimestamp| type| source ---|---|--- 2024-03-25 11:49:23+00:00| seen| https://t.me/ETHICALHACKERSCOMMUNITY2/3889 2024-03-25 14:38:09+00:00| seen| Telegram/HKj6TR4hMohrGsEUcNFDijNGdim3MCZhggfzha3EYtXw 2024-03-25 14:38:09+00:00| seen| https://t.me/tengkorakcybercrewz/4400 2024-03-25...

RHEL 8 : edk2 (RHSA-2024:1415)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1415 advisory. EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware f...

CVE-2019-1415

creationtimestamp| type| source ---|---|--- 2024-02-11 16:07:14+00:00| seen| https://t.me/ctinow/182829...

io.fabric8.examples:camel-drools-example (>=1.1.0.beta5, <=1.1.0.beta6), org.perfcake:perfcake (>=3.0, <=4.1) potentially affected by CVE-2022-1415 via org.drools:drools-core (6.1.0.beta3)

org.drools:drools-core MAVEN version 6.1.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - io.fabric8.examples:camel-drools-example =1.1.0.beta5, =3.0, =4.1 Source cves: CVE-2022-1415 Source advisory:...

com.ontology2:haruhi (2.4), org.hawkular.alerts:hawkular-alerts-ear (>=0.0.2, <=0.2.1.final) +2 more potentially affected by CVE-2022-1415 via org.drools:drools-core (6.1.0.final)

org.drools:drools-core MAVEN version 6.1.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - com.ontology2:haruhi 2.4 - org.hawkular.alerts:hawkular-alerts-ear =0.0.2, =0.0.2, =0.0.2, =0.5.0.final Sourc...

eu.fbk.rdfpro:rdfpro-dist (0.4.1), eu.fbk.rdfpro:rdfpro-rules (0.4.1) potentially affected by CVE-2022-1415 via org.drools:drools-core (6.3.0.beta2)

org.drools:drools-core MAVEN version 6.3.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - eu.fbk.rdfpro:rdfpro-dist 0.4.1 - eu.fbk.rdfpro:rdfpro-rules 0.4.1 Source cves: CVE-2022-1415 Source advisory...

org.drools.planner:drools-planner-core (5.2.0.cr1), org.drools.planner:drools-planner-distribution (5.2.0.cr1) +25 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.2.0.cr1)

org.drools:drools-core MAVEN version 5.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.drools.planner:drools-planner-core 5.2.0.cr1 - org.drools.planner:drools-planner-distribution 5.2.0.cr1 -...

com.bbossgroups.activiti:activiti-engine (>=5.12, <=5.13.16), de.lightful.maven.plugins:maven-drools-plugin (0.3.1) +33 more potentially affected by CVE-2022-1415 via org.drools:drools-core (5.3.0.final)

org.drools:drools-core MAVEN version 5.3.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - com.bbossgroups.activiti:activiti-engine =5.12, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.2.0 -...

org.switchyard.components:switchyard-component-bpm (>=0.7.0.final, <=0.8.0.final), org.switchyard.components:switchyard-component-common-knowledge (>=0.7.0.final, <=0.8.0.final) +2 more potentially affected by CVE-2022-1415 via org.drools:drools-core (6.0.0.alpha6)

org.drools:drools-core MAVEN version 6.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on org.drools:drools-core and may be impacted: - org.switchyard.components:switchyard-component-bpm =0.7.0.final, =0.7.0.final, =0.7.0.final, =0.7.0.final,...