35837 matches found
CVE-2015-10047
A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of the file src/DBManager.java. The manipulation leads to sql injection. The patch is named 1cf7e01b878aee923f2b22cc2535c71a680e4c30. It is recommended to apply a patch to fix thi...
CVE-2015-10020
A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the file HeatMapServer/src/com/datformers/servlet/AddAppUser.java. The manipulation leads to sql injection. The name of the patch is...
CVE-2015-10040
A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/config.sh of the component Escape Sequence Handler. The manipulation leads to injection. The attack can be initiated remotely. The patch is...
CVE-2015-10050
A vulnerability was found in brandonfire miRNADatabasebyPHPMySql. It has been declared as critical. This vulnerability affects the function construct/selectsinglerna/countrna of the file inc/model.php. The manipulation leads to sql injection. The patch is identified as...
CVE-2015-10006
A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched...
CVE-2015-10021
A vulnerability was found in ritterim definely. It has been classified as problematic. Affected is an unknown function of the file src/database.js. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is...
CVE-2015-10001
The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads...
CVE-2015-0897
LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM man-in-the-middle attack since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...
CVE-2015-3173
custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-10089
A vulnerability classified as problematic has been found in flame.js. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases...
CVE-2015-2158 affecting package teckit for versions less than 2.5.12-4
CVE-2015-2158 affecting package teckit for versions less than 2.5.12-4. An upgraded version of the package is available that resolves this issue...
CVE-2015-8472 affecting package fltk for versions less than 1.3.8-1
CVE-2015-8472 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2015-8126 affecting package fltk for versions less than 1.3.8-1
CVE-2015-8126 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2015-9251 affecting package python-blinker for versions less than 1.7.0-4
CVE-2015-9251 affecting package python-blinker for versions less than 1.7.0-4. An upgraded version of the package is available that resolves this issue...
CVE-2015-2158 affecting package fltk for versions less than 1.3.8-1
CVE-2015-2158 affecting package fltk for versions less than 1.3.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2015-7575
creationtimestamp| type| source ---|---|--- 2025-05-14 23:15:09+00:00| seen| https://gist.github.com/0xi1y4an7/605ea54aa36cbd993d66a4e7d1674901 2025-12-16 12:21:21+00:00| seen| https://gist.github.com/jerinisready/f588121fb487feb7edbfe9ee2be11a0e...
CVE-2015-5386
creationtimestamp| type| source ---|---|--- 2025-05-14 23:15:09+00:00| seen| https://gist.github.com/0xi1y4an7/605ea54aa36cbd993d66a4e7d1674901...
Alibaba Cloud Linux 3 : 0170: python3 (ALINUX3-SA-2022:0170)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0170 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2015-20107: In Python aka CPython...