|
269441
|
8.8 |
HIGH
Network
|
axiomsl
|
axiom
|
AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.
|
CWE-384
Session Fixation
|
CVE-2015-5384
|
2024-11-21 11:32 |
2019-04-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269442
|
7.5 |
HIGH
Network
|
kdcproxy_project
|
kdcproxy
|
python-kdcproxy before 0.3.2 allows remote attackers to cause a denial of service via a large POST request.
|
CWE-20
Improper Input Validation
|
CVE-2015-5159
|
2024-11-21 11:32 |
2018-10-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269443
|
9.8 |
CRITICAL
Network
|
phpwhois_project
|
phpwhois
|
phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.
|
CWE-94
Code Injection
|
CVE-2015-5243
|
2024-11-21 11:32 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269444
|
5.5 |
MEDIUM
Local
|
libvirt redhat
|
libvirt enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_linux_se…
|
libvirt before 2.2 includes Ceph credentials on the qemu command line when using RADOS Block Device (aka RBD), which allows local users to obtain sensitive information via a process listing.
|
CWE-200
Information Exposure
|
CVE-2015-5160
|
2024-11-21 11:32 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269445
|
4.8 |
MEDIUM
Network
|
ibm
|
bigfix_remote_control
|
IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attackers to decrypt traffic by leveraging a weakness in its encryption protocol. IBM …
|
CWE-326
Inadequate Encryption Strength
|
CVE-2015-4953
|
2024-11-21 11:32 |
2018-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269446
|
8.8 |
HIGH
Network
|
ibm
|
endpoint_manager_for_remote_control
|
The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors. IBM X-Force ID: 105196.
|
NVD-CWE-noinfo
|
CVE-2015-4952
|
2024-11-21 11:32 |
2018-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269447
|
6.5 |
MEDIUM
Network
|
ibm
|
tealeaf_customer_experience
|
The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass authentication via unspecified vectors. IBM X-Force ID: 105896.
|
CWE-287
Improper Authentication
|
CVE-2015-4987
|
2024-11-21 11:32 |
2018-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269448
|
5.9 |
MEDIUM
Network
|
ibm
|
bigfix_remote_control
|
IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, which might allow remote attackers to conduct spoofing attacks via unspecified v…
|
CWE-295
Improper Certificate Validation
|
CVE-2015-4954
|
2024-11-21 11:32 |
2018-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269449
|
4.3 |
MEDIUM
Network
|
ibm
|
maximo_asset_management maximo_asset_management_essentials maximo_for_energy_optimization maximo_for_aviation maximo_for_government maximo_for_nuclear_power maximo_for_transportatio…
|
IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6; Tivoli Asset Management for IT 7.1 and 7.2; and certain other IBM products all…
|
CWE-200
Information Exposure
|
CVE-2015-5016
|
2024-11-21 11:32 |
2018-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
269450
|
3.3 |
LOW
Local
|
ibm
|
rational_license_key_server
|
The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local users to obtain sensitive information via unspecified vectors. IBM X-Force ID: 1069…
|
CWE-200
Information Exposure
|
CVE-2015-5045
|
2024-11-21 11:32 |
2018-03-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|