35974 matches found
CVE-2015-6592
Huawei UAP2105 before V300R012C00SPC160BootRom does not require authentication to the serial port or the VxWorks shell...
CVE-2015-5184
CVE-2015-5184 affects Red Hat JBoss A-MQ/Hawtio console. The vulnerability arises from the Hawtio console’s HTTP response headers: the Access-Control-Allow-Origin header is not restricted, allowing remote attackers to access sensitive information exposed by the console. Functional impact is infor...
CVE-2015-5182
Cross-site request forgery CSRF vulnerability in the jolokia API in A-MQ...
CVE-2015-5183
Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ...
CVE-2015-7846
CVE-2015-7846 affects Huawei S7700/S9700/S9300 series and AR200/AR1200/AR2200/AR3200 devices, where physical access to the CF card can disclose sensitive information. Root cause: data exposure via CF card contents when accessed locally. Affected products require upgrading to: S7700/S9700/S9300 to...
CVE-2015-8251
OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone IP 55G HFA V3, OpenStage 15, 20E, 20, and 40 and OpenScape Desk Phone IP 35G HFA V3, and OpenScap...
CVE-2015-5169
Cross-site scripting XSS vulnerability in Apache Struts before 2.3.20...
CVE-2015-7293
Multiple cross-site request forgery CSRF vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x...
CVE-2015-5184
Console: CORS headers set to allow all in Red Hat AMQ...
CVE-2015-6592
CVE-2015-6592 affects Huawei UAP2105 prior to V300R012C00SPC160 (BootROM). The issue is unauthenticated access to the serial port and the VxWorks shell, allowing an attacker to run VxWorks debugging commands and view/modify memory and files, leading to information disclosure and system anomalies....
CVE-2015-0238
selinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing information via a privilege escalation attack...
CVE-2015-8707
CVE-2015-8707 (Magento) affects Magento CE < 1.9.2.2 and Magento EE
CVE-2015-0238
Summary (CVE-2015-0238): In Red Hat OpenShift 2, the issue affects the selinux-policy package. A privilege-escalation path could allow an attacker to obtain process-list information (information disclosure). The available connected sources corroborate that the vulnerability involves Red Hat OpenS...
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
CVE-2015-4667
Multiple hardcoded credentials in Xsuite 2.x...
CVE-2015-5282
Cross-site scripting XSS vulnerability in Foreman 1.7.0 and after...
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow...
CVE-2015-6748
Cross-site scripting XSS vulnerability in jsoup before 1.8.3...
