11 matches found
CVE-2025-15147
The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.11.8 via the 'WCFMvmMembershipsPaymentController::processing' due to missing validation on a user controlled key...
CVE-2025-15147
The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.11.8 via the 'WCFMvmMembershipsPaymentController::processing' due to missing validation on a user controlled key...
CVE-2019-15147
GoPro GPMF-parser 1.2.2 has an out-of-bounds read and SEGV in GPMFNext in GPMFparser.c...
CVE-2020-15147
Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...
CVE-2017-15147
CVE-2017-15147 is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-15147 Remote Code Execution in Red Discord Bot
Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to...
CVE-2020-15147
CVE-2020-15147 affects Red Discord Bot prior to versions 3.3.12 and 3.4, where the Streams module is vulnerable to remote code execution via crafted going-live messages. The underlying issue allows an attacker (Discord user) to inject code into the Streams going-live message, enabling destructive...
CVE-2019-15147
CVE-2019-15147 affects GoPro GPMF-parser 1.2.2. The connected records confirm a vulnerability in GPMF_Next in GPMF_parser.c causing an out-of-bounds read and a SEGV. No explicit exploit details, impact clarifications, or remediation are provided in the sources beyond the description. Other entrie...
CVE-2018-15147
OpenEMR
Fedora Update for mysql FEDORA-2010-15147
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...