|
212421
|
4.9 |
MEDIUM
Network
|
huawei
|
s9300_firmware s12700_firmware quidway_s9300_firmware ar_firmware quidway_s5300_firmware s5700_firmware s5300_firmware
|
Huawei AR routers with software before V200R007C00SPC100; Quidway S9300 routers with software before V200R009C00; S12700 routers with software before V200R008C00SPC500; S9300, Quidway S5300, and S530…
|
CWE-326
Inadequate Encryption Strength
|
CVE-2015-8085
|
2024-11-21 11:37 |
2016-10-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212422
|
7.5 |
HIGH
Network
|
f5
|
big-ip_global_traffic_manager big-ip_local_traffic_manager big-ip_webaccelerator big-ip_policy_enforcement_manager big-ip_advanced_firewall_manager big-ip_access_policy_manager big-…
|
The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x before 11.6.1; B…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-8022
|
2024-11-21 11:37 |
2016-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212423
|
9.8 |
CRITICAL
Network
|
apple
|
watchos iphone_os mac_os_x airport_base_station_firmware mdnsresponder
|
The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vecto…
|
NVD-CWE-Other
|
CVE-2015-7988
|
2024-11-21 11:37 |
2016-06-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212424
|
9.8 |
CRITICAL
Network
|
apple
|
watchos iphone_os mac_os_x airport_base_station_firmware mdnsresponder
|
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueFor…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-7987
|
2024-11-21 11:37 |
2016-06-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212425
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vul…
|
CWE-200
Information Exposure
|
CVE-2015-7776
|
2024-11-21 11:37 |
2016-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212426
|
5.4 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-20…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7775
|
2024-11-21 11:37 |
2016-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212427
|
9.8 |
CRITICAL
Network
|
zend debian
|
zend_framework debian_linux
|
The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attackers to execute arbitrary SQL commands via a crafted query.
|
CWE-89
SQL Injection
|
CVE-2015-7695
|
2024-11-21 11:37 |
2016-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212428
|
8.1 |
HIGH
Network
|
apache
|
james_server
|
Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.
|
CWE-78
OS Command
|
CVE-2015-7611
|
2024-11-21 11:37 |
2016-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212429
|
5.4 |
MEDIUM
Network
|
wordpress
|
wordpress
|
Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a diff…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7989
|
2024-11-21 11:37 |
2016-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212430
|
7.5 |
HIGH
Network
|
fedoraproject botan_project debian
|
fedora botan debian_linux
|
Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct million-message attacks by measuring time differences, related to decoding of PKCS#1 padding.
|
CWE-200
Information Exposure
|
CVE-2015-7827
|
2024-11-21 11:37 |
2016-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|