Oracle iPlanet Web Server 7.0.x - Authentication Bypass

Oracle iPlanet Web Server 7.0.x has incorrect access control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE a related support policy can be found in the www.oracle.com references attached to this CVE. id:...

MiracleLinux 8 : ruby:2.5 (AXSA:2024-9315:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9315:01 advisory. rexml: REXML ReDoS vulnerability CVE-2024-49761 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note...

CVE-2025-9315

creationtimestamp| type| source ---|---|--- 2025-12-10 11:38:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7mxwff7bp2m 2025-12-10 13:35:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3m7n6gxgq652z...

CVE-2020-9315

PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references...

CVE-2019-9315

In libhevc, there is a missing variable initialization. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112326216...

CVE-2024-9315

creationtimestamp| type| source ---|---|--- 2024-09-28 22:00:31+00:00| seen| https://t.me/cvedetector/6612...

CVE-2024-9315 SourceCodester Employee and Visitor Gate Pass Logging System manage_department.php sql injection

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/managedepartment.php. The manipulation of the argument id leads to sql injection. The attack may ...

CVE-2024-9315 SourceCodester Employee and Visitor Gate Pass Logging System manage_department.php sql injection

A vulnerability was found in SourceCodester Employee and Visitor Gate Pass Logging System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/maintenance/managedepartment.php. The manipulation of the argument id leads to sql injection. The attack may ...

Dahua Security Cameras Weak Password Recovery Mechanism for Forgotten Password (CVE-2017-9315)

Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authorized dealer to reset the admin password. The algorithm used in this mechanism is potentially at risk of being compromised and subsequently utilized by...

Oracle iPlanet Web Server Authentication Bypass (CVE-2020-9315)

An authentication bypass vulnerability exists in Oracle iPlanet Web Server. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Unpatched Bugs in Oracle iPlanet Open Door to Info-Disclosure, Injection

A pair of vulnerabilities in Oracle’s iPlanet Web Server have been disclosed that can lead to sensitive data exposure and image injections onto web pages if exploited. However, no patch is forthcoming for either flaw. The bugs CVE-2020-9315 and CVE-2020-9314 are specifically found in the web...

CVE-2020-9315

PRODUCT NOT SUPPORTED WHEN ASSIGNED Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Administration console, as demonstrated by unauthenticated read access to encryption keys. NOTE: a related support policy can be found in the www.oracle.com references...

CVE-2020-9315

Oracle iPlanet Web Server 7.0.x is affected by two CVEs. CVE-2020-9315: authentication bypass via incorrect access control on admingui/version URIs, enabling unauthenticated read access to encryption keys. CVE-2020-9314: image injection via productNameSrc in the admingui, stemming from an incompl...

CVE-2019-9315

CVE-2019-9315 affects the Android 10 Media Framework component libhevc, where a missing variable initialization creates a condition for information disclosure. The issue could permit remote disclosure without additional execution privileges; exploitation requires user interaction. The CVSS data i...

CVE-2015-9315

creationtimestamp| type| source ---|---|--- 2019-08-14 18:28:24+00:00| seen| https://t.me/cibsecurity/6131...

CVE-2015-9315

The CVE-2015-9315 entry concerns the WordPress plugin NewStatPress , affected versions before 1.0.1 . According to the sources, this plugin contains an SQL injection vulnerability, enabling an attacker to potentially read or modify data associated with the site via a vulnerable input path. The CV...

CVE-2018-9315

...

CVE-2018-9315

CVE-2018-9315 is a reserved/duplicate entry of CVE-2018-9314. The initial record states: "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER... Reservation duplicate of CVE-2018-9314" and all references were removed to prevent accidental use. Connected data include CVE-2018-9314 detailing a vulner...

CVE-2017-9315

The CVE-2017-9315 entry concerns Dahua IP cameras/IP PTZ with a weak admin-password recovery mechanism. According to the provided description and related sources, a user who submits device information could obtain a time-limited temporary password from a Dahua dealer to reset the admin password, ...

CVE-2016-9315

Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance IWSVA version 6.5-SP2BuildLinux1707 and earlier allows authenticated, remote users with least privileges to change Master Admin's password and/or ad...