11 matches found
CVE-2025-15069
Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1...
CVE-2025-15069
creationtimestamp| type| source ---|---|--- 2025-12-29 05:43:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb44wanuhf2g 2026-01-07 22:11:11+00:00| seen| Telegram/ky7yxsW4k0aLAQgWWFYK7mNjKiNzVjJdYmbkJ8dMfyY...
Sophos XG Firewall <= 17.5.12 RCE
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x. Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x...
CVE-2020-15069
creationtimestamp| type| source ---|---|--- 2025-02-06 17:21:53+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113958093669259699 2025-02-06 17:49:28+00:00| seen| https://bsky.app/profile/aakl.bsky.social/post/3lhjnigysgc2b 2025-02-06 17:49:29+00:00| seen|...
VulnCheck KEV: CVE-2020-15069
Sophos XG Firewall contains a buffer overflow vulnerability that allows for remote code execution via the "HTTP/S bookmark" feature...
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls running v17.x...
CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 is affected by a buffer overflow in the HTTP/S Bookmarks feature for clientless access, enabling remote code execution. Root cause is a flaw in the Bookmarks handling; affected component is the HTTP/S Bookmarks feature. Remediation: apply hotfix HF062020...
CVE-2019-15069
CVE-2019-15069 affects Smart Battery A4 via an unsafe authentication interface in firmware versions up to r1.7.9. An attacker can bypass authentication and obtain web page management privileges without modifying device files. The CVE is corroborated by multiple sources in the connected set (NVD e...
