|
267531
|
- |
|
glpi-project
|
glpi
|
Unrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute arbitrary code by adding a file with an executable extension as an attachment to a new ticket, then accessi…
|
NVD-CWE-Other
|
CVE-2015-7684
|
2024-11-21 11:37 |
2015-10-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267532
|
- |
|
mcafee
|
vulnerability_manager
|
Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.9 and earlier allow remote attackers to hijack the…
|
CWE-352
Origin Validation Error
|
CVE-2015-7612
|
2024-11-21 11:37 |
2015-10-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267533
|
- |
|
splunk
|
splunk
|
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.2.x before 6.2.6 and Splunk Light 6.2.x before 6.2.6 allows remote attackers to inject arbitrary web script or HTML via u…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7604
|
2024-11-21 11:37 |
2015-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267534
|
- |
|
konicaminolta
|
ftp_utility
|
Directory traversal vulnerability in Konica Minolta FTP Utility 1.0 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in a RETR command.
|
CWE-22
Path Traversal
|
CVE-2015-7603
|
2024-11-21 11:37 |
2015-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267535
|
- |
|
bisonware
|
bisonftp
|
Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.
|
CWE-22
Path Traversal
|
CVE-2015-7602
|
2024-11-21 11:37 |
2015-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267536
|
- |
|
pcman\'s_ftp_server_project
|
pcman\'s_ftp_server
|
Directory traversal vulnerability in PCMan's FTP Server 2.0.7 allows remote attackers to read arbitrary files via a ..// (dot dot double slash) in a RETR command.
|
CWE-22
Path Traversal
|
CVE-2015-7601
|
2024-11-21 11:37 |
2015-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267537
|
7.5 |
HIGH
Network
|
lenovo
|
system_update
|
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and p…
|
CWE-347
Improper Verification of Cryptographic Signature
|
CVE-2015-7336
|
2024-11-21 11:36 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267538
|
7.0 |
HIGH
Local
|
lenovo
|
system_update
|
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and …
|
CWE-362
Race Condition
|
CVE-2015-7335
|
2024-11-21 11:36 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267539
|
7.8 |
HIGH
Local
|
lenovo
|
system_update
|
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Upd…
|
CWE-269
Improper Privilege Management
|
CVE-2015-7334
|
2024-11-21 11:36 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
267540
|
7.8 |
HIGH
Local
|
lenovo
|
system_update
|
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Upd…
|
CWE-269
Improper Privilege Management
|
CVE-2015-7333
|
2024-11-21 11:36 |
2020-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|