109 matches found
SUSE: Security Advisory (SUSE-SU-2017:1915-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-1915
creationtimestamp| type| source ---|---|--- 2020-10-26 23:29:15+00:00| seen| https://t.me/cibsecurity/15592...
CVE-2020-1915
An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this is only exploitable if the application...
CVE-2020-1915
An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this is only exploitable if the application...
CVE-2020-1915
An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this is only exploitable if the application...
CVE-2020-1915
CVE-2020-1915 targets Facebook Hermes’ JavaScript Interpreter. A crafted JavaScript input can trigger an out-of-bounds read prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0, enabling denial-of-service or possible memory corruption. Exploitation is only relevant if the app using Hermes eva...
CVE-2012-1915
CVE-2012-1915 affects EllisLab CodeIgniter up to version 2.1.1; CodeIgniter 2.1.2 fixes bypasses of the xss_clean() filter in system/core/Security.php, enabling XSS that could bypass input filtering. Documented bypass vectors include various HTML tag/attribute configurations that bypass the filte...
CVE-2019-1915
CVE-2019-1915 affects Cisco Unified Communications Manager (CUCM), including SME, IM&P, and Unity Connection web interfaces. The root cause is insufficient CSRF protections, allowing an unauthenticated, remote attacker to trick a user into visiting a malicious page and issue arbitrary requests on...
1915.rssing.com XSS vulnerability
On the 18.01.2018 security researcher reported a XSS vulnerability affecting the 1915.rssing.com website via the Open Bug Bounty coordinated vulnerability disclosure program. Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability submitted via Open Bug Bounty| 18 January, 2018...
CVE-2017-1915
CVE-2017-1915 is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-1915
Multiple cross-site scripting XSS vulnerabilities in BlackBerry Enterprise Server 12 BES12 Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to 1 mydevice/index.jsp or 2 mydevice/loggedOut.jsp...
CVE-2016-1915
The CVE-2016-1915 entry describes XSS vulnerabilities in BlackBerry BES12 Self-Service prior to 12.4. Affected component: the self-service web app; vulnerable via the locale parameter in mydevice/index.jsp and mydevice/loggedOut.jsp. Impact: remote injection of script/HTML. Root cause: cross-site...
IBM BigFix Remote Control 9.0.1, 9.1.0 Multiple Vulnerabilities
IBM Endpoint Manager for Remote Control is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...
BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities
Exploit for java platform in category web applications BlackBerry Enterprise Service 12 BES12 Self-Service Affected versions: BES12 12.4 CVE: CVE-2016-1914 and CVE-2016-1915 PDF:...
BlackBerry Enterprise Service 12 (BES12) Self-Service XSS / SQL Injection
, , . '.' '. ', . , '. , .', , / / / \ \ ==/ /\ \ / / \ / \ / / | \ \ Y Y \ / /| / \ /||| / / /.-. / /:wq x.0 '=.|w|.=' =''"''=. presents.. BlackBerry Enterprise Service 12 BES12 Self-Service Affected versions: BES12 12.4 CVE: CVE-2016-1914 and CVE-2016-1915 PDF:...
CVE-2015-1915
The CVE-2015-1915 issue affects IBM Tivoli Endpoint Manager for Lifecycle Management’s Endpoint Manager for Remote Control component. Specifically, 9.0.1 before IF6 and 9.1.0 before IF6 fail to set the secure flag on session cookies in HTTPS sessions, allowing an attacker to capture cookies by in...
Oracle Solaris Third-Party Patch Update : modsecurity (cve_2012_2751_improper_input)
The remote Solaris system is missing necessary patches to address security updates : - ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data...
openSUSE Security Update : apache2-mod_security2 (openSUSE-SU-2013:1331-1)
complete overhaul of this package, with update to 2.7.5. - ruleset update to 2.2.8-0-g0f07cbb. - new configuration framework private to modsecurity2: /etc/apache2/conf.d/modsecurity2.conf loads /usr/share/apache2-modsecurity2/rules/modsecuritycrs1 0setup.conf, then...
CVE-2014-1915
Multiple cross-site request forgery CSRF vulnerabilities in Command School Student Management System 1.06.01 allow remote attackers to hijack the authentication of 1 administrators for requests that change the administrator password via an update action to sw/adminchangepassword.php or 2...