|
212481
|
6.3 |
MEDIUM
Network
|
collne
|
welcart
|
Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) search[colum…
|
CWE-89
SQL Injection
|
CVE-2015-7791
|
2024-11-21 11:37 |
2015-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212482
|
6.1 |
MEDIUM
Network
|
nttdata
|
web_analytics_service
|
Cross-site scripting (XSS) vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Service allows remote attackers to inject arbitrary web scrip…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7786
|
2024-11-21 11:37 |
2015-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212483
|
5.8 |
MEDIUM
Local
|
linux
|
linux_kernel
|
Race condition in the rds_sendmsg function in net/rds/sendmsg.c in the Linux kernel before 4.3.3 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibl…
|
CWE-362
Race Condition
|
CVE-2015-7990
|
2024-11-21 11:37 |
2015-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212484
|
2.3 |
LOW
Local
|
linux
|
linux_kernel
|
The dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive informa…
|
CWE-200
Information Exposure
|
CVE-2015-7885
|
2024-11-21 11:37 |
2015-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212485
|
2.3 |
LOW
Local
|
linux
|
linux_kernel
|
The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive …
|
CWE-200
Information Exposure
|
CVE-2015-7884
|
2024-11-21 11:37 |
2015-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212486
|
6.1 |
MEDIUM
Network
|
let\'s_php\!
|
pbbs
|
Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2015-7783
|
2024-11-21 11:37 |
2015-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212487
|
5.3 |
MEDIUM
Network
|
tails_project
|
tails
|
Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (…
|
CWE-200
Information Exposure
|
CVE-2015-7665
|
2024-11-21 11:37 |
2015-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212488
|
8.6 |
HIGH
Network
|
adcon
|
a840_telemetry_gateway_base_station_firmware
|
The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors.
|
CWE-200
Information Exposure
|
CVE-2015-7934
|
2024-11-21 11:37 |
2015-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212489
|
8.6 |
HIGH
Network
|
adcon
|
a840_telemetry_gateway_base_station_firmware
|
Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network.
|
CWE-200
Information Exposure
|
CVE-2015-7932
|
2024-11-21 11:37 |
2015-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212490
|
8.7 |
HIGH
Network
|
adcon
|
a840_telemetry_gateway_base_station_firmware
|
The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive informa…
|
CWE-200 CWE-20
Information Exposure Improper Input Validation
|
CVE-2015-7931
|
2024-11-21 11:37 |
2015-12-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|