CVE-2015-10093

CVE-2015-10093 affects the WordPress plugin Mark User as Spammer (versions 1.0.0–1.0.1). The vulnerability exists in the user_row_actions function of plugin/plugin.php, where manipulation of the url parameter leads to cross-site scripting. The issue can be triggered remotely and is described with...

CVE-2015-10092

The CVE concerns the Qtranslate Slug Plugin for WordPress (up to version 1.1.16). The vulnerability affects the add_slug_meta_box function in includes/class-qtranslate-slug.php and can be triggered remotely to perform cross-site scripting. A fix is available in version 1.1.17, with patch 74b39326...

CVE-2015-10091

Affected product: ByWater Solutions bywater-koha-xslt. Vulnerable component: StringSearch function in admin/systempreferences.pl. Root cause: input of the name parameter enables SQL injection. Impact: remote attack possible; no specific versions are detailed in the sources. Known remediation: pat...

CVE-2015-10090

creationtimestamp| type| source ---|---|--- 2023-03-06 02:37:24+00:00| seen| https://t.me/cibsecurity/59443...

CVE-2015-10090

CVE-2015-10090 – Landing Pages Plugin (WordPress) is affected up to version 1.8.7. The vulnerability is described as a cross-site scripting flaw in unknown functionality that can be exploited remotely. The root cause and affected component are not explicitly detailed in the provided sources, but ...

CVE-2015-10089

creationtimestamp| type| source ---|---|--- 2023-03-05 17:54:12+00:00| seen| https://t.me/cibsecurity/59431...

CVE-2015-10089

CVE-2015-10089 affects flame.js, an Ember.js widget/UI library. The issue is a cross-site scripting vulnerability in an unspecified part of flame.js, which can be triggered remotely. Details on affected/unaffected releases are not provided due to lack of versioning information. A patch is availab...

CVE-2015-10088

creationtimestamp| type| source ---|---|--- 2023-03-05 07:41:33+00:00| seen| https://t.me/cibsecurity/59426...

CVE-2015-10088

CVE-2015-10088 affects ayttm up to 0.5.0.89, specifically the http_connect function in libproxy/proxy.c, where a format string vulnerability exists. The issue can be executed remotely and is described as high severity with complex exploitability. A patch is available (hash: 40e04680018614a7d2b685...

SUSE SLES12 Security Update : nrpe (SUSE-SU-2023:0586-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0586-1 advisory. - CVE-2015-4000: Fixed Logjam Attack by increasing the standard size of 512 bit dh parameters to 2048 bsc931600, bsc938906. Tenable has...

CVE-2015-10086

creationtimestamp| type| source ---|---|--- 2023-02-28 02:27:04+00:00| seen| https://t.me/cibsecurity/59077...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM SAN b-type Switches

Summary OpenSSL issues from March 2015 containing 12 CVE were disclosed. This bulletin addresses the vulnerabilities that have been referred to as Open SSL used by IBM SAN b-type Switches. Vulnerability Details CVEID: CVE-2015-0291 DESCRIPTION: OpenSSL is vulnerable to a denial of service. By...

Security Bulletin: Vulnerabilities in OpenSSL affect IBM b-type SAN switches and directors (CVE-2015-3193, CVE-2015-3194, CVE-2015-3195, CVE-2015-3196, CVE-2015-1794)

Summary OpenSSL vulnerabilities were disclosed on December 3, 2015 by the OpenSSL Project. OpenSSL is used by IBM b-type SAN switches and directors. IBM b-type SAN firmware has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-3193DESCRIPTION: OpenSSL could allow a remote...

CVE-2015-10086 OpenCycleCompass server-php login.php sql injection

A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown function of the file api1/login.php. The manipulation of the argument user leads to sql injection. It is possible to launch the attack remotely. This product is using a rolling...

CVE-2015-10086

The CVE-2015-10086 entry affects OpenCycleCompass server-php, specifically the api1/login.php function where manipulation of the user parameter enables a remote SQL injection. Affected component: server-php; vulnerability is due to unsafely handled user input in login logic. Impact stated as remo...

Ubuntu 20.04 ESM : Python vulnerabilities (USN-5888-1)

The remote Ubuntu 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5888-1 advisory. It was discovered that Python incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input...

Ubuntu: Security Advisory (USN-5888-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5882-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-10085

creationtimestamp| type| source ---|---|--- 2023-02-21 20:16:46+00:00| seen| https://t.me/cibsecurity/58635...

K17246: Linux kernel vulnerability CVE-2015-3636

Security Advisory Description The pingunhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of service use-after-free and system crash by...