35968 matches found
DEBIAN-CVE-2015-9252
An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...
CVE-2015-9252
An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...
CVE-2015-9252
CVE-2015-9252 concerns QPDF before 7.0.0. The issue is an endless recursion in QPDFTokenizer::resolveLiteral() related to the QPDF::resolve function in QPDF.cc, causing stack exhaustion (denial of service). Affected component is the QPDF library used by various packages; no patch/version fix deta...
CVE-2015-9252
An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLiteral in QPDFTokenizer.cc, related to the QPDF::resolve function in QPDF.cc...
Flash ActiveX 18.0.0.194 - Code Execution
Flash ActiveX 18.0.0.194 - Code Execution CVE-2015-5112 Pop up a calculator - Requires Flash ActiveX 18.0.0.194 Download: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/44742.swf...
Flash ActiveX 18.0.0.194 - Code Execution
CVE-2015-5112 Pop up a calculator - Requires Flash ActiveX 18.0.0.194 Download: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/44742.swf...
Oracle WebCenter Portal Multiple Vulnerabilities (January 2018 CPU)
Binary data oraclewebcenterportalcpujan2018.nbin...
CVE-2015-1862
CVE-2015-1862 describes a local privilege-escalation in ABRT’s crash reporting. The vulnerability arises when ABRT’s crash-handler code performs an execve after a chroot into a user-specified directory within a named-space; a race condition/symlink handling flaw can allow a local user to influenc...
CVE-2015-2329
CVE-2015-2329 affects the WordPress WooCommerce plugin prior to version 2.3.6. The vulnerability is a cross-site scripting (XSS) flaw that allows a remote attacker to inject arbitrary script or HTML via a crafted order. Affected software is the WooCommerce plugin for WordPress; root cause involve...
CVE-2015-2329
Cross-site scripting XSS vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted order...
CVE-2015-3619
Cross-site scripting XSS vulnerability in assets/js/vm2admin.js in the VirtueMart component before 3.0.8 for Joomla! allows remote attackers to inject arbitrary web script or HTML via vectors involving a "double encode combination of firstname, lastname and company."...
CVE-2015-3619
Vulnerability (CVE-2015-3619) : Affected software is the VirtueMart component for Joomla! prior to 3.0.8. The issue lies in assets/js/vm2admin.js, where a cross-site scripting (XSS) vulnerability can be triggered by a double-encode sequence involving first_name, last_name, and company. Public sou...
CVE-2015-4400
CVE-2015-4400 affects Ring (formerly DoorBot) video doorbells. The issue arises from the GainSpan Wi‑Fi module: by pressing the Setup button and using the module’s API, a remote attacker can obtain wireless network configuration information. Documented in NVD/CNVD records, the vulnerability expos...
CVE-2015-3618
Nagios Business Process Intelligence (BPI) is affected by a Cross-site scripting (XSS) vulnerability in which an attacker can inject arbitrary web script or HTML via index.php. The issue affects BPI releases prior to 2.3.4. Root cause is an XSS flaw in the web interface, leading to potential impa...
eFront CMS 3.6.15.4 Multiple Vulnerabilities
eFront CMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Info: There is an EOL detection for this produ...
Debian: Security Advisory (DLA-1142-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-1416
Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file...
CVE-2015-1416
Larry Wall's patch; patch in FreeBSD 10.2-RC1 before 10.2-RC1-p1, 10.2 before 10.2-BETA2-p2, and 10.1 before 10.1-RELEASE-p16; Bitrig; GNU patch before 2.2.5; and possibly other patch variants allow remote attackers to execute arbitrary shell commands via a crafted patch file...
CVE-2015-4412
BSON injection vulnerability in the legal? function in BSON bson-ruby gem before 3.0.4 for Ruby allows remote attackers to cause a denial of service resource consumption or inject arbitrary data via a crafted string...