10 matches found
CVE-2026-15156
creationtimestamp| type| source ---|---|--- 2026-07-21 05:53:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr54n2liks2q...
CVE-2025-15156
A flaw has been found in omec-project UPF up to 2.1.3-dev. This affects the function handleSessionEstablishmentRequest of the file /pfcpiface/pfcpiface/messagessession.go of the component PFCP Session Establishment Request Handler. This manipulation causes null pointer dereference. The attack may...
CVE-2025-15156
creationtimestamp| type| source ---|---|--- 2025-12-28 14:04:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115797566923940326 2025-12-29 00:42:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3m45mb3j2u...
CVE-2020-15156
In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...
Google Chrome Security Feature Issue Vulnerability (CNVD-2022-15156)
Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a security feature that could be exploited by attackers to bypass site quarantine via crafted HTML pages...
CVE-2017-15156
This CVE-2017-15156 entry is rejected and not used; it does not represent an active vulnerability.
CVE-2020-15156 XSS due to lack of CSRF validation for replying/publishing
In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...
CVE-2020-15156
CVE-2020-15156 affects nodebb-plugin-blog-comments prior to version 0.7.0. The root cause is lack of CSRF validation, enabling an authenticated user to be exploited for cross-site scripting that could cause a third party to post on their behalf on the forum. The issue is documented across multipl...
CVE-2018-15156
OpenEMR prior to 5.0.1.4 is affected by an OS command injection in interface/fax/faxq.php. An authenticated remote attacker can modify the hylafax_server global in interface/super/edit_globals.php and craft a request to execute arbitrary commands. Exploitation details are documented across multip...