CVE-2015-4627

Summary: CVE-2015-4627 corresponds to a SQL injection vulnerability in Pragyan CMS 3.0. The connected CNVD entry describes a remote attacker exploiting SQL injection to execute arbitrary SQL commands. There is no explicit information on affected modules, versions beyond 3.0, or the root cause det...

CVE-2015-4627

SQL injection vulnerability in Pragyan CMS 3.0...

CVE-2015-4629

Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions...

CVE-2015-4697

Cross-site request forgery CSRF vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563...

CVE-2015-3169

Cross-site scripting XSS vulnerability in askbot 0.7.51-4.el6.noarch...

CVE-2015-3313

SQL injection vulnerability in WordPress Community Events plugin before 1.4...

CVE-2015-5060

CVE-2015-5060 is an XSS vulnerability in anchor-cms prior to version 0.9-dev. The CNVD entry confirms the issue affects anchor-cms with an open XSS flaw that allows a remote attacker to inject arbitrary script/HTML. The NVD record reiterates the vulnerability as a cross-site scripting flaw in anc...

CVE-2015-4619

The CVE-2015-4619 entry concerns a Cross-site request forgery (CSRF) vulnerability in Spina prior to commit bfe44f289e336f80b6593032679300c493735e75. The issue arises because Spina::ApplicationController did not enable CSRF protection, creating a CSRF risk across the engine, including administrat...

CVE-2015-4724

Concrete5

CVE-2015-3222

OSSEC CVE-2015-3222 affects OSSEC 2.7–2.8.1 on UNIX: the syscheck/seechanges.c code uses a shell diff command via system(), enabling a local user to escalate to root by exploiting this differential reporting feature. The issue is addressed in OSSEC 2.8.2 (fixes noted in release and FreeBSD VuXML/...

CVE-2015-4629

The CVE-2015-4629 entry applies to Huawei E5756S devices, with vulnerable firmware prior to V200R002B146D23SP00C00. The issue arises from a Web UI authentication weakness that allows remote attackers to read device configuration information and enable PIN/PUK authentication, among other unspecifi...

CVE-2015-1590

The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...

CVE-2015-1590

The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...

CVE-2015-1590

CVE-2015-1590 affects Kamailio prior to 4.3.0 via the kamcmd administrative utility and default configuration, which use the file /tmp/kamailio_ctl as the control file. The connected sources confirm the version boundary (pre-4.3.0) and identify the affected components, but do not provide addition...

CVE-2015-3442

Soreco Xpert.Line 3.0 allows local users to spoof users and consequently gain privileges by intercepting a Windows API call...

DEBIAN-CVE-2015-3250

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors...

CVE-2015-3250

CVE-2015-3250 affects the Apache Directory LDAP API prior to 1.0.0-M31. The vulnerability allows timing attacks via unspecified vectors. This is consistently described across multiple sources (GHSA, NVD, OSV, Ubuntu/Debian OSV), though exploitation details and remediation are not provided in the ...

CVE-2015-3250

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors...

CVE-2015-3442

CVE-2015-3442 affects Xpert.Line 3.0 (Xpert.Center) from Soreco AG. The vulnerability arises from a client‑side authentication mechanism that uses the Windows API getUserNameA from advapi32.dll to authenticate the user. An attacker who can intercept this API call can impersonate other users and g...

Updated groovy18 packages fix security vulnerability

When an application has Groovy on the classpath and that it uses standard Java serialization mechanism to communicate between servers, or to store local data, it is possible for an attacker to bake a special serialized object that will execute code directly when deserialized. All applications whi...