33 matches found
CVE-2020-8115
Revive Adserver
CVE-2020-8115
A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver = 5.0.3 by Jacopo Tediosi. There are currently no known exploits: the session identifier cannot be accessed as it is stored in an http-only cookie as of v3.2.2. On older version...
CVE-2019-8115
A reflected cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when adding an image for during simple product creation...
CVE-2019-8115
CVE-2019-8115 is a reflected XSS vulnerability in Magento Magento 2.2 (before 2.2.10) and 2.3 (before 2.3.3 or 2.3.2-p1). An authenticated admin can inject arbitrary JavaScript when adding an image during simple product creation. Root cause: input reflected in the image-attachment flow allows scr...
CVE-2015-8115
CVE-2015-8115 entry is rejected per the Initial Description.
Microsoft Issues Emergency Patch For Critical Flaw In Windows Containers
Just a few days prior to its monthly patch release, Microsoft released an emergency patch for a critical vulnerability in the Windows Host Compute Service Shim hcsshim library that could allow remote attackers to run malicious code on Windows computers. Windows Host Compute Service Shim hcsshim i...
CVE-2018-8115
CVE-2018-8115 affects the Windows Host Compute Service Shim (hcsshim) library. A remote code execution flaw exists because hcsshim fails to properly validate input when importing a container image, enabling an authenticated administrator to cause arbitrary code execution on the Windows host via a...
CVE-2017-8115
Directory traversal in setup/processors/urlsearch.php aka the search page of an unused processor in MODX Revolution 2.5.7 might allow remote attackers to obtain system directory information...
CVE-2017-8115
Directory traversal in setup/processors/urlsearch.php aka the search page of an unused processor in MODX Revolution 2.5.7 might allow remote attackers to obtain system directory information...
CVE-2017-8115
CVE-2017-8115 : Directory traversal in MODX Revolution 2.5.7’s setup/processors/url_search.php (the search page of an unused processor) could allow remote attackers to obtain system directory information. The description in the core CVE record matches multiple connected sources (NVD, Red Hat advi...
CVE-2014-8115
CVE-2014-8115 affects KIE Workbench 6.0.x (KIE Workbench) with insufficient authorization constraints that allow remote authenticated users to read or write arbitrary files via unknown vectors. The CVSS base score is 6.5 (Medium) with network attack vector and partial confidentiality/integrity/av...
