CVE-2015-9291

CVE-2015-9291 affects cPanel prior to 11.52.0.13, where the get_information_for_applications path could be abused to read arbitrary files. The root cause is that the system does not prevent such file reads, enabling exposure of potentially sensitive information via CPANEL-1221. The connected Red ...

DEBIAN-CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

CVE-2015-5297

creationtimestamp| type| source ---|---|--- 2019-08-01 02:32:21+00:00| seen| https://t.me/cibsecurity/5852 2019-08-07 18:35:08+00:00| seen| https://t.me/cibsecurity/5979...

CVE-2015-7559

It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection class. An attacker logged into a compromised broker could use this flaw to achieve denial of service on a connected client...

CVE-2015-7559

CVE-2015-7559: Apache ActiveMQ client before 5.14.5 exposes a remote shutdown command in ActiveMQConnection, enabling a remote authenticated attacker to cause denial of service on a connected client. Affected software is the Apache ActiveMQ client (pre-5.14.5). Remediation: upgrade to 5.14.5 or l...

CVE-2015-5297

An integer overflow issue has been reported in the generalcompositerect function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code...

CVE-2015-5297

An integer overflow issue has been reported in the generalcompositerect function in pixman prior to version 0.32.8. An attacker could exploit this issue to cause an application using pixman to crash or, potentially, execute arbitrary code...

CVE-2015-5297

CVE-2015-5297 concerns pixman: an integer overflow in the general_composite_rect() function affects pixman versions prior to 0.32.8. An attacker could cause a crash or possibly execute arbitrary code in applications using pixman. The documented remediation is to upgrade to version 0.32.8 or newer...

CVE-2015-9290

creationtimestamp| type| source ---|---|--- 2019-07-30 16:27:14+00:00| seen| https://t.me/cibsecurity/5804...

BELL-CVE-2015-9290 CVE-2015-9290 does not affect BellSoft software

Bulletin has no description...

CVE-2015-9290

CVE-2015-9290 affects FreeType up to 2.6.0 (before 2.6.1). A buffer over-read occurs in type1/t1parse.c: T1_Get_Private_Dict uses cur/limit values without validating them before jumping to Again, allowing out-of-bounds reads. Documented in multiple advisories (EulerOS/F5/OpenVAS) as a vulnerabili...

CVE-2015-5601

creationtimestamp| type| source ---|---|--- 2019-07-29 20:35:19+00:00| seen| https://t.me/cibsecurity/5779...

CVE-2015-6253

creationtimestamp| type| source ---|---|--- 2019-07-29 20:35:15+00:00| seen| https://t.me/cibsecurity/5778...

CVE-2015-9288

creationtimestamp| type| source ---|---|--- 2019-07-29 20:35:14+00:00| seen| https://t.me/cibsecurity/5776...

CVE-2015-6960

creationtimestamp| type| source ---|---|--- 2019-07-29 20:35:14+00:00| seen| https://t.me/cibsecurity/5777...

CVE-2015-6253

edx-platform before 2015-08-17 allows XSS in the Studio listing of courses...

CVE-2015-6960

edx-platform before 2015-09-17 allows XSS via a team name...

CVE-2015-5601

edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .tar.gz files...

Cross site scripting

edx-platform before 2015-09-17 allows XSS via a team name...

CVE-2015-5601

CVE-2015-5601 affects edx-platform prior to 2015-07-20. A vulnerable endpoint (course import) mishandles .tar.gz files, allowing code execution by privileged users. Documents provide CVSS details (2.0/6.5; 3.0/8.8) indicating impact on confidentiality, integrity, and availability (all high/partia...