Mageia: Security Advisory (MGASA-2015-0194)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0198)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:0135-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VulnCheck KEV: CVE-2015-7254

Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary files via a .. dot dot in an icon/ URI...

Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: February 8, 2022 (KB5011164)

None None...

SLICAN WebCTI Cross-Site Scripting Vulnerability

SLICAN WebCTI is a telephony application. A cross-site scripting vulnerability exists in SLICAN WebCTI version 1.01 2015, which can be exploited by an attacker to steal a user's session by injecting malicious JavaScript code, which can lead to session hijacking and result in theft of user...

Security Bulletin: Two security vulnerabilities have been identified in IBM HTTP Server shipped with IBM eDiscovery Manager (CVE-2015-1283, CVE-2015-3183)

Abstract Security Bulletin: Two security vulnerabilities have been identified in IBM HTTP Server shipped with IBM eDiscovery Manager CVE-2015-1283, CVE-2015-3183 Body IBM HTTP Server is shipped as a component of IBM eDiscovery Manager. Information about two security vulnerabilities that affect IB...

Security Bulletin: Vulnerabilities in OpenSSL affect multiple N series products

Summary OpenSSL vulnerabilities were disclosed on June 11, 2015 by the OpenSSL Project. OpenSSL is used by multiple N series products. Multiple N series products have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-1788 DESCRIPTION: OpenSSL is vulnerable to a denial of servic...

Security Bulletin: December 2015 OpenSSL Vulnerabilities in Multiple N series Products

Summary Multiple N series products incorporate the OpenSSL software libraries to provide cryptographic capabilities. OpenSSL versions below 1.0.2e, 1.0.1q, 1.0.0t, and 0.9.8zh are susceptible to vulnerabilities that could lead to a denial of service attack or information disclosure. Multiple N...

Security Bulletin: January 2015 OpenSSL security vulnerabilities in Multiple IBM N Series Products

Summary OpenSSL vulnerabilities were disclosed on January 8, 2015 by the OpenSSL Project. This includes “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL client and server vulnerability. OpenSSL is used by Multiple IBM N Series Products. Below IBM N Series Products have addressed the applicabl...

Security Bulletin: Vulnerabilities in OpenSSL including ClientHello DoS affect Multiple N series Products

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. This includes OpenSSL ClientHello sigalgs DoS CVE-2015-0291. OpenSSL is used by Multiple N series Products. Multiple N series Products have addressed the applicable CVEs. Vulnerability Details CVEID:...

[SECURITY] Fedora 35 Update: libmysofa-1.2.1-1.fc35

This is a simple set of C functions to read AES SOFA files, if they contain HRTFs stored according to the AES69-2015 standard...

@sobotics/caching (1.1.1) potentially affected by CVE-2015-9545 via xdlocalstorage (2.0.5)

xdlocalstorage NPM version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on xdlocalstorage and may be impacted: - @sobotics/caching 1.1.1 Source cves: CVE-2015-9545 Source advisory: OSV:GHSA-76QM-4F93-FG6F...

USN-5184-1: libmysofa vulnerability

It was discovered that libmysofa mishandled certain input. An attacker could use this vulnerability to cause a denial of service crash...

Security Bulletin: Fix available for Security Vulnerability in IBM WebSphere Portal (CVE-2015-5654)

Summary Security Bulletin: Fix available for Security Vulnerability in IBM WebSphere Portal CVE-2015-5654 Vulnerability Details CVEID: CVE-2015-5654 DESCRIPTION: Dojo Toolkit is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could explo...

CVE-2015-20105

creationtimestamp| type| source ---|---|--- 2021-12-02 20:37:01+00:00| seen| https://t.me/cibsecurity/33274...

CVE-2015-20106

creationtimestamp| type| source ---|---|--- 2021-12-02 20:37:00+00:00| seen| https://t.me/cibsecurity/33273...

CVE-2015-20106

The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2015-20106

CVE-2015-20106 affects the WordPress plugin "ClickBank Affiliate Ads" up to version 1.20. The vulnerability is a stored Cross-Site Scripting (XSS) in the plugin’s settings due to insufficient escaping/non-filtering, enabling high-privilege users to inject scripts even when unfiltered_html is disa...

CVE-2015-20105

The CVE-2015-20105 entry concerns the WordPress ClickBank Affiliate Ads plugin (versions up to 1.20). The vulnerability arises from a missing CSRF check when saving settings, enabling an authenticated attacker to modify settings via CSRF. Additionally, output escaping is insufficient, leading to ...