CVE-2015-9273

creationtimestamp| type| source ---|---|--- 2018-10-07 20:25:08+00:00| seen| https://t.me/cibsecurity/556...

openSUSE: Security Advisory for unzip (openSUSE-SU-2018:3043-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2015-9272

creationtimestamp| type| source ---|---|--- 2018-10-05 12:20:12+00:00| seen| https://t.me/cibsecurity/537...

CVE-2015-9272

CVE-2015-9272 affects the videowhisper-video-presentation plugin for WordPress (version 3.31.17). The flaw is in vp/vw_upload.php, which considers a file safe when the last four characters are "html", allowing a .phtml file containing PHP code to execute arbitrary code remotely. Reported impact i...

CVE-2015-9271

creationtimestamp| type| source ---|---|--- 2018-10-05 02:25:12+00:00| seen| https://t.me/cibsecurity/536...

CVE-2015-9271

The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vwupload.php considers a file safe when "html" are the last four characters, as demonstrated by a .phtml file containing PHP code, a different...

CVE-2015-9271

CVE-2015-9271 affects the VideoWhisper videowhisper-video-conference-integration plugin for WordPress, version 4.91.8. The root cause is in vc/vw_upload.php, which treats a file as safe if the last four characters are 'html', enabling remote code execution via uploaded files containing PHP in a ....

Adobe Acrobat DC Classic 2015 Security Updates (APSB18-30) - Windows

Adobe Acrobat DC Classic 2015 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SUSE SLED12 / SLES12 Security Update : unzip (SUSE-SU-2018:2978-1)

This update for unzip fixes the following security issues : CVE-2014-9913: Specially crafted zip files could trigger invalid memory writes possibly resulting in DoS or corruption bsc1013993 CVE-2015-7696: Specially crafted zip files with password protection could trigger a crash and lead to denia...

CVE-2015-9269

creationtimestamp| type| source ---|---|--- 2018-10-02 02:21:25+00:00| seen| https://t.me/cibsecurity/470...

CVE-2015-9270

creationtimestamp| type| source ---|---|--- 2018-10-02 02:21:24+00:00| seen| https://t.me/cibsecurity/469...

CVE-2015-9269

The CVE-2015-9269 entry concerns the WordPress wordpress-mobile-pack plugin (before 2.1.3). The vulnerability arises in the export/article feature, where content from a privately published post is sent in JSON via exportarticle, enabling remote attackers to obtain sensitive information. Impact is...

CVE-2015-9270

CVE-2015-9270 corresponds to a cross-site scripting (XSS) vulnerability in the WordPress plugin The Holiday Calendar prior to version 1.11.3, exploitable via the thc-month parameter. Multiple sources (NVD entry and CNVD/CVE mirror, WPVulndb) describe an XSS in this plugin and versions before 1.11...

Low: Red Hat Security Advisory: Red Hat JBoss Fuse/A-MQ 6.3 R9 security and bug fix update

An update is now available for Red Hat JBoss Fuse 6.3 and Red Hat JBoss A-MQ 6.3. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2015-9267

creationtimestamp| type| source ---|---|--- 2018-10-01 13:51:35+00:00| seen| https://t.me/cibsecurity/451...

CVE-2015-9268

creationtimestamp| type| source ---|---|--- 2018-10-01 13:51:33+00:00| seen| https://t.me/cibsecurity/450 2026-06-08 20:00:00+00:00| seen| https://jvn.jp/en/jp/JVN27656135...

DEBIAN-CVE-2015-9268

Nullsoft Scriptable Install System NSIS before 2.49 has unsafe implicit linking against Version.dll. In other words, there is no protection mechanism in which a wrapper function resolves the dependency at an appropriate time during runtime...

CVE-2015-9267

Nullsoft Scriptable Install System NSIS before 2.49 uses temporary folder locations that allow unprivileged local users to overwrite files. This allows a local attack in which either a plugin or the uninstaller can be replaced by a Trojan horse program...

CVE-2015-9268

CVE-2015-9268 affects Nullsoft Scriptable Install System (NSIS) prior to 2.49, which has unsafe implicit linking against Version.dll. The description in the CVE notes that there is no protection mechanism to resolve the dependency at runtime, indicating a potential for misuse during installation ...

CVE-2015-9267

CVE-2015-9267 affects NSIS (Nullsoft Scriptable Install System) before 2.49. The vulnerability arises from the use of temporary folder locations, enabling unprivileged local users to overwrite files, which can allow replacing either an installer plugin or the uninstaller with a trojan. In practic...