35976 matches found
CVE-2015-10043
CVE-2015-10043 describes a path-traversal vulnerability in the abreen Apollo PHP scripts. The issue arises from manipulation of the file argument, affecting an unknown part of the codebase. A patch is available: 6206406630780bbd074aff34f4683fb764faba71, and applying it is recommended to fix the i...
CVE-2015-10042
creationtimestamp| type| source ---|---|--- 2023-01-14 00:36:41+00:00| seen| https://t.me/cibsecurity/56503...
CVE-2015-10042 Dovgalyuk AIBattle procedures.php registerUser sql injection
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is...
CVE-2015-10042
CVE-2015-10042 affects Dovgalyuk AIBattle; SQL injection via the registerUser function in site/procedures.php when processing the postLogin argument. Patch identifier 448e9880aac18ae7832f8d065e03e46ce0f1d3e3 is referenced, with VDB-218305 assigned to this vulnerability. Note: the vulnerability no...
CVE-2015-10042 Dovgalyuk AIBattle procedures.php registerUser sql injection
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function registerUser of the file site/procedures.php. The manipulation of the argument postLogin leads to sql injection. The identifier of the patch is...
CVE-2015-10041 Dovgalyuk AIBattle procedures.php sendComments sql injection
UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendComments of the file site/procedures.php. The manipulation of the argument text leads to sql injection. The name of the patch is...
CVE-2015-10041
The CVE-2015-10041 entry affects Dovgalyuk AIBattle, specifically the sendComments function in site/procedures.php. The vulnerability arises from manipulating the text argument, enabling SQL injection. A patch is identified by the name e3aa4d0900167641d41cbccf53909229f00381c9; PT-2023-10220 and o...
CVE-2015-10040
The CVE-2015-10040 entry concerns gitlearn. The vulnerability affects the Escape Sequence Handler’s getGrade/getOutOf function in scripts/config.sh, where manipulation can lead to injection. The issue is exploitable remotely, with patch 3faa5deaa509012069afe75cd03c21bda5050a64 cited as the fix. M...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to cross-site scripting in jQuery (CVE-2015-9251).
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to cross-site scripting in jQuery, caused by improper validation of user-supplied input. CVE-2015-9251. jQuery is used by the runtime components included in IBM Watson Speech. Please read the details for...
CVE-2015-2291
creationtimestamp| type| source ---|---|--- 2023-01-12 18:05:06+00:00| exploited| https://t.me/truesecator/3932 2023-02-10 11:10:31+00:00| seen| MISP/9170cfc5-2232-445c-bca8-923516dfdd3f 2023-02-13 12:15:03+00:00| exploited| https://t.me/itsecnews/2187 2023-06-14 21:10:03+00:00| seen|...
FreeBSD : cassandra3 -- jBCrypt integer overflow (b3fd12ea-917a-11ed-acbe-b42e991fc52e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the b3fd12ea-917a-11ed-acbe-b42e991fc52e advisory. - Integer overflow in the cryptraw method in the key-stretching implementation in jBCrypt before 0.4...
SUSE SLES12: apache2-mod_php74 / php74 / php74-bcmath / php74-bz2 / etc (SUSE-SU-2023:0072-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0072-1 advisory. - CVE-2022-31631: Fixed an issue where PDO::quote would return an unquoted string bsc1206958. Tenable has extracted the preceding...
CVE-2015-10039
CVE-2015-10039 affects dobos domino, exploiting a vulnerability in the library file src/Complex.Domino.Lib/Lib/EntityFactory.cs that enables SQL injection. The issue is fixed by upgrading to version 0.1.5524.38553; the patch is identified as 16f039073709a21a76526110d773a6cce0ce753a. Patched versi...
CVE-2015-10038 nym3r0s pplv2 sql injection
A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named 28f8b0550104044da09f04659797487c59f85b00. It is recommended to apply a patch to fix this issue. The...
CVE-2015-10038
CVE-2015-10038 affects nym3r0s pplv2, with a SQL injection vulnerability arising from manipulation of an unknown functionality. The vulnerability is described as critical, and the patch 28f8b0550104044da09f04659797487c59f85b00 is recommended as the fix. Connected sources consistently identify the...
CVE-2015-10038 nym3r0s pplv2 sql injection
A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named 28f8b0550104044da09f04659797487c59f85b00. It is recommended to apply a patch to fix this issue. The...
CVE-2015-10037 ACI_Escola sql injection
A vulnerability, which was classified as critical, was found in ACIEscola. This affects an unknown part. The manipulation leads to sql injection. The identifier of the patch is 34eed1f7b9295d1424912f79989d8aba5de41e9f. It is recommended to apply a patch to fix this issue. The identifier VDB-21796...
CVE-2015-10037
CVE-2015-10037 affects ACI_Escola with a SQL injection vulnerability in an unspecified part. Reported as critical (CVSS v3.1: 9.8, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The issue is mitigated by applying patch 34eed1f7b9295d1424912f79989d8aba5de41e9f, and the vulnerability is associated with VDB-...
CVE-2015-10036 kylebebak dronfelipe sql injection
A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection. The patch is named 87405b74fe651892d79d0dff62ed17a7eaef6a60. It is recommended to apply a patch to fix this...
