35974 matches found
CVE-2015-7700
CVE-2015-7700 affects pngcrush before v1.7.87, with a double-free in the sPLT chunk structure and in png.c. The issue is described across multiple sources as allowing unspecified impact via unknown vectors. Public details identify the vulnerable component as pngcrush’s parsing/handling of sPLT an...
Apache Struts 'top' Object Access Security Bypass Vulnerability (S2-026) - Linux
Apache Struts is prone to a security bypass vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
SUSE SLED12 Security Update : libraw (SUSE-SU-2017:2300-1)
This update for libraw fixes the following issues : - CVE-2015-3885: A specially crafted raw image file could have caused a Denial of Service through an integer overflow. bsc930683 - CVE-2015-8367: The function phaseonecorrect did not handle memory object initialization correctly, which may have...
MantisBT 1.2.13 - 1.2.19 'adm_config_report.php' XSS Vulnerability - Linux
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
MantisBT 1.2.13 - 1.2.19 'adm_config_report.php' XSS Vulnerability - Windows
MantisBT is prone to a cross-site scripting XSS vulnerability. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...
CVE-2015-5209
Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object...
CVE-2015-8334
SQL injection vulnerability in the Operation and Maintenance Unit OMU in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...
CVE-2015-8299
Buffer overflow in the Group messages monitor Falcon in KNX ETS 4.1.5 Build 3246 allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet...
CVE-2015-3655
Cross-site request forgery CSRF vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token...
Design/Logic Flaw
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-3654...
CVE-2015-6942
Cross-site scripting XSS vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HTML via a hyperlink in a document attachment...
CVE-2015-3655
Cross-site request forgery CSRF vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token...
CVE-2015-8334
CVE-2015-8334 affects Huawei VCN500 OMU (Operation and Maintenance Unit). The vulnerability allows remote authenticated users to execute arbitrary SQL commands via crafted HTTP requests in VCN500 firmware before V100R002C00SPC201. Impact: SQL injection in the OMU could expose or modify database d...
CVE-2015-3653
Aruba Networks ClearPass Policy Manager (CPPM) environments are affected by CVE-2015-3653 for CPPM versions prior to 6.4.7 and 6.5.x prior to 6.5.2. The issue allows remote authenticated administrators to write to arbitrary files in the underlying OS due to incorrect permission checking, potentia...
CVE-2015-8299
KNX ETS 4.1.5 (Build 3246) is affected by a buffer overflow in the Group messages monitor (Falcon). The vulnerability allows remote attackers to execute arbitrary code by sending a crafted KNXnet/IP UDP packet. This entry is supported by NVD/PRION/CVE records and PacketStorm/CVE references. The C...
CVE-2015-6588
CVE-2015-6588 affects MODX Revolution with an XSS in login-fsp.html (pre-1.9.1). The underlying issue is that the QUERY_STRING is not properly sanitized, allowing remote attackers to inject arbitrary script/HTML. Practical impact is user interaction is not required, but the attack occurs via craf...
CVE-2015-8334
SQL injection vulnerability in the Operation and Maintenance Unit OMU in Huawei VCN500 before V100R002C00SPC201 allows remote authenticated users to execute arbitrary SQL commands via a crafted HTTP request...
CVE-2015-3654
Aruba Networks ClearPass Policy Manager is affected by CVE-2015-3654 in versions prior to 6.4.7 and 6.5.x prior to 6.5.2. The vulnerability allows remote authenticated administrators to gain root privileges via unspecified vectors. There are no exploits or vectors detailed in the provided documen...
CVE-2015-5209
CVE-2015-5209 affects Apache Struts 2.x and allows a remote attacker to gain unauthorized access by manipulating a special top-level object in Struts' ValueStack, enabling manipulation of internal settings and user sessions. Public advisories and IBM notices enumerate affected IBM products (IBM S...