|
212421
|
4.6 |
MEDIUM
Physics
|
huawei
|
s9300_firmware s9700_firmware s7700_firmware ar200_firmware ar1200_firmware ar2200_firmware ar3200_firmware
|
Huawei S7700, S9700, S9300 before V200R07C00SPC500, and AR200, AR1200, AR2200, AR3200 before V200R005C20SPC200 allows attackers with physical access to the CF card to obtain sensitive information.
|
CWE-200
Information Exposure
|
CVE-2015-7846
|
2024-11-21 11:37 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212422
|
5.9 |
MEDIUM
Network
|
comicsmart
|
ganma\!
|
GANMA! App for iOS does not verify SSL certificates.
|
CWE-295
Improper Certificate Validation
|
CVE-2015-7785
|
2024-11-21 11:37 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212423
|
5.5 |
MEDIUM
Local
|
redhat
|
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus kernel-rt enterprise_mrg
|
The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot re…
|
CWE-254
7PK - Security Features
|
CVE-2015-7837
|
2024-11-21 11:37 |
2017-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212424
|
4.3 |
MEDIUM
Network
|
drupal
|
drupal
|
The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information by leveraging the "Register other accounts" permission and …
|
CWE-200
Information Exposure
|
CVE-2015-7880
|
2024-11-21 11:37 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212425
|
5.4 |
MEDIUM
Network
|
stickynote_project
|
stickynote
|
Cross-site scripting (XSS) vulnerability in the Stickynote module 7.x before 7.x-1.3 for Drupal allows remote authenticated users with permission to create or edit a stickynote to inject arbitrary we…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7879
|
2024-11-21 11:37 |
2017-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212426
|
9.8 |
CRITICAL
Network
|
user_dashboard_project
|
user_dashboard
|
Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2015-7877
|
2024-11-21 11:37 |
2017-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212427
|
5.3 |
MEDIUM
Network
|
qt
|
qtwebkit
|
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.
|
CWE-200
Information Exposure
|
CVE-2015-8079
|
2024-11-21 11:37 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212428
|
5.4 |
MEDIUM
Network
|
centreon
|
centreon
|
Cross-site scripting (XSS) vulnerability in Centreon 2.6.1 (fixed in Centreon 18.10.0 and Centreon web 2.8.27).
|
CWE-79
Cross-site Scripting
|
CVE-2015-7672
|
2024-11-21 11:37 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212429
|
9.8 |
CRITICAL
Network
|
netapp
|
data_ontap
|
NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8…
|
CWE-287
Improper Authentication
|
CVE-2015-7746
|
2024-11-21 11:37 |
2017-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
212430
|
6.1 |
MEDIUM
Network
|
atutor
|
atutor
|
Cross-site scripting (XSS) vulnerability in popuphelp.php in ATutor 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the h parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2015-7711
|
2024-11-21 11:37 |
2017-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|