35974 matches found
CVE-2015-1876
The CVE-2015-1876 entry corresponds to a directory traversal vulnerability in ES File Explorer version 3.2.4.1. Multiple connected sources (CNVD-2017-30451; CVNVDB/NVD) confirm that the affected product is ES File Explorer and that the flaw allows traversal of the device filesystem, with potentia...
CVE-2015-0928
CVE-2015-0928 affects libhtp 0.5.15. The connected sources consistently describe a remote denial-of-service condition caused by a NULL pointer dereference in libhtp. The provided documents do not specify the exact trigger, affected products beyond libhtp, versions other than 0.5.15, or a concrete...
CVE-2015-1199
CVE-2015-1199 affects the ppmd compression component, with multiple sources describing a directory traversal vulnerability in ppmd 10.1-5. CNVD-2017-30599 explains that an attacker can exploit a crafted request (directory traversal sequence) to read arbitrary files, indicating the underlying issu...
CVE-2015-1445
HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30...
CVE-2015-1443
The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code...
CVE-2015-1198
Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5...
CVE-2015-1401
Improper Authentication vulnerability in the "LDAP / SSO Authentication" igldapssoauth extension 2.0.0 for TYPO3...
CVE-2015-1386
CVE-2015-1386 is a directory traversal vulnerability in the unshield library (unshield 1.0-1). The connected sources confirm the flaw resides in unshield and allows traversal to access files outside the intended directory, enabling leakage of potentially sensitive information. The CVSS data from ...
CVE-2015-1445
CVE-2015-1445 affects the fli4l httpd component. The connected documents confirm an HTTP header injection vulnerability in the httpd package for fli4l before 3.10.1 and in version 4.0 before 2015-01-30. The CVSS metrics indicate a NETWORK-exposed issue with HIGH severity (CVSS v3.0: AV:N/AC:L/PR:...
CVE-2015-1401
CVE-2015-1401 affects TYPO3’s ig_ldap_sso_auth extension (v2.0.0). The vulnerability is an improper authentication/bypass issue due to insufficient authentication against LDAP/AD. Impact is evaluated as high to critical (CVSSv2 base 7.5; CVSSv3 base 9.8). Remedy: upgrade to 2.0.1 (or later) per T...
CVE-2015-2046
CVE-2015-2046 affects MantisBT 1.2.13 and later up to, but excluding, 1.2.20. The vulnerability is a cross-site scripting (XSS) flaw in the web UI (notably affecting the adm_config_report.php flow) that can allow injection of arbitrary JavaScript. Root cause is inadequate input/output sanitizatio...
CVE-2015-3976
The CVE-2015-3976 issue is a Cross-site Scripting (XSS) vulnerability affecting GE Multilink switches: ML800/1200/1600/2400 (firmware ≤ 4.2.1) and ML810/3000/3100 (firmware ≤ 5.2.0). The underlying problem is improper neutralization of input during web page generation in the switch web interface,...
Hangul Word Processor Type Confusion (CVE-2015-6585)
There exists a Type Confusion vulnerability in the Hangul Word Processor HWP. This is due to the way HWP handles Para change requests. A successful attack, such as in the Hidden Cobra Botnet, could lead to arbitrary code execution or stolen information...
CVE-2015-4017
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules...
CVE-2015-4181
Directory traversal vulnerability in getfile.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. dot dot in the view parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this...
CVE-2015-3211
php-fpm allows local users to write to or create arbitrary files via a symlink attack...
CVE-2015-5701
mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this vulnerability exists due to the reversion of a fix of CVE-2015-5700...
CVE-2015-1324
Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root...
