CVE-2015-6555

creationtimestamp| type| source ---|---|--- 2024-01-06 18:56:05+00:00| seen| https://t.me/arpsyndicate/2571...

CVE-2015-8765

creationtimestamp| type| source ---|---|--- 2024-01-06 13:18:22+00:00| seen| https://t.me/arpsyndicate/2539...

Design/Logic Flaw

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. AMD CPUs since 2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of...

CVE-2023-7207

Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...

CVE-2015-10128

creationtimestamp| type| source ---|---|--- 2024-01-02 15:26:46+00:00| seen| https://t.me/ctinow/161828 2024-01-03 01:35:39+00:00| seen| https://t.me/cibsecurity/74181 2024-01-22 11:12:06+00:00| seen| https://t.me/ctinow/171090...

CVE-2015-10128

The CVE-2015-10128 entry affects the rt-prettyphoto Plugin for WordPress, up to version 1.2. The vulnerability targets the function royal_prettyphoto_plugin_links in rt-prettyphoto.php and enables cross-site scripting (XSS). Exploitation can be performed remotely. A patch is available: upgrade to...

CVE-2015-3785

creationtimestamp| type| source ---|---|--- 2024-01-01 09:16:26+00:00| seen| https://t.me/arpsyndicate/2313...

CVE-2015-5897

creationtimestamp| type| source ---|---|--- 2024-01-01 07:04:57+00:00| seen| https://t.me/arpsyndicate/2307...

CVE-2015-1239

creationtimestamp| type| source ---|---|--- 2023-12-29 21:17:13+00:00| seen| https://t.me/ctinow/160682...

CVE-2015-10127

creationtimestamp| type| source ---|---|--- 2023-12-26 18:26:38+00:00| seen| https://t.me/ctinow/159382 2023-12-28 00:29:43+00:00| seen| https://t.me/arpsyndicate/2166 2024-01-18 19:26:50+00:00| seen| https://t.me/ctinow/169890...

CVE-2015-10127

CVE-2015-10127 relates to the PlusCaptcha Plugin for WordPress (versions up to 2.0.6). The vulnerability is described as a cross-site scripting issue arising from manipulation of some unknown functionality, with the attack potentially launched remotely. A fix is available in version 2.0.14, and t...

Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2023-3463)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2023-3491)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2 which is shipped with IBM Intelligent Operations Center.

Summary IBM DB2 shipped with IBM Intelligent Operations Center. Information about security vulnerabilities affecting IBM DB2 has been published in a security bulletin CVE-2015-8383, CVE-2015-8381, CVE-2015-8386, CVE-2015-8388, CVE-2015-8385, CVE-2015-8387, CVE-2015-8391, CVE-2015-8390,...

Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server

Summary IBM Db2 is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM Db2 have been published in a security bulletin CVE-2015-8383, CVE-2015-8381, CVE-2015-8386, CVE-2015-8388, CVE-2015-8385, CVE-2015-8387, CVE-2015-8391, CVE-2015-8390, CVE-2015-839...

SUSE CVE-2015-8314

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...

CVE-2015-6639

creationtimestamp| type| source ---|---|--- 2023-12-12 11:47:09+00:00| seen| https://t.me/arpsyndicate/1804...

CVE-2015-8314

CVE-2015-8314 affects the Devise gem for Ruby prior to 3.5.4, where the Remember Me cookie handling is flawed. This flaw may allow an attacker to obtain unauthorized persistent access to an application by leveraging the compromised cookie. The issue is reported across multiple sources (Red Hat, D...

CVE-2015-8314

The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access...

CVE-2015-2179

The CVE-2015-2179 issue affects the xaviershay-dm-rails gem for Ruby, version 0.10.3.8, where a flaw in the execute() function in /datamapper/dm-rails/blob/master/lib/dm-rails/storage.rb exposes sensitive information via the process table. This can allow local users to discover MySQL credentials ...