Lucene search
+L

12 matches found

Circl
Circl
added 2025/12/29 12:28 a.m.6 views

CVE-2025-15153

creationtimestamp| type| source ---|---|--- 2025-12-29 00:28:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3lck6w432o...

6.3CVSS5.8AI score0.00445EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-15153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaroun...

9.8CVSS8.4AI score0.02398EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2025/02/05 2:57 p.m.11 views

CVE-2020-15153

Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch...

9.8CVSS7.7AI score0.02398EPSS
SaveExploits1
OSV
OSV
added 2021/04/30 4:15 p.m.8 views

UBUNTU-CVE-2020-15153

Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch...

9.8CVSS5.9AI score0.02398EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/04/30 3:20 p.m.17 views

CVE-2020-15153 Unauthenticated SQL injection in Ampache

Ampache before version 4.2.2 allows unauthenticated users to perform SQL injection. Refer to the referenced GitHub Security Advisory for details and a workaround. This is fixed in version 4.2.2 and the development branch...

8.2CVSS9.9AI score0.02398EPSS
SaveExploits1References3
CVE
CVE
added 2021/04/30 3:20 p.m.60 views

CVE-2020-15153

Ampache (PHP-based media server) is affected by CVE-2020-15153: before version 4.2.2, unauthenticated users can perform SQL injection via the web interface. The root cause is an unsafely constructed SQL statement that allows injection, leading to potential exposure of data or modification of the ...

9.8CVSS9.4AI score0.02398EPSS
SaveExploits1References3Affected Software1
Circl
Circl
added 2020/11/06 3:1 a.m.6 views

CVE-2017-15153

creationtimestamp| type| source ---|---|--- 2020-11-06 03:01:24+00:00| seen| https://t.me/cibsecurity/15944...

4.8AI score
SaveExploits0References1
CVE
CVE
added 2020/11/05 10:28 p.m.28 views

CVE-2017-15153

This CVE entry is rejected/not used and does not represent an active vulnerability.

7.4AI score
SaveExploits0
Cvelist
Cvelist
added 2020/11/05 10:28 p.m.11 views

CVE-2017-15153

...

SaveExploits0
OSV
OSV
added 2018/08/15 5:29 p.m.17 views

CVE-2018-15153

OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemonframe.php after modifying the "hylafaxserver" global variable in interface/super/editglobals.php...

8.8CVSS7.9AI score
SaveExploits0References5
CVE
CVE
added 2018/08/15 5:0 p.m.165 views

CVE-2018-15153

OpenEMR is affected by an OS command-injection vulnerability in versions before 5.0.1.4. The issue arises when a remote authenticated attacker crafts a request to interface/main/daemon_frame.php after modifying the hylafax_server global variable in interface/super/edit_globals.php. The root cause...

8.8CVSS8.9AI score0.61555EPSS
SaveIn wildExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2018/08/15 12:0 a.m.246 views

CVE-2018-15153

OS command injection occurring in versions of OpenEMR before 5.0.1.4 allows a remote authenticated attacker to execute arbitrary commands by making a crafted request to interface/main/daemonframe.php after modifying the “hylafaxserver” global variable in interface/super/editglobals.php. Recent...

8.8CVSS9AI score0.61555EPSS
SaveIn wildExploits1References6
Rows per page
Query Builder