04_nodeblog (1.0.0), 0latency (0.0.0) +10645 more potentially affected by CVE-2015-8857 via uglify-js (>=2.2.0, <=2.4.23)

uglify-js NPM version =2.2.0, =0.3.0, =0.0.1, =1.0.1, =1.0.0, =0.0.1-alpha, =0.1.1, =0.2.8, =0.1.0, =0.3.2 and more Source cves: CVE-2015-8857 Source advisory: OSV:GHSA-34R7-Q49F-H37C...

CVE-2015-8858

creationtimestamp| type| source ---|---|--- 2017-10-24 18:33:36+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c9f4-xj24-8jqx...

04_nodeblog (1.0.0), 08cms (1.0.0) +12655 more potentially affected by CVE-2015-8858 via uglify-js (>=2.2.0, <=2.5.0)

uglify-js NPM version =2.2.0, =0.3.0, =0.0.1, =1.0.1, =1.0.0, =0.0.1-alpha, =0.1.1, =0.2.8, =1.5.3 and more Source cves: CVE-2015-8858 Source advisory: OSV:GHSA-C9F4-XJ24-8JQX...

37fis (>=1.0.0, <=1.0.2), @axerunners/p2pool-scanner (0.0.2) +715 more potentially affected by CVE-2015-8856 via serve-index (>=1.0.0, <=1.6.2)

serve-index NPM version =1.0.0, =1.0.0, =1.0.1, =1.0.37, =0.0.1, =0.13.7, =1.0.4, =1.0.1, =1.0.0, =0.2.0, =1.0.3, =1.0.4, =1.0.13 and more Source cves: CVE-2015-8856 Source advisory: OSV:GHSA-V633-X5VV-HQWC...

192.168.0.172 (4.6.1), 352-wascally (>=0.2.4, <=0.2.5) +5442 more potentially affected by CVE-2015-8315 via ms (>=0.1.0, <=0.7.0)

ms NPM version =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.0.1, =0.0.8, =1.8.0, =0.1.0, =1.0.0, =0.9.0, =1.4.0, =1.0.1, =3.1.2 - @asbjornenge/microbe 1.0.1 - @auser/metalsmith-watch 1.0.4 and more Source cves: CVE-2015-8315 Source advisory: OSV:GHSA-3FX5-FWVR-XRJG...

CVE-2015-5688

creationtimestamp| type| source ---|---|--- 2017-10-24 18:33:36+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-333x-9vgq-v2j4...

CVE-2015-5171

Ø CVE-2015-5171 affects Cloud Foundry components (cf-release &lt;216, UAA &lt;2.5.2, PCF Elastic Runtime

CVE-2015-5173

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry PCF Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors involving emails with password recovery links, aka "Cross Domain Referer Leakage."...

CVE-2015-5172

CVE-2015-5172 affects Cloud Foundry Runtime: cf-release prior to 216, UAA prior to 2.5.2, and PCF Elastic Runtime prior to 1.7.0, due to failure to expire password reset links. Connected sources (GHSA/osv entries) corroborate the affected components and the weak password recovery mechanism, descr...

CVE-2015-5173

CVE-2015-5173 corresponds to a Cloud Foundry security issue described in connected advisories as a weak password recovery/expired reset mechanism affecting cf-release &lt;216, UAA &lt;2.5.2, and PCF Elastic Runtime

CVE-2015-5170

CVE-2015-5170 affects Cloud Foundry components (cf-release before 216, UAA before 2.5.2, PCF Elastic Runtime before 1.7.0) and enables remote CSRF attacks on PWS by exploiting missing CSRF checks, potentially allowing an attacker to log a user into an arbitrary account. The connected records corr...

CVE-2015-5170

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry PCF Elastic Runtime before 1.7.0 allow remote attackers to conduct cross-site request forgery CSRF attacks on PWS and log a user into an arbitrary account by leveraging lack of CSRF checks...

AIX bind Advisory : nettcp_advisory2.asc (IV86116) (IV86117) (IV86118) (IV86119) (IV86120) (IV86132)

The version of bind installed on the remote AIX host is affected by the following vulnerabilities : - The TLS protocol allows weaker than expected security caused by a collision attack when using the MD5 hash function for signing a ServerKeyExchange message during a TLS handshake. An attacker can...

CVE-2015-5379

Vulnerability (CVE-2015-5379) : AXIGEN Mail Server’s Ajax WebMail interface (actions.hsp) before version 9.0 is vulnerable to cross-site scripting via crafted HTML attachments viewed in the WebMail “View attachment” function. Root cause: attachments in the Ajax WebMail view execute script/HTML, e...

CVE-2015-5533

CVE-2015-5533 affects the WordPress Count Per Day plugin (before 3.4.1). The flaw is an SQL injection in counter-options.php exposed via the cpd_keep_month parameter to wp-admin/options-general.php. It requires at least authenticated administrator privileges, and CSRF may enable remote attackers ...

CVE-2015-5532

CVE-2015-5532 affects the Paid Memberships Pro WordPress plugin. The issue is multiple cross-site scripting (XSS) vulnerabilities in PMPro prior to version 1.8.4.3, exploitable via GET parameters in the WordPress admin pages: s or edit parameters to admin.php (pmpro-membershiplevels, pmpro-member...

CVE-2015-5699

The Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label...

CVE-2015-5177

Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpdknownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service crash via a crafted package...

CVE-2015-5699

The Switch Configuration Tools Backend clcmdserver in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label...

CVE-2015-5177

CVE-2015-5177 describes a double-free vulnerability in OpenSLP 1.2.1 where the SLPDProcessMessage() routine can be triggered by a crafted package, leading to remote denial of service (crash). Multiple sources corroborate a remote-exploitation vector via OpenSLP, with affected products including O...