35971 matches found
Medium: libplist
Issue Overview: A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plistfromxml of the file src/xplist.c of the component XML Handler. The manipulation leads to xml external entity reference. The name of the patch is...
CVE-2015-10106
CVE-2015-10106 concerns the TYPO3 extension mback2k mh_httpbl (versions up to 1.1.7). The vulnerability resides in the function moduleContent of mod1/index.php, enabling remote SQL injection. Upgrade to version 1.1.8 to fix (patch 429f50f4e4795b20dae06735b41fb94f010722bf; VDB-230086). This is doc...
CVE-2015-20108
creationtimestamp| type| source ---|---|--- 2023-05-27 22:37:44+00:00| seen| https://t.me/cibsecurity/64742...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
CVE-2015-20108
The CVE-2015-20108 issue affects the ruby-saml gem prior to 1.0.0, where xml_security.rb enables XPath injection and code execution because prepared statements are not used. Affected component: ruby-saml XML security handling. Root cause: lack of prepared statements in XPath processing leads to i...
CVE-2015-20108
xmlsecurity.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used...
Wireshark 1.10.x < 1.10.14 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.10.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.14 advisory. - epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12....
[SECURITY] [DLA 3432-1] python2.7 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3432-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler May 24, 2023 https://wiki.debian.org/LTS -...
CVE-2015-10105
creationtimestamp| type| source ---|---|--- 2023-05-21 02:25:31+00:00| seen| https://t.me/cibsecurity/63118...
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in JQuery, Node.js and Swagger UI
Summary Multiple vulnerabilities in JQuery, Node.js and Swagger UI used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2021-23358 DESCRIPTION: Node.js underscore module could allow a remote attacker to execute arbitrary code on the system, caused by a flaw in the...
CVE-2015-5317
creationtimestamp| type| source ---|---|--- 2023-05-16 15:47:20+00:00| seen| https://t.me/theninjaway1337/1371 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:22+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971813 2025-02-07 21:03:01+00:00|...
Siemens SISCO MMS-EASE Third Party Component Resource Management Errors (CVE-2015-6574)
The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service CPU consumption via a crafted packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...
Siemens SIMATIC S7-1200 Cross Site Request Forgery
Exploit Title: Siemens SIMATIC S7-1200 CPU Start/Stop Command- Cross-Site Request Forgery Google Dork: inurl:/Portal/Portal.mwsl Date: 2022-03-24 Exploit Author: RoseSecurity Vendor Homepage: https://www.siemens.com/global/en.html Version: SIMATIC S7-1200 CPU family: All versions prior to V4.1.3...
Siemens SIMATIC Communication Processor (CVE-2015-8214)
A vulnerability has been identified in SIMATIC NET CP 342-5 incl. SIPLUS variants All versions, SIMATIC NET CP 343-1 Advanced incl. SIPLUS variants All versions V3.0.44, SIMATIC NET CP 343-1 Lean incl. SIPLUS variants All versions V3.1.1, SIMATIC NET CP 343-1 Standard incl. SIPLUS variants All...
CVE-2015-10105
CVE-2015-10105 affects the WordPress IP Blacklist Cloud Plugin (CSV File Import) up to version 3.42, specifically the valid_js_identifier function in ip_blacklist_cloud.php. The vulnerability arises from improper handling of the filename argument, enabling path traversal and remote initiation of ...
Scada-LTS Third Party Component
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Scada-LTS Equipment: Scada-LTS Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow loss of sensitive...
Security Bulletin: TADDM is vulnerable to a denial of service due to vulnerabilities in Apache HttpClient
Summary Apache HttpClient used by IBM Tivoli Application Dependency Discovery Manager and is vulnerable to CVE-2011-1498, CVE-2012-5783, CVE-2012-6153, CVE-2014-3577,CVE-2015-5262 Vulnerability Details CVEID:CVE-2011-1498 DESCRIPTION: Apache HttpComponents could allow a remote attacker to obtain...
