35960 matches found
CVE-2015-10095
The CVE-2015-10095 entry applies to the woo-popup WordPress plugin (versions up to 1.2.2) and involves an unknown part of the file admin/class-woo-popup-admin.php. The vulnerability enables cross-site scripting (XSS) and can be exploited remotely. The fixed version is 1.3.0, with the patch identi...
CVE-2015-10094
creationtimestamp| type| source ---|---|--- 2023-03-06 18:13:20+00:00| seen| https://t.me/cibsecurity/59488...
Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affected IBM Workflow for Bluemix October 2015
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8. that is used by IBM Workflow for Bluemix. These issues were disclosed as part of the IBM® SDK, Java™ Technology Edition updates in October 2015. Vulnerability Details CVEID: CVE-2015-4872 DESCRIPTION: An...
Security Bulletin: Vulnerabilities in OpenSSL affect Bluemix Workflow (CVE-2014-3570, CVE-2014-3571, CVE-2014-3572, CVE-2014-8275, CVE-2015-204, CVE-2015-205, CVE-2015-206)
Summary OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. This includes the vulnerability that has been referred to as “FREAK”. OpenSSL is used by Bluemix Workflow for internal communication. Bluemix Workflow has addressed the applicable CVEs. Vulnerability Details...
Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affected IBM Workflow for Bluemix January 2016 (CVE-2015-7575, CVE-2016-0466, CVE-2016-0475)
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8. that is used by IBM Workflow for Bluemix. These issues were disclosed as part of the IBM® SDK, Java™ Technology Edition updates in January 2016 and include the vulnerability commonly referred to as "SLOTH"...
CVE-2015-10094
The vulnerability CVE-2015-10094 affects the Fastly Plugin for WordPress (versions up to 0.97). The issue resides in function post of lib/api.php, where manipulation of the url argument enables cross-site scripting. Exploitation may be remote, and upgrading to version 0.98 addresses the issue (pa...
CVE-2015-10092
creationtimestamp| type| source ---|---|--- 2023-03-06 12:17:37+00:00| seen| https://t.me/cibsecurity/59460...
CVE-2015-10093
creationtimestamp| type| source ---|---|--- 2023-03-06 12:12:40+00:00| seen| https://t.me/cibsecurity/59457...
CVE-2015-10091
creationtimestamp| type| source ---|---|--- 2023-03-06 07:12:30+00:00| seen| https://t.me/cibsecurity/59448...
CVE-2015-10093
CVE-2015-10093 affects the WordPress plugin Mark User as Spammer (versions 1.0.0–1.0.1). The vulnerability exists in the user_row_actions function of plugin/plugin.php, where manipulation of the url parameter leads to cross-site scripting. The issue can be triggered remotely and is described with...
CVE-2015-10092
The CVE concerns the Qtranslate Slug Plugin for WordPress (up to version 1.1.16). The vulnerability affects the add_slug_meta_box function in includes/class-qtranslate-slug.php and can be triggered remotely to perform cross-site scripting. A fix is available in version 1.1.17, with patch 74b39326...
CVE-2015-10091
Affected product: ByWater Solutions bywater-koha-xslt. Vulnerable component: StringSearch function in admin/systempreferences.pl. Root cause: input of the name parameter enables SQL injection. Impact: remote attack possible; no specific versions are detailed in the sources. Known remediation: pat...
CVE-2015-10090
creationtimestamp| type| source ---|---|--- 2023-03-06 02:37:24+00:00| seen| https://t.me/cibsecurity/59443...
CVE-2015-10090
CVE-2015-10090 – Landing Pages Plugin (WordPress) is affected up to version 1.8.7. The vulnerability is described as a cross-site scripting flaw in unknown functionality that can be exploited remotely. The root cause and affected component are not explicitly detailed in the provided sources, but ...
CVE-2015-10089
creationtimestamp| type| source ---|---|--- 2023-03-05 17:54:12+00:00| seen| https://t.me/cibsecurity/59431...
CVE-2015-10089
CVE-2015-10089 affects flame.js, an Ember.js widget/UI library. The issue is a cross-site scripting vulnerability in an unspecified part of flame.js, which can be triggered remotely. Details on affected/unaffected releases are not provided due to lack of versioning information. A patch is availab...
CVE-2015-10088
creationtimestamp| type| source ---|---|--- 2023-03-05 07:41:33+00:00| seen| https://t.me/cibsecurity/59426...
CVE-2015-10088
CVE-2015-10088 affects ayttm up to 0.5.0.89, specifically the http_connect function in libproxy/proxy.c, where a format string vulnerability exists. The issue can be executed remotely and is described as high severity with complex exploitability. A patch is available (hash: 40e04680018614a7d2b685...
SUSE SLES12 Security Update : nrpe (SUSE-SU-2023:0586-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0586-1 advisory. - CVE-2015-4000: Fixed Logjam Attack by increasing the standard size of 512 bit dh parameters to 2048 bsc931600, bsc938906. Tenable has...