14 matches found
CVE-2026-15488
creationtimestamp| type| source ---|---|--- 2026-07-12 09:29:40+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqguiimld32z 2026-07-12 11:37:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqh3nxhwag2t...
CVE-2025-15488
creationtimestamp| type| source ---|---|--- 2026-03-26 09:05:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhxar3brtl23...
CVE-2025-15488
The Responsive Plus WordPress plugin before 3.4.3 is vulnerable to arbitrary shortcode execution due to the software allowing unauthenticated users to execute the updateresponsivewoofreeshippingleftshortcode AJAX action that does not properly validate the contentrechdata parameter before processi...
EUVD-2022-15488
Malicious code in bioql PyPI...
CVE-2020-15488
Re:Desk 2.3 allows insecure file upload...
CVE-2019-15488
Ignite Realtime Openfire before 4.4.1 has reflected XSS via an LDAP setup test...
Oracle Java SE Input Validation Error Vulnerability (CNVD-2022-15488)
Oracle Java SE is an Oracle Corporation USA product for developing and deploying Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to cause an unauthorized...
CVE-2020-15488
Re:Desk 2.3 allows insecure file upload...
CVE-2020-15488
Re:Desk 2.3 allows insecure file upload...
Sql injection
Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates method. A malicious actor with access to an administrative account could abuse this vulnerability to recover sensitive data from the application's database, allowing for...
CVE-2020-15488
CVE-2020-15488 affects Re:Desk 2.3 and is described as an insecure file upload vulnerability. Public records note this CVE with an NVD entry (NVD: CVE-2020-15488) and related references; associated scores indicate CVSS v2 base 5.0 (Medium) and CVSS v3.1 base 7.5 (High) with network access and low...
CVE-2019-15488
CVE-2019-15488 affects Ignite Realtime Openfire before 4.4.1, where the LDAP setup test endpoint processes input in a way that allows a reflected XSS payload. The issue is described as a reflected XSS via the LDAP setup test in multiple sources (Openfire, Red Hat advisory, OSV, etc.). No explicit...