35971 matches found
CVE-2015-5181
The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript...
CVE-2015-5666
CVE-2015-5666 affects the ANA App family: Android 3.1.1 and earlier, and iOS 3.3.6 and earlier. The root issue is that the apps do not verify SSL server certificates, enabling potential Man-in-the-Middle attacks and eavesdropping on encrypted traffic. Concrete details from the connected sources c...
CVE-2015-7544
CVE-2015-7544 affects the redhat-support-plugin-rhev component in Red Hat Enterprise Virtualization Manager (RHEV Manager). The root cause is that the log viewer passed a user-specified path/filename directly to the command line, enabling remote authenticated users with the SuperUser role on any ...
CVE-2015-8251
Technical details (affected products, root cause, versions, exploit info) are not publicly available in the provided connected documents. Monitor for updates.
CVE-2015-7846
Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information...
CVE-2015-7510
CVE-2015-7510 is a stack-based buffer overflow in the NSS module nss-mymachines of systemd, specifically in getpwnam and getgrnam. The vulnerability is described as enabling a crash/DoS under exploitation of the NSS functions. Public references show patches/update activity (e.g., systemd commit a...
CVE-2015-7785
GANMA! App for iOS (COMICSMART INC.) fails to verify SSL server certificates, enabling potential MITM. Affected versions: 2.0.9 and earlier. Impact: eavesdropping on encrypted communications. Remediation: update to the latest version per the JVN/NVD entries. If upgrading, verify the vendor guidan...
CVE-2015-8375
CVE-2015-8375 is a cross-site scripting (XSS) vulnerability affecting PHP-Fusion 9. OpenVAS describes PHPFusion
CVE-2015-7510
Stack-based buffer overflow in the getpwnam and getgrnam functions of the NSS module nss-mymachines in systemd...
CVE-2015-5181
The CVE-2015-5181 entry concerns Red Hat JBoss A-MQ/JBoss A-MQ Console. The issue is that the JBoss A-MQ console would accept a string containing JavaScript as the name of a new message queue, which leads to remote execution of JavaScript in the console UI. The vulnerability is described in Red H...
CVE-2015-5183
CVE-2015-5183 affects Red Hat AMQ/Hawtio console where cookies are missing HTTPOnly and Secure attributes. This exposes session cookies and could enable session-reuse or related unauthorized access in affected deployments. Public mentions and Red Hat advisories confirm the issue as a cookie secur...
CVE-2015-5263
The CVE-2015-5263 issue affects pulp-consumer-client versions 2.4.0 through 2.6.3. Concrete detail from connected CNVD entry: a design flaw where the client fails to detect the server’s TLS certificate signature when obtaining the server’s public key during registration. Reported impact states an...
CVE-2015-5704
CVE-2015-5704 affects the Debian devscripts package: the licensecheck component in scripts/licensecheck.pl allows local users to execute arbitrary shell commands due to insufficient input filtering. This is observed in multiple advisories (Debian, Fedora, OSV, NVD) and related trackers, with fixe...
CVE-2015-7293
The CVE concerns multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface (ZMI) 4.3.7 and earlier, and Plone before 5.x. The affected component is the ZMI/Plone web interfaces built on Zope, with the root cause being CSRF weaknesses that could allow unauthorized act...
CVE-2015-5704
scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands...
CVE-2015-5169
Apache Struts is affected by an XSS vulnerability (CVE-2015-5169) present in Struts versions prior to 2.3.20. When debug mode is enabled, specially crafted inputs can trigger arbitrary script execution in a victim’s browser in the context of the web application. Public advisories and vendor notes...
CVE-2015-5327
CVE-2015-5327 affects the Linux kernel (4.3-rc1 and later); the flaw is an out-of-bounds memory read in x509_decode_time within x509_cert_parser.c. Impact is partially confidentiality (per CVSS2) and high confidentiality (per CVSS3); the issue is fixed by kernel patches (as noted in referenced ad...
CVE-2015-6592
Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...
CVE-2015-5184
CVE-2015-5184 affects Red Hat JBoss A-MQ/Hawtio console. The vulnerability arises from the Hawtio console’s HTTP response headers: the Access-Control-Allow-Origin header is not restricted, allowing remote attackers to access sensitive information exposed by the console. Functional impact is infor...