36092 matches found
CVE-2015-7697 affecting package unzip 6.0-19
CVE-2015-7697 affecting package unzip 6.0-19. A patched version of the package is available...
CVE-2015-4645 affecting package squashfs-tools 4.3-26
CVE-2015-4645 affecting package squashfs-tools 4.3-26. A patched version of the package is available...
CVE-2015-8863 affecting package jq 1.5-6
CVE-2015-8863 affecting package jq 1.5-6. A patched version of the package is available...
EulerOS Virtualization for ARM 64 3.0.2.0 : cpio (EulerOS-SA-2020-1962)
According to the version of the cpio package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attac...
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2020-1962)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
2015.jangsufestival.com Cross Site Scripting vulnerability OBB-1312429
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
2015.jangsufestival.com Cross Site Scripting vulnerability OBB-1302363
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Western Digital My Cloud Multiple Products < 2.21.111 Multiple Vulnerabilities
Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
10er10 (0.23.0), 7th-setin (1.0.2) +404 more potentially affected by CVE-2015-7982 via gm (>=1.0.5, <=1.20.0)
gm NPM version =1.0.5, =0.0.13, =0.0.1, =1.1.0, =1.0.0, =1.1.0, =1.0.0, =0.3.4, =0.5.0, =0.3.1, =0.0.1, =1.3.0, =3.9.1-patch1, =3.11.2-patch1 and more Source cves: CVE-2015-7982 Source advisory: OSV:GHSA-PJH3-JV7W-9JPR...
CVE-2015-9239
creationtimestamp| type| source ---|---|--- 2020-09-01 15:17:48+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c2v2-7rcg-2ch7...
@akryum/hotel (>=0.8.8, <=0.8.12), @bdefore/nivo-patterned-radial-arc (0.79.1) +19 more potentially affected by CVE-2015-9239 via ansi2html (0.0.1)
ansi2html NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ansi2html and may be impacted: - @akryum/hotel =0.8.8, =0.8.7, =2.0.4, =10.3.3, =1.1.0, =1.4.1, =0.9.0-0, =9.12.5, =9.12.9 and more Source cves: CVE-2015-9239 Source advisory:...
1405-authtokens (>=1.0.1, <=1.0.5), 2048.io (0.0.1) +1307 more potentially affected by CVE-2015-1164 via serve-static (>=1.0.1, <=1.7.1)
serve-static NPM version =1.0.1, =1.0.1, =0.2.0, =1.0.37, =7.0.0, =0.0.2, =1.0.0, =0.0.1, =0.13.7, =0.0.5-SNAPSHOT.11, =3.14.2 and more Source cves: CVE-2015-1164 Source advisory: OSV:GHSA-C3X7-GJMX-R2FF...
CVE-2015-1164
creationtimestamp| type| source ---|---|--- 2020-08-31 22:57:02+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c3x7-gjmx-r2ff...
Security Bulletin: IBM Resilient SOAR is Using Components with Known Vulnerabilities - activemq-camel-5.15.9.jar (CVE-2015-5182, CVE-2015-5183, CVE-2015-5184, CVE-2020-1941)
Summary activemq-camel-5.15.9.jar vulnerable to multiple CVEs. Details below. Vulnerability Details CVEID: CVE-2015-5182 DESCRIPTION: Red Hat JBoss A-MQ is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input by the jolokia API. By persuading an...
passport-ldapauth (0.0.3) potentially affected by CVE-2015-7294 via ldapauth (2.0.0)
ldapauth NPM version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ldapauth and may be impacted: - passport-ldapauth 0.0.3 Source cves: CVE-2015-7294 Source advisory: OSV:GHSA-82MG-X548-GQ3J...
group-lunches (>=0.0.2, <=0.0.10), lets-chat-ldap (>=0.1.0, <=0.4.0) +5 more potentially affected by CVE-2015-7294 via ldapauth-fork (2.2.19)
ldapauth-fork NPM version 2.2.19 is affected by a known vulnerability. The following packages have a transitive dependency on ldapauth-fork and may be impacted: - group-lunches =0.0.2, =0.1.0, =0.0.2, =0.1.0, =0.0.0, =0.0.1 Source cves: CVE-2015-7294 Source advisory: OSV:GHSA-82MG-X548-GQ3J...
dependencies_analyzer (>=1.0.0, <=1.0.7), jalangi2 (>=0.2.0, <=0.2.6) +1 more potentially affected by CVE-2015-6584 via datatables (>=1.10.6, <=1.10.9)
datatables NPM version =1.10.6, =1.0.0, =0.2.0, =3.1.0, =3.3.1 Source cves: CVE-2015-6584 Source advisory: OSV:GHSA-4MV4-GMMF-Q382...
Debian: Security Advisory (DLA-2350-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4473-1: libmysofa vulnerabilities
It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095...
vBulletin 5.1.2 < 5.1.9 - Unserialize Code Execution Exploit
Exploit for php platform in category web applications This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'vBulletin 5.1.2 Unserialize Code Execution', 'Description' = %q This module exploits a PHP...