3920 matches found
CVE-2016-7981
creationtimestamp| type| source ---|---|--- 2016-10-19 20:44:12+00:00| published-proof-of-concept| https://t.me/FullDisclosure/177...
CVE-2015-5546
creationtimestamp| type| source ---|---|--- 2015-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37868...
CVE-2015-4117
creationtimestamp| type| source ---|---|--- 2015-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37369...
CVE-2014-8612
creationtimestamp| type| source ---|---|--- 2015-01-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35938...
PHPSlash 0.5.3 2/0.6.1 URL Block Arbitrary File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2724/info PHPSlash is a widely used open source Groupware utility. PHPSlash contains a vulnerability which may disclose files readable to the webserver process on the underlying host to PHPSlash users who can 'edit' URL...
Design/Logic Flaw
cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...
CVE-2014-3496
cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...
PT-2014-5359 · Red Hat · Openshift Origin +1
Name of the Vulnerable Software and Affected Versions: OpenShift Origin and Enterprise versions 1.2.8 through 2.1.1 Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with certain file extensions in a cartridge manifest fil...
Origin: Command execution as root via downloadable cartridge source-url
cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...
Origin: Command execution as root via downloadable cartridge source-url
cartridgerepository.rb in OpenShift Origin and Enterprise 1.2.8 through 2.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a Source-Url ending with a 1 .tar.gz, 2 .zip, 3 .tgz, or 4 .tar file extension in a cartridge manifest file...
CVE-2013-4123
creationtimestamp| type| source ---|---|--- 2013-07-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26886...
CVE-2013-4878
creationtimestamp| type| source ---|---|--- 2013-06-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25986 2025-09-19 21:02:30+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz7r6smitl2g...
CVE-2011-4275
creationtimestamp| type| source ---|---|--- 2013-02-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24492 2013-02-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24529 2013-04-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24969 2013-10-20...
CVE-2013-1465
creationtimestamp| type| source ---|---|--- 2013-02-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24465...
CVE-2012-5865
creationtimestamp| type| source ---|---|--- 2012-12-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/23253...
CVE-2011-4640
creationtimestamp| type| source ---|---|--- 2012-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37943...
CVE-2012-1769
creationtimestamp| type| source ---|---|--- 2012-07-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19962...
CVE-2012-3576
creationtimestamp| type| source ---|---|--- 2012-06-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/19023 2025-05-02 17:00:09+00:00| published-proof-of-concept| Telegram/LSICrY0gcRIsk405uNpqA1GPRNRWrHt6G2acZwumbe6RcdQ...
CVE-2012-3578
creationtimestamp| type| source ---|---|--- 2012-06-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37370...
PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities
PHP Address Book 7.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/53598/info PHP Address Book is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...