CVE-2015-5608

Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1...

CVE-2015-2927

CVE-2015-2927 : Affected components are node 0.3.2 and URONode prior to 1.0.5r3. The vulnerability allows remote attackers to cause a denial of service via bandwidth consumption. This is documented across multiple sources (NVD, SUSE, CNVD, CVE lists) with consistent description; exploitation deta...

CVE-2015-5395

SOGo is affected by a CSRF vulnerability disclosed as CVE-2015-5395 in versions before 3.1.0. The provided documents describe the flaw as CSRF with potential unauthorized operations but do not include exploitation details or explicit remediation steps.

CVE-2015-5395

Cross-site request forgery CSRF vulnerability in SOGo before 3.1.0...

CVE-2015-3890

CVE-2015-3890 applies to Open Litespeed before 1.3.10, described as a use-after-free vulnerability. Multiple connected sources characterize the issue as a memory misreference that could allow remote-triggered crashes or instability; one CNVD entry explicitly calls it a memory misreference vulnera...

CVE-2015-5608

CVE-2015-5608 affects Joomla! CMS 3.0.0 through 3.4.1 and is an open redirect vulnerability. The issue stems from inadequate validation of script parameters/return value, enabling redirection to an arbitrary external site when a user follows a crafted link. Exploitation details aren’t provided in...

CVE-2015-1866

CVE-2015-1866 is an XSS vulnerability in Ember.js affecting the 1.10.x line before 1.10.1 and the 1.11.x line before 1.11.2. The issue arises from how the select view or related binding handles user-supplied content for option labels, allowing injected scripts when data is not properly escaped. A...

CVE-2015-7347

CVE-2015-7347 affects ZCMS 1.1 JavaServer Pages Content Management System. The connected sources confirm a cross-site scripting (XSS) vulnerability in ZCMS 1.1 (no detailed root cause in the provided docs). Public exploit references exist (Exploit-DB and PacketStorm) describing XSS and SQL Inject...

CVE-2015-6673

CVE-2015-6673 affects libpgf, specifically the Decoder.cpp use-after-free. Public entries reference vulnerabilities in libpgf prior to 6.15.32 across multiple Linux distros (e.g., Mageia MGASA-2019-0014, Debian DLA-2035-1, Ubuntu USN-4554-1, Debian/DLA notes). The core issue is a use-after-free i...

CVE-2015-6673

Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32...

CVE-2015-1865

CVE-2015-1865 affects coreutils 8.4, specifically the fts.c component, enabling local users to delete arbitrary files. The provided documents state the vulnerable code path and the impact (local deletion) but do not provide any remediation, mitigation steps, or patch version details. No exploitat...

CVE-2015-1865

fts.c in coreutils 8.4 allows local users to delete arbitrary files...

CVE-2015-4707

CVE-2015-4707 affects IPython prior to 3.2, where JSON error messages and the /api/notebooks REST API could trigger cross-site scripting (XSS) via URL parameters in error responses. Affected component: IPython notebook REST API. Root cause: improper handling/neutralization of data in error messag...

CVE-2015-0162

IBM Security SiteProtector System (SP2001/SP3001/SP4001) is affected by CVE-2015-0162 due to an unquoted Windows search path vulnerability in the SiteProtector components, enabling local privilege elevation for attackers with physical/logical access. The bulletin details that local attackers can ...

CVE-2015-1865

fts.c in coreutils 8.4 allows local users to delete arbitrary files...

CVE-2015-5179

FreeIPA might display user data improperly via vectors involving non-printable characters...

CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

CVE-2015-5179

FreeIPA might display user data improperly via vectors involving non-printable characters...

CVE-2015-4074

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task...

CVE-2015-5248

CVE-2015-5248 is a reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform. Connected CNVD-2017-33047 describes a related remote attacker could trigger arbitrary code execution by submitting a crafted request that causes code execution when a user opens a...