|
269731
|
7.8 |
HIGH
Local
|
polycom
|
realpresence_resource_manager
|
Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors related to weak passwords.
|
CWE-255
Credentials Management
|
CVE-2015-4681
|
2024-11-21 11:31 |
2017-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269732
|
9.8 |
CRITICAL
Network
|
ellucian
|
banner_student
|
Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2015-4689
|
2024-11-21 11:31 |
2017-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269733
|
5.3 |
MEDIUM
Network
|
ellucian
|
banner_student
|
Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a series of requests.
|
CWE-200
Information Exposure
|
CVE-2015-4688
|
2024-11-21 11:31 |
2017-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269734
|
6.1 |
MEDIUM
Network
|
ellucian
|
banner_student
|
Cross-site scripting (XSS) vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2015-4687
|
2024-11-21 11:31 |
2017-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269735
|
9.3 |
CRITICAL
Local
|
symantec
|
malware_analysis_appliance malware_analyzer_g2
|
Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, caus…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-4523
|
2024-11-21 11:31 |
2017-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269736
|
8.8 |
HIGH
Network
|
concretecms
|
concrete_cms
|
SQL injection vulnerability in Concrete5 5.7.3.1.
|
CWE-89
SQL Injection
|
CVE-2015-4724
|
2024-11-21 11:31 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269737
|
6.1 |
MEDIUM
Network
|
concretecms
|
concrete_cms
|
Multiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.
|
CWE-79
Cross-site Scripting
|
CVE-2015-4721
|
2024-11-21 11:31 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269738
|
8.8 |
HIGH
Network
|
sumo
|
google_analyticator
|
Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
|
CWE-352
Origin Validation Error
|
CVE-2015-4697
|
2024-11-21 11:31 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269739
|
9.8 |
CRITICAL
Network
|
huawei
|
e5756s_firmware
|
Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-4629
|
2024-11-21 11:31 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269740
|
9.8 |
CRITICAL
Network
|
pragyan_cms_project
|
pragyan_cms
|
SQL injection vulnerability in Pragyan CMS 3.0.
|
CWE-89
SQL Injection
|
CVE-2015-4627
|
2024-11-21 11:31 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|