CVE-2015-10046

CVE-2015-10046 involves the lolfeedback app and is classified as critical (CVSSv3.1: 9.8). The vulnerability arises from an input-handling flaw in an unknown functionality, allowing an attacker to perform a SQL injection . The affected software is identified as lolfeedback, with patching informat...

CVE-2015-10045

CVE-2015-10045 affects the tutrantta project_todolist, specifically the library/Database.php function getAffectedRows/where/insert/update. The issue is a SQL injection vulnerability reported as critical. A patch named 194a0411bbe11aa4813f13c66b9e8ea403539141 is recommended to fix the issue. Publi...

CVE-2015-10045 tutrantta project_todolist Database.php update sql injection

A vulnerability, which was classified as critical, was found in tutrantta projecttodolist. Affected is the function getAffectedRows/where/insert/update in the library library/Database.php. The manipulation leads to sql injection. The name of the patch is 194a0411bbe11aa4813f13c66b9e8ea403539141. ...

CVE-2015-10044

CVE-2015-10044 affects the open-source tool gophergala sqldump . The vulnerability is a SQL injection in unknown code paths, classified as critical with a CVSSv3.1 base score of 9.8 (Network attack, no authentication, user interaction not required; impact to confidentiality, integrity, and availa...

CVE-2015-10043

creationtimestamp| type| source ---|---|--- 2023-01-15 00:37:24+00:00| seen| https://t.me/cibsecurity/56511...

CVE-2015-10043

CVE-2015-10043 describes a path-traversal vulnerability in the abreen Apollo PHP scripts. The issue arises from manipulation of the file argument, affecting an unknown part of the codebase. A patch is available: 6206406630780bbd074aff34f4683fb764faba71, and applying it is recommended to fix the i...

CVE-2015-10042

creationtimestamp| type| source ---|---|--- 2023-01-14 00:36:41+00:00| seen| https://t.me/cibsecurity/56503...

CVE-2015-10042 Dovgalyuk AIBattle procedures.php registerUser sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is...

CVE-2015-10042 Dovgalyuk AIBattle procedures.php registerUser sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is...

CVE-2015-10042

CVE-2015-10042 affects Dovgalyuk AIBattle; SQL injection via the registerUser function in site/procedures.php when processing the postLogin argument. Patch identifier 448e9880aac18ae7832f8d065e03e46ce0f1d3e3 is referenced, with VDB-218305 assigned to this vulnerability. Note: the vulnerability no...

CVE-2015-10041 Dovgalyuk AIBattle procedures.php sendComments sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendComments of the file site/procedures.php. The manipulation of the argument text leads to sql injection. The name of the patch is...

CVE-2015-10041

The CVE-2015-10041 entry affects Dovgalyuk AIBattle, specifically the sendComments function in site/procedures.php. The vulnerability arises from manipulating the text argument, enabling SQL injection. A patch is identified by the name e3aa4d0900167641d41cbccf53909229f00381c9; PT-2023-10220 and o...

CVE-2015-10040

The CVE-2015-10040 entry concerns gitlearn. The vulnerability affects the Escape Sequence Handler’s getGrade/getOutOf function in scripts/config.sh, where manipulation can lead to injection. The issue is exploitable remotely, with patch 3faa5deaa509012069afe75cd03c21bda5050a64 cited as the fix. M...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to cross-site scripting in jQuery (CVE-2015-9251).

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to cross-site scripting in jQuery, caused by improper validation of user-supplied input. CVE-2015-9251. jQuery is used by the runtime components included in IBM Watson Speech. Please read the details for...

CVE-2015-2291

creationtimestamp| type| source ---|---|--- 2023-01-12 18:05:06+00:00| exploited| https://t.me/truesecator/3932 2023-02-10 11:10:31+00:00| seen| MISP/9170cfc5-2232-445c-bca8-923516dfdd3f 2023-02-13 12:15:03+00:00| exploited| https://t.me/itsecnews/2187 2023-06-14 21:10:03+00:00| seen|...

FreeBSD : cassandra3 -- jBCrypt integer overflow (b3fd12ea-917a-11ed-acbe-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b3fd12ea-917a-11ed-acbe-b42e991fc52e advisory. - Integer overflow in the cryptraw method in the key-stretching implementation in jBCrypt before 0.4...

SUSE SLES12: apache2-mod_php74 / php74 / php74-bcmath / php74-bz2 / etc (SUSE-SU-2023:0072-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0072-1 advisory. - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string bsc1206958. Tenable has extracted the preceding...

CVE-2015-10039

CVE-2015-10039 affects dobos domino, exploiting a vulnerability in the library file src/Complex.Domino.Lib/Lib/EntityFactory.cs that enables SQL injection. The issue is fixed by upgrading to version 0.1.5524.38553; the patch is identified as 16f039073709a21a76526110d773a6cce0ce753a. Patched versi...

CVE-2015-10038 nym3r0s pplv2 sql injection

A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named 28f8b0550104044da09f04659797487c59f85b00. It is recommended to apply a patch to fix this issue. The...

CVE-2015-10038

CVE-2015-10038 affects nym3r0s pplv2, with a SQL injection vulnerability arising from manipulation of an unknown functionality. The vulnerability is described as critical, and the patch 28f8b0550104044da09f04659797487c59f85b00 is recommended as the fix. Connected sources consistently identify the...