CVE-2015-10018 DBRisinajumi d2files D2filesController.php actionDownloadFile sql injection

A vulnerability has been found in DBRisinajumi d2files and classified as critical. Affected by this vulnerability is the function actionUpload/actionDownloadFile of the file controllers/D2filesController.php. The manipulation leads to sql injection. Upgrading to version 1.0.0 is able to address...

CVE-2015-10016

creationtimestamp| type| source ---|---|--- 2023-01-06 12:19:59+00:00| seen| https://t.me/cibsecurity/56038...

CVE-2015-10017 HPI-Information-Systems ProLOD sql injection

A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The manipulation of the argument this leads to sql injection. The name of the patch is 3f710905458d49c77530bd3cbcd8960457566b73. It is recommended to apply a patch...

CVE-2015-10017

CVE-2015-10017 affects HPI-Information-Systems ProLOD. An attacker can exploit SQL injection by manipulating the affected argument (this) in unknown code paths. The CVE is rated CRITICAL (CVSS v3.1: 9.8) with network attack vector, no privileges, no user interaction required, and impacts to confi...

CVE-2015-10016

CVE-2015-10016 affects jeff-kelley opensim-utils. The vulnerability is a SQL injection in the DatabaseForRegion function of regionscrits.php caused by directly manipulating the region argument. Impact is described as potentially high for confidentiality, integrity, and availability. A patch is id...

CVE-2015-10016 jeff-kelley opensim-utils regionscrits.php DatabaseForRegion sql injection

A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the file regionscrits.php. The manipulation of the argument region leads to sql injection. The patch is identified as...

CVE-2015-10015

creationtimestamp| type| source ---|---|--- 2023-01-05 18:22:16+00:00| seen| https://t.me/cibsecurity/55972...

CVE-2015-10014

creationtimestamp| type| source ---|---|--- 2023-01-05 16:18:55+00:00| seen| https://t.me/cibsecurity/55951...

Security Bulletin: jQuery included in ITNM is vulnerable to Cross-site Scripting (XSS) attacks (multiple vulnerabilities)

Summary Multiple vulnerabilities CVE-2015-9251; CVE-2019-11358; CVE-2020-11022; CVE-2020-11023 found in jQuery that is present in IBM Tivoli Network Manager ITNM IP Edition. jQuery versions before 3.0.0 are vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is perform...

CVE-2015-10015 glidernet ogn-live sql injection

A vulnerability, which was classified as critical, has been found in glidernet ogn-live. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named bc0f19965f760587645583b7624d66a260946e01. It is recommended to apply a patch to fix this issue. The...

CVE-2015-10014 arekk uke finder.rb sql injection

A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipulation leads to sql injection. The identifier of the patch is 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f. It is recommended to apply a patch to fix this issue. T...

CVE-2015-10014 arekk uke finder.rb sql injection

A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipulation leads to sql injection. The identifier of the patch is 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f. It is recommended to apply a patch to fix this issue. T...

CVE-2015-10014

CVE-2015-10014 affects arekk uke, specifically lib/uke/finder.rb, with a SQL injection vulnerability due to manipulation of that component. A patch is referenced: 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f, and VDB-217485 is associated. Connected sources confirm the issue and patch, but no exploits...

CVE-2015-10013

creationtimestamp| type| source ---|---|--- 2023-01-05 12:23:57+00:00| seen| Telegram/IDFCtBJHIuVdW1p5pn3qhyQ6tdAtx2Xuvw90RCkwMg4Htw0...

Security Bulletin: Multiple Vulnerabilities discovered in libraries used by TCRtoolkit in ITNM

Summary Multiple vulnerabilities CVE-2009-4521; CVE-2015-0250; CVE-2017-5662; CVE-2018-8013; CVE-2019-17566; CVE-2020-11987; CVE-2009-4269; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2021-41033 found in TCRtoolkit component present in IBM Tivoli Network Manager...

CVE-2015-10012

creationtimestamp| type| source ---|---|--- 2023-01-03 12:17:07+00:00| seen| https://t.me/cibsecurity/55797...

CVE-2015-10012 sumocoders FrameworkUserBundle login.html.twig information exposure

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to information exposure through...

CVE-2015-10010

creationtimestamp| type| source ---|---|--- 2023-01-03 00:29:48+00:00| seen| https://t.me/cibsecurity/55774...

CVE-2015-10011

creationtimestamp| type| source ---|---|--- 2023-01-03 00:17:02+00:00| seen| https://t.me/cibsecurity/55763...

CVE-2015-10011

CVE-2015-10011 affects OpenDNS OpenResolve, specifically the resolverapi/endpoints.py component. The root cause is improper output neutralization for logs, enabling high-severity impact per CVSSv3.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8). A patch is identified (9eba6ba5abd...