CVE-2026-15562

creationtimestamp| type| source ---|---|--- 2026-08-11 10:01:04+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mssea6uvos2b...

CVE-2026-15562 Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...

CVE-2025-15562

The project tracking software NesterSoft WorkTime is vulnerable to Reflected Cross-Site Scripting (XSS) via the server API endpoint /report/internet/urls . The root cause is the improper encoding or filtering of received data when reflected into the HTML response. An attacker can exploit this by ...

CVE-2025-15562

The server API endpoint /report/internet/urls reflects received data into the HTML response without applying proper encoding or filtering. This allows an attacker to execute arbitrary JavaScript in the victim's browser if the victim opens a URL prepared by the attacker...

Photon OS 3.0: Kube PHSA-2023-3.0-0606

An update of the kube package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0606. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

openSUSE: Security Advisory for roundcubemail (openSUSE-SU-2020:1516-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4720-1] roundcube security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4720-1 [email protected] https://www.debian.org/security/ Sebastien Delafond July 08, 2020 https://www.debian.org/security/faq -...

DEBIAN-CVE-2020-15562

An issue was discovered in Roundcube Webmail before 1.2.11, 1.3.x before 1.3.14, and 1.4.x before 1.4.7. It allows XSS via a crafted HTML e-mail message, as demonstrated by a JavaScript payload in the xmlns aka XML namespace attribute of a HEAD element when an SVG element exists...

CVE-2020-15562

CVE-2020-15562 affects Roundcube Webmail and enables cross-site scripting (XSS) via a crafted HTML e-mail that uses the xmlns attribute of a HEAD element when an SVG is present. Affected releases include Roundcube Webmail < 1.2.11, 1.3.x < 1.3.14, and 1.4.x

CVE-2019-15562

GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragments is a vulnerability in the application, not in Gorm...

CVE-2019-15562

CVE-2019-15562 affects GORM (Go ORM) prior to 1.9.10, where SQL injection can occur via incomplete parentheses. Public sources consistently describe a vulnerability in how untrusted input is integrated into SQL fragments (the issue is in the application behavior, not GORM itself). In Red Hat, CNV...

CVE-2018-15562

CMS ISWEB 3.5.3 is affected by a Cross-Site Scripting (XSS) vulnerability in index.php, exploitable via the parameters ordineRis, sezioneRicerca, or oggettiRicerca. The issue allows injection of arbitrary scripts/HTML, enabling remote attackers to run client-side code. Documented exploitation was...

CMS ISWEB 3.5.3 Cross Site Scripting

CMS ISWEB 3.5.3 XSS Reflected CVE CVE-2018-15562 Parameter vuln: ordineRis, sezioneRicerca oggettiRicerca PoC Prints: https://i.imgur.com/5YpESoC.png Vendor of Product http://www.isweb.it Attack Type Remote Attack Vectors Payload:" URL:...

CVE-2017-15562

...

CVE-2017-15562

CVE-2017-15562 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

recruitmentresult.com XSS vulnerability

Vulnerable URL: http://recruitmentresult.com/search/%22%3E%3Csvg%20onload=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 24.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15562 VIP website status:| Yes...

vTiger CRM 4.2 RSS Aggregation Module - Feed Cross-Site Scripting

source: https://www.securityfocus.com/bid/15562/info vtiger CRM is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. vTiger CRM is prone to multiple SQL injection, HTML injection, cross-site scripting...