CVE-2019-15748

SITOS six Build v6.2.1 permits unauthorised users to upload and import a SCORM 2004 package by browsing directly to affected pages. An unauthenticated attacker could use the upload and import functionality to import a malicious SCORM package that includes a PHP file, which could execute arbitrary...

Dell 2335dn printer Weak Password Requirements (CVE-2018-15748)

On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware Version V4.02.152335dn MFP 11-22-2010, the admin interface allows an authenticated attacker to retrieve the configured SMTP or LDAP password by viewing the HTML source code of t...

SUSE CVE-2017-15748

IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mode Write AV starting at CADIMAGE+0x000000000000613a."...

CVE-2020-15748

...

CVE-2020-15748

This CVE-2020-15748 entry is rejected/not used per initial description.

CVE-2019-15748

SITOS six Build v6.2.1 is affected by CVE-2019-15748: unauthenticated upload/import of a SCORM 2004 package can lead to execution of arbitrary PHP code via a malicious package. Affected component: SITOS six Build (v6.2.1). Root cause implied by reports is insecure handling of uploaded SCORM conte...

CVE-2018-15748

CVE-2018-15748 affects Dell 2335dn printers. The admin interface (Email Settings) may leak the SMTP/LDAP password to an authenticated attacker by viewing HTML source, with authentication possibly achievable via a blank default admin password. Affected versions include Printer Firmware 2.70.05.02,...

CVE-2017-15748

CVE-2017-15748 affects IrfanView 4.50 (64-bit) with CADImage plugin 12.0.0.5. A crafted .dwg file can trigger a vulnerability in CADImage (related to User Mode Write AV at CADIMAGE+0x613a) enabling arbitrary code execution or a denial of service. Exploitation is described as local (no authenticat...