CVE-2020-8315

CVE-2020-8315 is an insecure dependency load issue observed on CPython 3.6–3.8 when launched on Windows 7. An attacker could cause the interpreter to load and use the attacker’s copy of api-ms-win-core-path-l1-1-0.dll instead of the system’s copy, potentially enabling local impact. The vulnerabil...

CVE-2020-8315

In Python CPython 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...

CVE-2019-8315

An issue was discovered on D-Link DIR-878 devices with firmware 1.12A1. This issue is a Command Injection allowing a remote attacker to execute arbitrary code, and get a root shell. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 POST...

CVE-2019-8315

The CVE-2019-8315 issue affects D-Link DIR-878 devices running firmware 1.12A1. It is a Command Injection vulnerability where an attacker can craft a /HNAP1 POST request that triggers a call to twsystem with untrusted input from the request body (SetIPv4FirewallSettings API), demonstrated by shel...

CVE-2018-8315

An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

CVE-2018-8315

CVE-2018-8315 is an information-disclosure vulnerability in the browser scripting engine. Affected components include ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Explorer 10, where improper handling of object types leads to partial confidentiality/integrity impact. The CVE’s ba...

Microsoft Internet Explorer and Edge CVE-2018-8315 Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Edge are prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft ChakraCore Microsoft Edge Microsoft Internet Explorer 10...

Security Updates for Internet Explorer (September 2018)

The Internet Explorer installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corru...

CVE-2017-8315

Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml...

CVE-2017-8315

Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml...

CVE-2017-8315

Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml...

CVE-2017-8315

Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml...

CVE-2017-8315

Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml...

CVE-2017-8315

Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity attack. An attacker can exploit the vulnerability by implementing malicious code on Androidmanifest.xml...

CVE-2017-8315

CVE-2017-8315 affects the Eclipse IDE’s XML parser used in Eclipse IDE versions 2017.2.5 and earlier. The vulnerability is an XML External Entity (XXE) issue where an attacker can exploit the parser by introducing malicious code in the AndroidManifest.xml, potentially compromising confidentiality...

192.168.0.172 (=4.6.1), 352-wascally (>=0.2.4 <=0.2.5) +5443 more potentially affected by CVE-2015-8315 via ms (>=0.1.0 <=0.7.0)

ms NPM version =0.1.0, =0.2.4, =1.0.0, =0.2.0, =0.0.1, =0.0.8, =1.8.0, =0.1.0, =1.0.0, =0.9.0, =1.4.0, =1.0.1, =3.1.2 - @asbjornenge/microbe =1.0.1 - @auser/metalsmith-watch =1.0.4 and more Source cves: CVE-2015-8315 Source advisory: OSV:GHSA-3FX5-FWVR-XRJG...

CVE-2016-8315

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure Code. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2016-8315

CVE-2016-8315 is a vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Affected versions include 12.0.1, 12.0.2, 12.0.4, 12.1.0 and 12.3.0. The issue allows a low-privileged attacker with network access v...

CVE-2016-8315

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure Code. Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2015-8315

The Node.js ms module is vulnerable to a regular expression denial of service (ReDoS) when parsing extremely long version strings. This affects versions before 0.7.1 and can cause CPU exhaustion, potentially degrading availability. Multiple sources (NVD entry CVE-2015-8315 and OSS/NVD mirrors, np...