35985 matches found
CVE-2015-0256
CVE-2015-0256 entry is rejected/not used; it does not represent an active vulnerability.
EulerOS 2.0 SP9 : python3 (EulerOS-SA-2022-2008)
According to the versions of the python3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Python aka CPython through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. Th...
SUSE SLED15 / SLES15 Security Update : python310 (SUSE-SU-2022:2291-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:2291-1 advisory. - In Python aka CPython up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2022-2008)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2022-1978)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2015-5298
creationtimestamp| type| source ---|---|--- 2022-07-07 22:15:35+00:00| seen| https://t.me/cibsecurity/45767...
CVE-2015-5236
creationtimestamp| type| source ---|---|--- 2022-07-07 20:18:21+00:00| seen| https://t.me/cibsecurity/45754...
CVE-2015-5298
The CVE-2015-5298 entry concerns the Jenkins Google Login Plugin versions 1.0 and 1.1. The vulnerability arises from client-side request modification that bypasses domain-restriction controls, allowing malicious anonymous users to authenticate against Jenkins instances that should be limited to a...
CVE-2015-1784
creationtimestamp| type| source ---|---|--- 2022-07-07 16:15:25+00:00| seen| https://t.me/cibsecurity/45735...
CVE-2015-3207
creationtimestamp| type| source ---|---|--- 2022-07-07 16:15:18+00:00| seen| Telegram/Eh8JyEGp2zu4GX6HzpUBm6VEfvojaKxjpREoY9zDjJqMS0...
CVE-2015-1785
creationtimestamp| type| source ---|---|--- 2022-07-07 16:15:16+00:00| seen| https://t.me/cibsecurity/45727...
CVE-2015-5236
It was discovered that the IcedTea-Web used codebase attribute of the tag on the HTML page that hosts Java applet in the Same Origin Policy SOP checks. As the specified codebase does not have to match the applet's actual origin, this allowed malicious site to bypass SOP via spoofed codebase value...
DEBIAN-CVE-2015-5236
It was discovered that the IcedTea-Web used codebase attribute of the tag on the HTML page that hosts Java applet in the Same Origin Policy SOP checks. As the specified codebase does not have to match the applet's actual origin, this allowed malicious site to bypass SOP via spoofed codebase value...
UBUNTU-CVE-2015-5236
It was discovered that the IcedTea-Web used codebase attribute of the tag on the HTML page that hosts Java applet in the Same Origin Policy SOP checks. As the specified codebase does not have to match the applet's actual origin, this allowed malicious site to bypass SOP via spoofed codebase value...
CVE-2015-5236
The CVE-2015-5236 entry concerns IcedTea-Web, where the codebase attribute of the HTML tag used in the SOP check is not required to match the applet’s actual origin. This could allow a malicious site to bypass Same Origin Policy by spoofing the codebase value. Public documentation provided refer...
CVE-2015-1784
The CVE-2015-1784 issue affects the WordPress NextGEN Gallery plugin prior to version 2.0.77.3. The vulnerability is due to improper handling/validation of user-uploaded files and insufficient protections against unauthorized HTTP requests, enabling an attacker to gain full access to the web appl...
CVE-2015-1785
CVE-2015-1785 concerns the NextGEN Gallery WordPress plugin, affected when using versions prior to 2.0.77.3. The issues are two vulnerabilities enabling full web application access: (1) cross-site request forgery (CSRF) and (2) arbitrary file upload due to inadequate validation of user-uploaded f...