11 matches found
CVE-2026-15156
creationtimestamp| type| source ---|---|--- 2026-07-21 05:53:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr54n2liks2q...
CVE-2025-15156
A flaw has been found in omec-project UPF up to 2.1.3-dev. This affects the function handleSessionEstablishmentRequest of the file /pfcpiface/pfcpiface/messagessession.go of the component PFCP Session Establishment Request Handler. This manipulation causes null pointer dereference. The attack may...
CVE-2025-15156
creationtimestamp| type| source ---|---|--- 2025-12-28 14:04:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115797566923940326 2025-12-29 00:42:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb3m45mb3j2u...
CVE-2020-15156
In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...
MSC-2023-15156
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
Google Chrome Security Feature Issue Vulnerability (CNVD-2022-15156)
Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to a security feature that could be exploited by attackers to bypass site quarantine via crafted HTML pages...
CVE-2017-15156
This CVE-2017-15156 entry is rejected and not used; it does not represent an active vulnerability.
CVE-2020-15156 XSS due to lack of CSRF validation for replying/publishing
In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...
CVE-2020-15156
CVE-2020-15156 affects nodebb-plugin-blog-comments prior to version 0.7.0. The root cause is lack of CSRF validation, enabling an authenticated user to be exploited for cross-site scripting that could cause a third party to post on their behalf on the forum. The issue is documented across multipl...
CVE-2018-15156
OpenEMR prior to 5.0.1.4 is affected by an OS command injection in interface/fax/faxq.php. An authenticated remote attacker can modify the hylafax_server global in interface/super/edit_globals.php and craft a request to execute arbitrary commands. Exploitation details are documented across multip...