35974 matches found
CVE-2015-2046
Cross-site scripting XSS vulnerability in MantisBT 1.2.13 and later before 1.2.20...
CVE-2015-1386
Directory traversal vulnerability in unshield 1.0-1...
CVE-2015-1199
Directory traversal vulnerability in ppmd 10.1-5...
UBUNTU-CVE-2015-0928
libhtp 0.5.15 allows remote attackers to cause a denial of service NULL pointer dereference...
CVE-2015-0101
Cross-site scripting XSS vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; and IBM Business Process Manager Advanced 7.5.x before 7.5, 8.0....
CVE-2015-0928
libhtp 0.5.15 allows remote attackers to cause a denial of service NULL pointer dereference...
CVE-2015-0974
CVE-2015-0974 affects ZTE Datacard MF19 0V1.0.0B04 (mobiconnect). Root cause: untrusted search path allows a local attacker to cause privilege escalation by referencing a malicious DLL (mms_dll_r.dll or mediaplayerdll.dll) in the 'Ucell Internet' directory, yielding complete control. Public explo...
CVE-2015-0101
The CVE-2015-0101 issue is an XSS vulnerability in IBM Business Process Manager across Standard, Express, and Advanced lines (versions 7.5.x, 8.0.x, 8.5.x). It stems from insufficient input validation in BPM’s Process Center, allowing a remote attacker to craft a URL that executes script in a vic...
CVE-2015-0210
CVE-2015-0210 affects wpa_supplicant 2.0-16 and involves improper validation of the server certificate subject name, enabling remote MITM risk. Multiple connected sources (SUSE SUSE-SU-2018:1659-1, CNVD/CVEs, NVD entry) corroborate a vulnerability in wpa_supplicant 2.0-16 and describe the issue a...
CVE-2015-1177
Exponent CMS 2.3.2 is affected by a reflected cross-site scripting (XSS) vulnerability in index.php, exploitable via the src parameter in the search functionality. Technical details across sources show that an attacker can craft a URL containing malicious JavaScript (e.g., payloads like or onerr...
CVE-2015-1198
CVE-2015-1198 affects the ha archiver package, specifically version 0.999p+dfsg-5, where multiple directory traversal vulnerabilities are present. The observed issue allows path traversal to read arbitrary files within the application context. This vulnerability is reflected across multiple sourc...
CVE-2015-1443
Concrete details show that CVE-2015-1443 affects the httpd component of fli4l, with vulnerable versions prior to 3.10.1 and 4.0 prior to 2015-01-30. The vulnerability enables a remote attacker to execute arbitrary code. The CNVD entry WC explicitly describes this as a remote code execution vulner...
CVE-2015-1386
Directory traversal vulnerability in unshield 1.0-1...
CVE-2015-1876
Directory traversal vulnerability in ES File Explorer 3.2.4.1...
CVE-2015-1199
Directory traversal vulnerability in ppmd 10.1-5...
CVE-2015-1430
Buffer overflow in xymon 4.3.17-1...
CVE-2015-0114
CVE-2015-0114 is a stack-based buffer overflow vulnerability affecting IBM V5R4 and IBM i Access for Windows 6.1 and 7.1. The root cause is a failure to perform proper bounds checking on user input, allowing a local attacker to exploit the overflow and execute arbitrary code within the affected a...
CVE-2015-1386
Directory traversal vulnerability in unshield 1.0-1...