Ubuntu: Security Advisory (USN-4772-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4778-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4775-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-4780-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : rh-maven35-apache-commons-collections4 (RHSA-2020:4274)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4274 advisory. The Apache Commons Collections library provides new interfaces, implementations, and utilities to extend the features of the Java Collections...

Important: libpng

Issue Overview: Integer underflow in the pngcheckkeyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.x and 1.2.x before 1.2.56, 1.3.x and 1.4.x before 1.4.19, and 1.5.x before 1.5.26 allows remote attackers to have unspecified impact via a space character as a...

CVE-2015-10070

creationtimestamp| type| source ---|---|--- 2023-01-19 12:21:40+00:00| seen| https://t.me/cibsecurity/56709...

CVE-2015-10071

CVE-2015-10071 affects gitter-badger ezpublish-modern-legacy. The vulnerability involves the file kernel/user/forgotpassword.php, causing weak password recovery due to a flawed handling. Exploitation is described as difficult with high complexity and requires no user interaction; attack vector is...

CVE-2015-10070

CVE-2015-10070 affects copperwall Twiddit. A vulnerability in the processing of the file index.php allows SQL injection. The issue is rated critical (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A patch is identified by the commit 2203d4ce9810bdaccece5c48ff4888658a01acfc and is recommended as...

CVE-2015-10069

CVE-2015-10069 affects the viakondratiuk cash-machine, specifically the function is_card_pin_at_session/update_failed_attempts in the file machine.py. The issue enables a SQL injection, as described in multiple sources. A patch named 62a6e24efdfa195b70d7df140d8287fdc38eb66d is recommended to fix ...

CVE-2015-10069 viakondratiuk cash-machine machine.py update_failed_attempts sql injection

A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function iscardpinatsession/updatefailedattempts of the file machine.py. The manipulation leads to sql injection. The name of the patch is...

CVE-2015-10068

creationtimestamp| type| source ---|---|--- 2023-01-18 17:23:28+00:00| seen| https://t.me/cibsecurity/56655...

CVE-2015-10068 danynab movify-j ReviewServiceImpl.java getByMovieId sql injection

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is...

CVE-2015-10068

CVE-2015-10068 affects the danynab movify-j stack; the vulnerability exists in ReviewServiceImpl.java:getByMovieId where manipulating the movieId/username parameter enables SQL injection. Markets show a patch named c3085e01936a4d7eff1eda3093f25d56cc4d2ec5 was released, and remediation is to apply...

CVE-2015-10067 oznetmaster SSharpSmartThreadPool SmartThreadPool.cs race condition

A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the file SSharpSmartThreadPool/SmartThreadPool.cs. The manipulation leads to race condition within a thread. The complexity of an attack is rather high. The...

CVE-2015-10067

A CVE entry (CVE-2015-10067) concerns oznetmaster SSharpSmartThreadPool. The issue is a race condition within the file SSharpSmartThreadPool/SmartThreadPool.cs, affecting an unknown portion of the thread pool logic. The attack complexity is described as high and exploitability as difficult, with ...

CVE-2015-10066 tynx wuersch Store.class.php getByCustomQuery sql injection

A vulnerability was found in tynx wuersch and classified as critical. Affected by this issue is the function packValue/getByCustomQuery of the file backend/base/Store.class.php. The manipulation leads to sql injection. The patch is identified as 66d4718750a741d1053d327a79e285fd50372519. It is...

CVE-2015-10062

creationtimestamp| type| source ---|---|--- 2023-01-17 22:15:35+00:00| seen| Telegram/IYNBDbkegZhC4GGUFLWreP97IY8Kkhpc2NjdWgHPIZ6g...

CVE-2015-10063

creationtimestamp| type| source ---|---|--- 2023-01-17 22:15:28+00:00| seen| https://t.me/cibsecurity/56610...

CVE-2015-10064 VictorFerraresi pokemon-database-php sql injection

A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named dd0e1e6cdf648d6a3deff441f515bcb1d7573d68. It is recommended to apply a patch...