CVE-2025-15420

creationtimestamp| type| source ---|---|--- 2026-01-02 18:53:14+00:00| seen| Telegram/jO9dryZvES5E-gtLxGYUB48gMevmZpZHBZ7ROvZGlwCxA 2026-01-02 18:53:43+00:00| published-proof-of-concept| Telegram/BdLqdiEzj97fYrKkipbjvYeWh-fsmElnstXUPYuo06Bp1ck 2026-01-02 21:55:06+00:00| published-proof-of-concept...

CVE-2025-15420

CVE-2025-15420 affects Yonyou KSOA 9.0. The vulnerability is in the file "/worksheet/agent_work_report.jsp" where manipulating the parameter ID leads to SQL injection. This can be exploited remotely, with the exploit publicly disclosed. Multiple sources (NVD, Red Hat, CVE lists) corroborate the i...

CVE-2020-15420

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-el7-0.9.8.891. Authentication is not required to exploit this vulnerability. The specific flaw exists within loaderajax.php. When parsing the line parameter, the process does not...

CVE-2019-15420

creationtimestamp| type| source ---|---|--- 2024-02-20 09:41:20+00:00| seen| https://t.me/ctinow/188256...

SUSE CVE-2017-15420

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Design/Logic Flaw

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.250, Parasolid V34.1 All versions V34.1.233, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out o...

CVE-2022-34465

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.250, Parasolid V34.1 All versions V34.1.233, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out o...

CVE-2020-15420

CVE-2020-15420 affects CentOS Web Panel (cwp-el7-0.9.8.891). The flaw is in loader_ajax.php when parsing the line parameter, which is used to execute a system call without proper validation. This leads to remote code execution with root privileges and requires no authentication. The issue is docu...

CVE-2019-15420

CVE-2019-15420 affects Blackview BV9000Pro-F (Android 7.1.1, build Blackview/BV9000Pro-F/BV9000Pro-F:7.1.1/N4F26M/1514363110:user/release-keys). A pre-installed app com.mediatek.factorymode (version 1) enables unauthorized wireless settings modification via a confused deputy attack, accessible to...

CVE-2018-15420

Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows are affected by CVE-2018-15420. The root cause is improper validation of ARF/WRF files, enabling an attacker to execute arbitrary code when a user opens a malicious ARF/WRF file delivered via link or email attachm...

CVE-2017-15420

Incorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2017-15420

CVE-2017-15420 describes a URL spoofing issue in Google Chrome/Chromium’s Omnibox caused by incorrect handling of back navigations on error pages, allowing a crafted HTML page to spoof the URL bar. Affected products/versions: Chrome prior to 63.0.3239.84 (per the CVE description). Remediation: up...

Security update for chromium (important)

This update for chromium to 64.0.3282.119 fixes several issues. These security issues were fixed: - CVE-2018-6031: Use after free in PDFium boo1077571 - CVE-2018-6032: Same origin bypass in Shared Worker boo1077571 - CVE-2018-6033: Race when opening downloaded files boo1077571 - CVE-2018-6034:...

Google Chrome < 64.0.3282.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 64.0.3282.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 201801stable-channel-update-for-desktop24 advisory. - Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a...

Google Chrome < 64.0.3282.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 64.0.3282.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 201801stable-channel-update-for-desktop24 advisory. - Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a...

openSUSE: Security Advisory for chromium (openSUSE-SU-2018:0259-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 64 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 64.0.3282.119 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcomin...

Fedora 27 : chromium (2017-c2645aa935)

Security fix for CVE-2017-15412 CVE-2017-15422 CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15423 CVE-2017-15424 CVE-2017-15425 CVE-2017-15426...

Fedora 26 : chromium (2017-ea44f172e3)

Security fix for CVE-2017-15412 CVE-2017-15422 CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2017-15423 CVE-2017-15424 CVE-2017-15425 CVE-2017-15426...

Google Chrome < 63.0.3239.84 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 63.0.3239.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 201712stable-channel-update-for-desktop advisory. - Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84...