35974 matches found
CVE-2015-4724
SQL injection vulnerability in Concrete5 5.7.3.1...
CVE-2015-4627
SQL injection vulnerability in Pragyan CMS 3.0...
CVE-2015-4629
Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions...
CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-3991
CVE-2015-3991 affects strongSwan versions 5.2.2 and 5.3.0, enabling a remote attacker to cause a daemon crash (DoS) or execute arbitrary code. Public references across OSV, NVD, Debian/CVEs corroborate the issue. Fedora advisory notes a later update (5.3.2) fixes this CVE; other entries (openSUSE...
CVE-2015-4724
SQL injection vulnerability in Concrete5 5.7.3.1...
CVE-2015-4721
Multiple cross-site scripting XSS vulnerabilities in Concrete5 5.7.3.1...
CVE-2015-7672
CVE-2015-7672 is a cross-site scripting (XSS) vulnerability in Centreon 2.6.1. The provided documents confirm the issue and indicate a fix in Centreon 18.10.0 and Centreon Web 2.8.27. The root cause details are not explicitly described in the sources, and there is no explicit exploitation status ...
CVE-2015-8079
CVE-2015-8079 affects qt5-qtwebkit before 5.4, where private browsing URLs are recorded to the favicon database WebpageIcons.db. Connected sources corroborate that this logging vulnerability existed in QtWebKit and was addressed in a SUSE security update (SUSE-SU-2016:2397-1) which mentions an ad...
CVE-2015-3169
Askbot 0.7.51-4.el6.noarch is affected by a cross-site scripting (XSS) vulnerability. The issue stems from inadequate sanitization/filtering of user-submitted input, enabling arbitrary script execution in a victim’s browser when browsing the affected site. Documented impact includes potential coo...
CVE-2015-4721
CVE-2015-4721 affects Concrete5 up to version 5.7.3.1 and is characterized by multiple cross-site scripting (XSS) vulnerabilities. The CNVD entry attributes the issue to inadequate handling of user input (no proper validation/encryption) in Concrete5 5.7.3.1. OpenVAS similarly lists multiple vuln...
CVE-2015-8079
Removed by vendor...
CVE-2015-3314
SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5...
CVE-2015-8079
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db...
CVE-2015-4085
CVE-2015-4085 is a directory traversal vulnerability in Etherpad frontend tests (node/hooks/express/tests.js) affecting Etherpad frontend tests prior to version 1.6.1. Exploitation could allow an attacker to browse files, impacting confidentiality (Partial). The issue is documented across multipl...
CVE-2015-5052
The connected sources confirm a SQL injection vulnerability in Sefrengo prior to version 1.6.5 beta2. The flaw affects the web CMS (PHP/MySQL) and, if exploitable, allows an attacker to execute arbitrary SQL commands remotely, with the impact described as affecting confidentiality, integrity, and...
CVE-2015-3313
CVE-2015-3313 details a SQL injection in the WordPress plugin Community Events (versions prior to 1.4). The vulnerability stems from inadequate input validation in the plugin’s SQL construction, with the CNVD entry noting exploitation possible via the GET parameter (notably the vulnerable eventye...
CVE-2015-4697
The CVE-2015-4697 entry maps to a CSRF vulnerability in the WordPress Google Analyticator plugin. Affected product: Google Analyticator WordPress plugin (prior to version 6.4.9.3 revision @1183563 per CVE record; openvas entry also notes vulnerability in versions
CVE-2015-3314
CVE-2015-3314 concerns a SQL injection vulnerability in the WordPress Tune Library plugin prior to version 1.5.5. The vulnerability affects the Tune Library plugin used to import XML iTunes library data into WordPress databases, with exposure via network-accessible input and no authentication req...