10 matches found
CVE-2026-15487
creationtimestamp| type| source ---|---|--- 2026-07-12 09:29:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqguhqrasq26 2026-07-12 11:22:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh2t46nc32e 2026-07-13 21:27:11+00:00| seen|...
CVE-2026-15487
A vulnerability was found in TRENDnet TEW-821DAP 1.11B03. This impacts the function sub41FBD0 of the file /goform/systemntp of the component Firmware Update Handler. Performing a manipulation of the argument Hostname results in os command injection. The attack may be initiated remotely. The vendo...
CVE-2025-15487 Code Explorer <= 1.4.6 - Authenticated (Administrator+) Arbitrary File Read via 'file' Parameter
The Code Explorer plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.6 via the 'file' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary files on the server, which...
CVE-2019-15487
DfE School Experience before v16333-GA has XSS via a teacher training URL...
Oracle Java SE Input Validation Error Vulnerability (CNVD-2022-15487)
Oracle Java SE is an Oracle Corporation USA product for developing and deploying Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to cause an unauthorized...
CVE-2020-15487
Re:Desk 2.3 contains a blind unauthenticated SQL injection in getBaseCriteria() (protected/models/Ticket.php). By altering the folder GET parameter in a crafted URL, arbitrary SQL can be executed, enabling unauthenticated remote command execution via a bizRule eval() in yii/framework/web/auth/CAu...
CVE-2019-15487
DfE School Experience before v16333-GA has XSS via a teacher training URL...
CVE-2019-15487
CVE-2019-15487 affects DfE School Experience prior to v16333-GA, with reflected cross-site scripting (XSS) via a teacher training URL. The connected documents confirm the vulnerability type (XSS) and the affected release (before v16333-GA) but do not provide additional technical specifics such as...
