Lucene search
K

27 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 10:19 a.m.2 views

CVE-2019-15873

The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pmtemplatepreview=...

8.8CVSS9.2AI score0.09583EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2017-15873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

5.5CVSS6.2AI score0.00675EPSS
Exploits1References2
OSV
OSV
added 2023/08/31 12:14 p.m.1 views

BELL-CVE-2017-15873 CVE-2017-15873 does not affect BellSoft software

Bulletin has no description...

5.5CVSS5.8AI score0.00675EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:37 a.m.1 views

SUSE CVE-2017-15873

The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

7.8CVSS7.6AI score0.00675EPSS
Exploits1References10
OpenVAS
OpenVAS
added 2022/11/29 12:0 a.m.37 views

SUSE: Security Advisory (SUSE-SU-2022:4253-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.16482EPSS
Exploits21References21
OpenVAS
OpenVAS
added 2022/02/01 12:0 a.m.40 views

openSUSE: Security Advisory for busybox (openSUSE-SU-2022:0135-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.4AI score0.16482EPSS
Exploits21References2
OpenVAS
OpenVAS
added 2022/01/21 12:0 a.m.46 views

SUSE: Security Advisory (SUSE-SU-2022:0135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.2AI score0.16482EPSS
Exploits21References17
Debian
Debian
added 2021/02/15 11:56 a.m.144 views

[SECURITY] [DLA 2559-1] busybox security update

Debian LTS Advisory DLA-2559-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany February 15, 2021 https://wiki.debian.org/LTS Package : busybox Version : 1:1.22.0-19+deb9u1 CVE ID : CVE-2011-5325 CVE-2015-9261 CVE-2016-2147 CVE-2016-2148 CVE-2017-15873 CVE-2017-165...

9.8CVSS7.3AI score0.16482EPSS
Exploits19
NVD
NVD
added 2020/07/21 5:15 p.m.8 views

CVE-2020-15873

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php deviceid POST parameter to ajaxform.php...

6.5CVSS6.8AI score0.01965EPSS
Exploits2References5
CVE
CVE
added 2020/07/21 4:3 p.m.41 views

CVE-2020-15873

LibreNMS before 1.65.1 is affected by a SQL injection vulnerability that can be triggered by an authenticated user via the customoid.inc.php device_id POST parameter to ajax_form.php. The root cause is insufficient validation of SQL statements, enabling an attacker to craft inputs that alter quer...

6.5CVSS6.8AI score0.01965EPSS
Exploits2References5Affected Software1
Cvelist
Cvelist
added 2020/07/21 4:3 p.m.13 views

CVE-2020-15873

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php deviceid POST parameter to ajaxform.php...

6.8AI score0.01965EPSS
Exploits2References5
NVD
NVD
added 2020/03/24 6:15 p.m.18 views

CVE-2020-10836

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos chipsets software. The Widevine Trustlet allows read and write operations on arbitrary memory locations. The Samsung ID is SVE-2019-15873 February 2020...

9.8CVSS9.5AI score0.00147EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/09/03 12:22 p.m.10 views

CVE-2019-15873

The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pmtemplatepreview&html=?php substring followed by PHP code...

9.2AI score0.09583EPSS
Exploits2References2
CVE
CVE
added 2019/09/03 12:22 p.m.66 views

CVE-2019-15873

The WordPress plugin profilegrid-user-profiles-groups-and-communities (Profiles Grid) is vulnerable before version 2.8.6. The issue is remote code execution via wp-admin/admin-ajax.php using action=pm_template_preview&html=

8.8CVSS9.1AI score0.09583EPSS
Exploits2References2Affected Software1
CVE
CVE
added 2018/08/28 7:0 p.m.49 views

CVE-2018-15873

CVE-2018-15873 describes a SQL Injection in Sentrifugo HRMS 3.2 exposed via the deptid parameter. Connected sources confirm a blind SQL injection in the POST endpoint /index.php/servicedeskconf/getemployees/format/html, enabling an attacker to read database information. Affected version is 3.2 (a...

9.8CVSS9.8AI score0.0025EPSS
Exploits5References1Affected Software1
Exploit DB
Exploit DB
added 2018/08/27 12:0 a.m.37 views

Sentrifugo HRMS 3.2 - 'deptid' SQL Injection

Exploit Title: Sentrifugo HRMS 3.2 - 'deptid' SQL Injection Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-08-26 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version:...

9.8CVSS9.7AI score0.0025EPSS
Exploits5
Packet Storm
Packet Storm
added 2018/08/27 12:0 a.m.33 views

Sentrifugo HRMS 3.2 SQL Injection

Exploit Title: Sentrifugo HRMS 3.2 - 'deptid' SQL Injection Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-08-26 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version: 3.2 and possibly before Patched Version:...

0.1AI score0.0025EPSS
Exploits5
exploitpack
exploitpack
added 2018/08/27 12:0 a.m.41 views

Sentrifugo HRMS 3.2 - deptid SQL Injection

Sentrifugo HRMS 3.2 - deptid SQL Injection Exploit Title: Sentrifugo HRMS 3.2 - 'deptid' SQL Injection Exploit Author: Javier Olmedo Website: https://hackpuntes.com Date: 2018-08-26 Google Dork: N/A Vendor: http://www.sapplica.com Software Link: http://www.sentrifugo.com/download Affected Version...

7.5CVSS0.0025EPSS
Exploits5
Tenable Nessus
Tenable Nessus
added 2018/03/27 12:0 a.m.52 views

GLSA-201803-12 : BusyBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201803-12 BusyBox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in BusyBox. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code...

8.8CVSS7AI score0.01212EPSS
Exploits14References4
RedhatCVE
RedhatCVE
added 2017/11/20 12:50 p.m.21 views

CVE-2017-15873

The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

5.5CVSS4.8AI score0.00675EPSS
Exploits1References1
Rows per page
Query Builder