35968 matches found
CVE-2015-9304
creationtimestamp| type| source ---|---|--- 2019-08-12 20:33:06+00:00| seen| https://t.me/cibsecurity/6066...
CVE-2015-9305
creationtimestamp| type| source ---|---|--- 2019-08-12 18:28:29+00:00| seen| https://t.me/cibsecurity/6062...
CVE-2015-9306
creationtimestamp| type| source ---|---|--- 2019-08-12 18:28:28+00:00| seen| https://t.me/cibsecurity/6061...
CVE-2015-9303
CVE-2015-9303 affects the WordPress plugin Simple Share Buttons Adder, specifically versions prior to 6.0.0. Multiple connected sources describe a cross-site scripting (XSS) vulnerability in this plugin, with evidence of a reflected XSS class in public disclosures. The root cause is insufficient ...
CVE-2015-9304
The CVE-2015-9304 affects the WordPress plugin Ultimate Member prior to version 1.3.18. It is described as a cross-site scripting (XSS) vulnerability that is triggered via text input, allowing an attacker to inject client-side script. The root cause is improper handling/validation of user-supplie...
CVE-2015-9306
The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS...
CVE-2015-9305
CVE-2015-9305 affects the WordPress plugin wp-google-map-plugin prior to version 2.3.7, with a Cross-Site Scripting (XSS) vulnerability involving the add_query_arg() and remove_query_arg() functions. Root cause is improper handling/validation of client-side data in the plugin, enabling injected s...
CVE-2015-9305
The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the addqueryarg and removequeryarg functions...
CVE-2015-9306
The CVE-2015-9306 entry concerns the WordPress plugin wp-ultimate-csv-importer; versions prior to 3.8.1 are affected by a Cross-Site Scripting (XSS) vulnerability. The issue arises from inadequate validation of client-side data. Impact is XSS execution within the context of the user’s browser; ex...
CVE-2015-9306
The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS...
NewStart CGSL MAIN 4.05 : libguestfs Vulnerability (NS-SA-2019-0110)
The remote NewStart CGSL host, running version MAIN 4.05, has libguestfs packages installed that are affected by a vulnerability: - An integer conversion flaw was found in the way OCaml's String handled its length. Certain operations on an excessively long String could trigger a buffer overflow o...
NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel-rt Multiple Vulnerabilities (NS-SA-2019-0028)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has kernel-rt packages installed that are affected by multiple vulnerabilities: - net/llc/sysctlnetllc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain...
NewStart CGSL MAIN 4.05 : kernel Multiple Vulnerabilities (NS-SA-2019-0152)
The remote NewStart CGSL host, running version MAIN 4.05, has kernel packages installed that are affected by multiple vulnerabilities: - It was found that AIO interface didn't use the proper rwverifyarea helper function with extended functionality, for example, mandatory locking on the file. Also...
NewStart CGSL CORE 5.04 / MAIN 5.04 : libXcursor Vulnerability (NS-SA-2019-0048)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libXcursor packages installed that are affected by a vulnerability: - XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a...
NewStart CGSL MAIN 4.05 : curl Vulnerability (NS-SA-2019-0104)
The remote NewStart CGSL host, running version MAIN 4.05, has curl packages installed that are affected by a vulnerability: - It was found that the fix for CVE-2015-3148 in curl was incomplete. An application using libcurl with HTTP Negotiate authentication could incorrectly re-use credentials fo...
CVE-2015-9292
creationtimestamp| type| source ---|---|--- 2019-08-09 00:43:14+00:00| seen| https://t.me/cibsecurity/6016 2019-08-15 18:33:12+00:00| seen| https://t.me/cibsecurity/6165...
CVE-2015-9292
6kbbs 7.1 and 8.0 allows CSRF via portalchannelajax.php id or code parameter or admin.php fileids parameter...
CVE-2015-9292
CVE-2015-9292 affects 6kbbs versions 7.1 and 8.0, where a CSRF vulnerability exists in the web interfaces. The flaw allows cross-site requests to be forged via portalchannel_ajax.php (parameters id or code) or admin.php (parameter fileids). The description does not specify affected platforms beyo...
SQLite fts3_tokenizer Untrusted Pointer Remote Code Execution (CVE-2019-8602; CVE-2015-7036)
A remote code execution vulnerability exists in SQlite fts3tokenizer. Successful exploitation could result in execution of arbitrary code on the affected system...