CVE-2025-4715

Campcodes Sales and Inventory System 1.0 contains a SQL injection in the /pages/view_application.php file. The vulnerability is triggered by manipulating the cid parameter, allowing remote exploitation. Multiple sources in the provided documents confirm the issue and its public disclosure, with n...

RHEL 8 : cups (RHSA-2024:4715)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:4715 advisory. The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: Cupsd...

CVE-2024-4715

A vulnerability, which was classified as problematic, was found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /model/updategrade.php. The manipulation of the argument name leads to cross site scripting. It is possible to initiate the attack...

CVE-2018-4715

Rejected reason: This candidate is unused by its CNA...

CVE-2022-4715

creationtimestamp| type| source ---|---|--- 2023-01-23 18:31:13+00:00| seen| https://t.me/cibsecurity/56855 2025-04-03 19:35:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10336...

CVE-2022-4715 Structured Content < 1.5.1 - Contributor+ Stored XSS in Shortcode

The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high...

CVE-2022-4715

The CVE concerns The Structured Content WordPress plugin, prior to version 1.5.1. The vulnerability stems from not validating/escaping certain shortcode attributes before echoing them, enabling Stored XSS when a user with as little as a contributor role views a page, potentially affecting higher-...

Rockwell (CVE-2012-4715) (deprecated)

This plugin has been deprecated This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable, Inc. @DEPRECATED@ Disabled on 2023/08/03 due to being generated via a catchall regex...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Django vulnerability (USN-4715-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4715-1 advisory. Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue to extract files...

Debian DSA-4715-1 : imagemagick - security update

This update fixes multiple vulnerabilities in Imagemagick: Various memory handling problems and cases of missing or incomplete input sanitising may result in denial of service, memory disclosure or potentially the execution of arbitrary code if malformed image files are processed. C Tenable Netwo...

CVE-2015-4715

The CVE-2015-4715 entry affects ownCloud Server (Dropbox storage integration) via the Dropbox-PHP OAuth/Curl.php fetch function when an external Dropbox storage is mounted. Affected versions: ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4. The vulnerability allows remote adm...

CVE-2015-4715

The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote administrators of Dropbox.com to read arbitrary files via an @ at sign character in unspecified POS...

Security Bulletin: A vulnerability has been identified in IBM Spectrum Scale where remote authenticated attacker can execute arbitrary command(CVE 2019-4715)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale that could allow remote authenticated attacker to execute arbitrary command on the system. This vulnerability only affects systems where the SMB protocol is enabled. A fix for this vulnerability is available...

CVE-2019-4715

IBM Spectrum Scale versions 4.2.x (4.2.0.0–4.2.3.18) and 5.0.x (5.0.0.0–5.0.4.0) are affected by CVE-2019-4715, allowing remote authenticated attackers to execute arbitrary commands via a specially crafted request (notably when SMB is enabled). Remediation provided by IBM fixes: upgrade to 4.2.3....

CVE-2017-4715

...

CVE-2017-4715

CVE-2017-4715 is rejected/not used and does not represent an active vulnerability entry.

CVE-2016-4715

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

CVE-2016-4715

CVE-2016-4715 concerns the Date & Time Pref Pane in macOS OS X before 10.12. A crafted application can abuse the handling of the .GlobalPreferences file to disclose the user’s location. The entry is tied to a local attack vector with user interaction required, and the impact is described as infor...

CVE-2016-4715

The Date & Time Pref Pane component in Apple OS X before 10.12 mishandles the .GlobalPreferences file, which allows attackers to discover a user's location via a crafted app...

Updated owncloud package fixes security vulnerabilities

In ownCloud before 6.0.8 and 8.0.4, a bug in the SDK used to connect ownCloud against the Dropbox server might allow the owner of "Dropbox.com" to gain access to any files on the ownCloud server if an external Dropbox storage was mounted CVE-2015-4715. In ownCloud before 6.0.8 and 8.0.4, the...