|
272261
|
5.9 |
MEDIUM
Network
|
fedoraproject
|
spin-kickstarts
|
fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download Fedora Atomic updates.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-3229
|
2024-11-21 11:28 |
2017-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272262
|
9.8 |
CRITICAL
Network
|
berta
|
berta_cms
|
Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with an executable extension, then accessing it via a direct re…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2015-2780
|
2024-11-21 11:28 |
2017-10-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272263
|
7.4 |
HIGH
Network
|
rakutencard
|
rakuten_card
|
Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow remote attackers to execute man-in-the-middle attacks.
|
CWE-295
Improper Certificate Validation
|
CVE-2015-2988
|
2024-11-21 11:28 |
2017-10-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272264
|
7.5 |
HIGH
Network
|
accellion
|
file_transfer_appliance
|
Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices before FTA_9_11_210 allows remote attackers to read arbitrary files via a .. (d…
|
CWE-22
Path Traversal
|
CVE-2015-2856
|
2024-11-21 11:28 |
2017-10-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272265
|
7.5 |
HIGH
Network
|
tcpdump opensuse_project opensuse
|
tcpdump leap
|
print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).
|
CWE-20
Improper Input Validation
|
CVE-2015-3138
|
2024-11-21 11:28 |
2017-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272266
|
4.7 |
MEDIUM
Local
|
openhpi
|
openhpi
|
openhpi/Makefile.am in OpenHPI before 3.6.0 uses world-writable permissions for /var/lib/openhpi directory, which allows local users, when quotas are not properly setup, to fill the filesystem hostin…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2015-3248
|
2024-11-21 11:28 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272267
|
6.5 |
MEDIUM
Network
|
uronode nodejs debian
|
uro_node node.js debian_linux
|
node 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service (bandwidth consumption).
|
CWE-399
Resource Management Errors
|
CVE-2015-2927
|
2024-11-21 11:28 |
2017-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272268
|
5.3 |
MEDIUM
Network
|
simple_ads_manager_project
|
simple_ads_manager
|
WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information.
|
CWE-200
Information Exposure
|
CVE-2015-2826
|
2024-11-21 11:28 |
2017-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272269
|
7.0 |
HIGH
Local
|
ossec
|
ossec
|
syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-3222
|
2024-11-21 11:28 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272270
|
6.1 |
MEDIUM
Network
|
askbot
|
askbot
|
Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.
|
CWE-79
Cross-site Scripting
|
CVE-2015-3169
|
2024-11-21 11:28 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|