48 matches found
CVE-2026-5415
creationtimestamp| type| source ---|---|--- 2026-06-05 20:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnkwim4aqz2b 2026-06-06 00:00:16+00:00| seen| https://bsky.app/profile/pulse-wp.com/post/3mnldv73u4r2d 2026-06-13 05:16:07+00:00| seen|...
CVE-2012-5415
Race condition on Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service CPU consumption or device reload by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272...
CVE-2024-5415 Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/backup.php, 'comments' and 'db' parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to...
CVE-2024-5415
PhpMyBackupPro 2.3 is affected by a cross‑site scripting (XSS) vulnerability in the /phpmybackuppro/backup.php endpoint via the comments and db parameters. The issue allows crafting a URL to exfiltrate session details; CVSSv3.1 vectors indicate Network attack, low complexity, no privileges, user ...
CVE-2024-5415 Cross-Site Scripting (XSS) vulnerability on PhpMyBackupPro
A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/backup.php, 'comments' and 'db' parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to...
Oracle Linux 8 : exempi (ELSA-2024-3066)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-3066 advisory. - Fix CVE-2020-18652 - Fix CVE-2020-18651 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
CVE-2023-5415
creationtimestamp| type| source ---|---|--- 2023-12-20 13:48:34+00:00| seen| https://t.me/ctinow/156958...
CVE-2023-5415
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsfaddcategory function in versions up to, and including, 3.4. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to...
CVE-2023-5415
CVE-2023-5415 concerns the WordPress plugin Funnelforms Free. The vulnerability arises from a missing capability check in the fnsf_add_category function, allowing authenticated users with subscriber-level permissions and above to add new categories. Affected: Funnelforms Free (WordPress plugin) u...
CVE-2016-5415
CVE-2016-5415 entry is rejected/not used and does not represent an active vulnerability.
Mageia: Security Advisory (MGASA-2018-0018)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox Security Advisory (MFSA2017-05) - Linux
This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
CVE-2020-5415
Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this...
CVE-2020-5415 Concourse's GitLab auth allows impersonation
Concourse, versions prior to 6.3.1 and 6.4.1, in installations which use the GitLab auth connector, is vulnerable to identity spoofing by way of configuring a GitLab account with the same full name as another user who is granted access to a Concourse team. GitLab groups do not have this...
CVE-2020-5415
CVE-2020-5415 affects Concourse when using the GitLab authentication connector. Versions prior to 6.3.1 and 6.4.1 are vulnerable to identity spoofing by configuring a GitLab account whose full name matches another user granted access to a Concourse team, allowing impersonation. GitLab groups are ...
CVE-2019-5415
A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to...
CVE-2019-5415
A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to...