|
212451
|
6.1 |
MEDIUM
Network
|
ipswitch
|
moveit_mobile
|
Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/.
|
CWE-79
Cross-site Scripting
|
CVE-2015-7679
|
2024-11-21 11:37 |
2016-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212452
|
8.8 |
HIGH
Network
|
ipswitch
|
moveit_mobile
|
Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vecto…
|
CWE-352
Origin Validation Error
|
CVE-2015-7678
|
2024-11-21 11:37 |
2016-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212453
|
4.3 |
MEDIUM
Network
|
ipswitch
|
moveit_dmz
|
The MOVEitISAPI service in Ipswitch MOVEit DMZ before 8.2 provides different error messages depending on whether a FileID exists, which allows remote authenticated users to enumerate FileIDs via the …
|
CWE-200
Information Exposure
|
CVE-2015-7677
|
2024-11-21 11:37 |
2016-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212454
|
6.5 |
MEDIUM
Network
|
ipswitch
|
moveit_mobile moveit_dmz
|
The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID i…
|
CWE-200
Information Exposure
|
CVE-2015-7675
|
2024-11-21 11:37 |
2016-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212455
|
6.5 |
MEDIUM
Network
|
sauter-controls
|
moduweb_vision
|
Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.
|
CWE-79
Cross-site Scripting
|
CVE-2015-7916
|
2024-11-21 11:37 |
2016-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212456
|
9.8 |
CRITICAL
Network
|
sauter
|
moduweb_vision
|
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
|
CWE-255 CWE-200
Credentials Management Information Exposure
|
CVE-2015-7915
|
2024-11-21 11:37 |
2016-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212457
|
8.1 |
HIGH
Network
|
sauter
|
moduweb_vision
|
Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password.
|
CWE-287 CWE-254
Improper Authentication 7PK - Security Features
|
CVE-2015-7914
|
2024-11-21 11:37 |
2016-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212458
|
9.0 |
CRITICAL
Network
|
westermo
|
weos
|
Westermo WeOS before 4.19.0 uses the same SSL private key across different customers' installations, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanism…
|
CWE-310
Cryptographic Issues
|
CVE-2015-7923
|
2024-11-21 11:37 |
2016-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212459
|
7.7 |
HIGH
Network
|
ntp siemens netapp debian
|
ntp tim_4r-ie_firmware tim_4r-ie_dnp3_firmware oncommand_balance clustered_data_ontap debian_linux
|
NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via a…
|
CWE-287
Improper Authentication
|
CVE-2015-7974
|
2024-11-21 11:37 |
2016-01-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212460
|
5.9 |
MEDIUM
Network
|
wolfssl opensuse mariadb
|
wolfssl leap opensuse mariadb
|
wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CRT) process when allowing ephemeral key exchange without low memory optimization…
|
NVD-CWE-noinfo
|
CVE-2015-7744
|
2024-11-21 11:37 |
2016-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|