CVE-2015-4074

Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a ticket.downloadattachment task...

CVE-2015-4073

CVE-2015-4073 refers to SQL injection weaknesses in the Joomla! Helpdesk Pro plugin (before version 1.4.0). The affected component is the Helpdesk Pro Joomla! plugin; the root cause is improper handling of user input in SQL queries, allowing remote attackers to inject arbitrary SQL via (1) ticket...

CVE-2015-4075

CVE-2015-4075 – Joomla! Helpdesk Pro (

CVE-2015-5607

IPython contains a CSRF vulnerability in its REST API for versions 2 and 3. The REST API could be abused via cross-site requests to perform unauthorized operations. Public references indicate a CSRF issue with IPython’s POST handling, and multiple advisories (including GN/Ubuntu security notices ...

CVE-2015-4072

CVE-2015-4072 affects the Joomla! Helpdesk Pro plugin prior to version 1.4.0. The vulnerability is described as cross-site scripting (XSS) via input fields related to name and message, allowing remote attackers to inject arbitrary scripts. The root cause is an XSS condition in the plugin’s handli...

CVE-2015-1329

The CVE-2015-1329 issue affects oxide-qt (Ubuntu 15.04 and 14.04 LTS). The root cause is a use-after-free in oxide::qt::URLRequestDelegatedJob, which may allow remote code execution in the context of the affected browser engine. Impact is remote code execution with the user’s privileges and high ...

CVE-2015-4074

CVE-2015-4074 is a proven Local File Inclusion / path traversal vulnerability in the Joomla! Helpdesk Pro plugin < 1.4.0. The issue allows reading arbitrary files via a .. in the filename parameter of the ticket.download_attachment task. Affected software: Joomla! Helpdesk Pro plugin versions ...

CVE-2015-8224

CVE-2015-8224 affects Huawei P8 devices before specific GRA build revisions, where an attacker using a fake base station can obtain UE signal strength measurements. The root cause is that the device does not verify its security status before sending signaling to a base station, enabling an inform...

CVE-2015-4073

Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 ticketcode or 2 email parameter or 3 remote authenticated users to execute arbitrary SQL commands via the filterorder parameter...

CVE-2015-5179

Technical details (affected components, root cause, and patch status) are not publicly provided in the connected documents. Monitor vendor advisories and security trackers for updates.

CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

Fedora Update for techne FEDORA-2017-8f27031c8f

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4681

Polycom RealPresence Resource Manager (RPRM) <= 8.3.x is vulnerable to CVE-2015-4681 (and related CVEs) via vectors related to weak passwords, enabling local access with complete impact on confidentiality, integrity, and availability. The SEC Consult advisory reports multiple vulnerabilities a...

CVE-2015-4684

Polycom RealPresence Resource Manager (RPRM) up to version 8.3 is affected by CVE-2015-4684: multiple directory-traversal vulnerabilities that allow remote authenticated users to read arbitrary files via Modifier in PlcmRmWeb/FileDownload and remote authenticated administrators to upload arbitrar...

CVE-2015-4685

CVE-2015-4685 affects Polycom RealPresence Resource Manager (RPRM) before 8.4. The issue is a sudo misconfiguration that lets the plcm user execute root commands via scripts in /var/polycom/cma/upgrade/scripts, enabling privilege escalation. Impact is described as full root access for an attacker...

CVE-2015-4683

Polycom RealPresence Resource Manager aka RPRM before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests...

CVE-2015-4683

Polycom RealPresence Resource Manager (RPRM) before version 8.4 is affected by CVE-2015-4683, where session IDs are transmitted as HTTP GET parameters. This can lead to sensitive data exposure and, in certain actions (e.g., file/download and log access), enable privilege escalation by an attacker...

CVE-2015-4682

CVE-2015-4682 concerns Polycom RealPresence Resource Manager (RPRM) prior to 8.4. An authenticated remote user can disclose the installation path by issuing an HTTP POST to PlcmRmWeb/JConfigManager, exposing sensitive directory information without appropriate authorization checks. The vulnerabili...

CVE-2015-4685

Polycom RealPresence Resource Manager aka RPRM before 8.4 allows local users with access to the plcm account to gain privileges via a script in /var/polycom/cma/upgrade/scripts, related to a sudo misconfiguration...

CVE-2015-1849

AdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform EAP before 6.4.1 allows attackers to obtain sensitive information via vectors involving logging the LDAP bind credential password when TRACE logging is enabled...