35967 matches found
CVE-2015-3965
CVE-2015-3965 affects Hospira Symbiq Infusion System (Version 3.13 and earlier). The vulnerability arises from Exposed Dangerous Method or Function (CWE-749) that, with remote access and elevated privileges, could cause unanticipated operations on the device. Affected component is the device’s so...
CVE-2015-6457
creationtimestamp| type| source ---|---|--- 2019-03-21 23:26:51+00:00| seen| https://t.me/cibsecurity/3286...
CVE-2015-6458
creationtimestamp| type| source ---|---|--- 2019-03-21 23:26:50+00:00| seen| https://t.me/cibsecurity/3285...
CVE-2015-6461
creationtimestamp| type| source ---|---|--- 2019-03-21 21:26:15+00:00| seen| https://t.me/cibsecurity/3282...
CVE-2015-6462
creationtimestamp| type| source ---|---|--- 2019-03-21 21:26:14+00:00| seen| https://t.me/cibsecurity/3281...
CVE-2015-6458
Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability...
CVE-2015-6462
Reflected Cross-Site Scripting nonpersistent allows an attacker to craft a specific URL, which contains Java script that will be executed on the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H,...
CVE-2015-6458
CVE-2015-6458 describes a heap/classic buffer overflow in Moxa SoftCMS 1.3 and earlier that may crash or allow remote code execution. Public documentation ties the issue to buffer overflow weaknesses in SoftCMS prior to version 1.4, which Moxa released on 2015-06-01 to address the vulnerability b...
CVE-2015-6457
CVE-2015-6457 relates to Moxa SoftCMS 1.3 and earlier, which are susceptible to a buffer overflow that could crash or allow remote code execution. Moxa released SoftCMS 1.4 on 2015-06-01 to address the vulnerability. Connected advisories (ZDI) describe multiple heap-based buffer overflow vulnerab...
CVE-2015-6462
CVE-2015-6462 describes a reflected Cross-Site Scripting (nonpersistent) vulnerability that can cause arbitrary JavaScript execution in the client browser of Schneider Electric Modicon PLCs when a crafted URL is visited. Affected devices include BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BM...
CVE-2015-6461
CVE-2015-6461 affects Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNOE0110H, BMXNOR0200H, BMXP342020, BMXP342020H, BMXP342030, BMXP3420302, BMXP3420302H, and BMXP342030H PLC web servers. The vulnerability is a Remote File Inclusion that allows an attacker to craft a URL causi...
Exploit for Link Following in Microsoft
Security Research for FUN All focused on Microsoft Windows OS...
CVE-2015-2254
Huawei OceanStor UDS devices running software prior to V100R002C01SPC102 are vulnerable to CVE-2015-2254. A remote attacker can intercept and alter patch-loading information, which may result in deletion of directory files and compromise of device functions when loading a patch. The issue is tied...
Amazon Linux 2 : libXcursor (ALAS-2019-1173)
XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or potentially code execution via a one-byte heap overflow.CVE-2015-9262 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
EulerOS Virtualization 2.5.2 : ghostscript (EulerOS-SA-2019-1088)
According to the version of the ghostscript package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Integer overflow in the gsheapallocbytes function in base/gsmalloc.c in Ghostscript 9.15 and earlier allows remote attackers to...
FreeBSD : rt -- XSS via jQuery (416ca0f4-3fe0-11e9-bbdd-6805ca0b3d42)
BestPractical reports : The version of jQuery used in RT 4.2 and 4.4 has a Cross-site Scripting XSS vulnerability when using cross-domain Ajax requests. This vulnerability is assigned CVE-2015-9251. RT does not use this jQuery feature so it is not directly vulnerable. jQuery version 1.12 no longe...
SUSE SLED12 / SLES12 Security Update : audit (SUSE-SU-2019:0563-1)
This update for audit fixes the following issues : Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...
SUSE-SU-2019:0563-1 Security update for audit
This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...
