CVE-2015-10078

The CVE-2015-10078 entry concerns the atwellpub Resend Welcome Email Plugin for WordPress (version 1.0.1). The vulnerability affects the function send_welcome_email_url in the file resend-welcome-email.php, enabling cross-site scripting. It can be triggered remotely. A fix is available in version...

CISA Warns of Active Attacks Exploiting Fortra MFT, TerraMaster NAS, and Intel Driver Flaws

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added three flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active abuse in the wild. Included among the three is CVE-2022-24990, a bug affecting TerraMaster network-attached storage TNAS devices...

CVE-2015-10076

creationtimestamp| type| source ---|---|--- 2023-02-10 16:57:37+00:00| seen| https://t.me/cibsecurity/57894...

CVE-2015-10077

CVE-2015-10077 affects webbuilders-group silverstripe-kapost-bridge 0.3.3. The vulnerability is in KapostService.php (index/getPreview) and enables SQL injection via insufficient input sanitization. Remote attacker could exploit it; upgrade to 0.4.0 is recommended. Patch 2e14b0fd0ea35034f90890f36...

CVE-2015-10076

Dimtion Shaarlier versions up to 1.2.2 are affected by a SQL injection in the createTag function (TagsSource.java) of the Tag Handler. The vulnerability root cause is exposed in the code path handling tag creation, with a patch available in version 1.2.3 (patch ID 3d1d9b239d9b3cd87e8bed45a0f02da5...

CVE-2015-10076 dimtion Shaarlier Tag TagsSource.java createTag sql injection

A vulnerability was found in dimtion Shaarlier up to 1.2.2. It has been declared as critical. Affected by this vulnerability is the function createTag of the file app/src/main/java/com/dimtion/shaarlier/TagsSource.java of the component Tag Handler. The manipulation leads to sql injection. Upgradi...

CVE-2015-10076 dimtion Shaarlier Tag TagsSource.java createTag sql injection

A vulnerability was found in dimtion Shaarlier up to 1.2.2. It has been declared as critical. Affected by this vulnerability is the function createTag of the file app/src/main/java/com/dimtion/shaarlier/TagsSource.java of the component Tag Handler. The manipulation leads to sql injection. Upgradi...

CVE-2015-10075

creationtimestamp| type| source ---|---|--- 2023-02-07 14:23:25+00:00| seen| https://t.me/cibsecurity/57649...

CVE-2015-10075

Summary of CVE-2015-10075 / Custom-Content-Width : The vulnerability affects the Custom-Content-Width 1.0 plugin, specifically the function override_content_width/register_settings in custom-content-width.php. The issue allows remote cross-site scripting (XSS) due to the underlying handling in th...

CVE-2015-10075 Custom-Content-Width custom-content-width.php register_settings cross site scripting

A vulnerability was found in Custom-Content-Width 1.0. It has been declared as problematic. Affected by this vulnerability is the function overridecontentwidth/registersettings of the file custom-content-width.php. The manipulation leads to cross site scripting. The attack can be launched remotel...

CVE-2015-10074

OpenSeaMap online_chart 1.2 is affected by a Cross-Site Scripting in the init function of index.php, caused by unsafely handling the mtext argument. The vulnerability allows remote exploitation and has a patch in version staging; upgrading is recommended. References in connected data point to the...

CVE-2015-10073

CVE-2015-10073 affects tinymighty WikiSEO 1.2.1 for MediaWiki. The vulnerability is in the modifyHTML function of WikiSEO.body.php (Meta Property Tag Handler), where manipulating the content parameter enables cross-site scripting. Remote exploitation is possible. A patch exists: upgrade to WikiSE...

Security Bulletin: Vulnerability in jQuery affects IBM Process Mining (Multiple CVEs)

Summary There are multiple vulnerabilities in JQuery that could allow an attacker to launch cross-site scripting. The code is used by IBM Process Mining. This bulletin identifies the security fixes to apply to address the vulnerability. Vulnerability Details CVEID:CVE-2015-9251 DESCRIPTION: jQuer...

CVE-2015-0250

creationtimestamp| type| source ---|---|--- 2023-01-30 14:40:15+00:00| published-proof-of-concept| https://t.me/arm1tage/485 2024-10-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1420/...

Rocky Linux 8 : python39:3.9 and python39-devel:3.9 (RLSA-2022:7592)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7592 advisory. - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow...

Rocky Linux 8 : python27:2.7 (RLSA-2022:7593)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:7593 advisory. - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow...

CVE-2015-2309

Unsafe methods in the Request class...

Ubuntu: Security Advisory (USN-4768-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5455-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...