CVE-2015-10016 jeff-kelley opensim-utils regionscrits.php DatabaseForRegion sql injection

A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the file regionscrits.php. The manipulation of the argument region leads to sql injection. The patch is identified as...

CVE-2015-10015

creationtimestamp| type| source ---|---|--- 2023-01-05 18:22:16+00:00| seen| https://t.me/cibsecurity/55972...

CVE-2015-10014

creationtimestamp| type| source ---|---|--- 2023-01-05 16:18:55+00:00| seen| https://t.me/cibsecurity/55951...

Security Bulletin: jQuery included in ITNM is vulnerable to Cross-site Scripting (XSS) attacks (multiple vulnerabilities)

Summary Multiple vulnerabilities CVE-2015-9251; CVE-2019-11358; CVE-2020-11022; CVE-2020-11023 found in jQuery that is present in IBM Tivoli Network Manager ITNM IP Edition. jQuery versions before 3.0.0 are vulnerable to Cross-site Scripting XSS attacks when a cross-domain Ajax request is perform...

CVE-2015-10015 glidernet ogn-live sql injection

A vulnerability, which was classified as critical, has been found in glidernet ogn-live. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named bc0f19965f760587645583b7624d66a260946e01. It is recommended to apply a patch to fix this issue. The...

CVE-2015-10014 arekk uke finder.rb sql injection

A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipulation leads to sql injection. The identifier of the patch is 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f. It is recommended to apply a patch to fix this issue. T...

CVE-2015-10014 arekk uke finder.rb sql injection

A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipulation leads to sql injection. The identifier of the patch is 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f. It is recommended to apply a patch to fix this issue. T...

CVE-2015-10014

CVE-2015-10014 affects arekk uke, specifically lib/uke/finder.rb, with a SQL injection vulnerability due to manipulation of that component. A patch is referenced: 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f, and VDB-217485 is associated. Connected sources confirm the issue and patch, but no exploits...

CVE-2015-10013

creationtimestamp| type| source ---|---|--- 2023-01-05 12:23:57+00:00| seen| Telegram/IDFCtBJHIuVdW1p5pn3qhyQ6tdAtx2Xuvw90RCkwMg4Htw0...

Security Bulletin: Multiple Vulnerabilities discovered in libraries used by TCRtoolkit in ITNM

Summary Multiple vulnerabilities CVE-2009-4521; CVE-2015-0250; CVE-2017-5662; CVE-2018-8013; CVE-2019-17566; CVE-2020-11987; CVE-2009-4269; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2009-4521; CVE-2021-41033 found in TCRtoolkit component present in IBM Tivoli Network Manager...

CVE-2015-10012

creationtimestamp| type| source ---|---|--- 2023-01-03 12:17:07+00:00| seen| https://t.me/cibsecurity/55797...

CVE-2015-10012 sumocoders FrameworkUserBundle login.html.twig information exposure

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to information exposure through...

CVE-2015-10010

creationtimestamp| type| source ---|---|--- 2023-01-03 00:29:48+00:00| seen| https://t.me/cibsecurity/55774...

CVE-2015-10011

creationtimestamp| type| source ---|---|--- 2023-01-03 00:17:02+00:00| seen| https://t.me/cibsecurity/55763...

CVE-2015-10011

CVE-2015-10011 affects OpenDNS OpenResolve, specifically the resolverapi/endpoints.py component. The root cause is improper output neutralization for logs, enabling high-severity impact per CVSSv3.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8). A patch is identified (9eba6ba5abd...

CVE-2015-10011 OpenDNS OpenResolve endpoints.py neutralization for logs

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is...

CVE-2015-10010 OpenDNS OpenResolve API endpoints.py get cross site scripting

A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoints.py of the component API. The manipulation leads to cross site scripting. The attack may be launched remotely. The complexity of an attac...

CVE-2015-10010

CVE-2015-10010 affects OpenDNS OpenResolve API: the get function in resolverapi/endpoints.py enables cross-site scripting. Exploitation is remote; attack complexity is high and exploitation is reportedly difficult. The patch c680170d5583cd9342fe1af43001fe8b2b8004dd fixes this issue; applying the ...

CVE-2015-10009

creationtimestamp| type| source ---|---|--- 2023-01-02 18:30:25+00:00| seen| https://t.me/cibsecurity/55740...

CVE-2015-10009

A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file app/controllers/codecallercontroller.php. The manipulation of the argument q with the input %5C%27%29;phpinfo%28%29;/ leads to code injection. The exploit has...