|
270111
|
- |
|
emc
|
documentum_content_server
|
Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 allows remote authenticated users to execute arbitra…
|
CWE-20
Improper Input Validation
|
CVE-2015-4534
|
2024-11-21 11:31 |
2015-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270112
|
- |
|
emc
|
documentum_content_server
|
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization after creation of an object, which allows …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-4533
|
2024-11-21 11:31 |
2015-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270113
|
- |
|
emc
|
documentum_content_server
|
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization and does not properly restrict object type…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-4532
|
2024-11-21 11:31 |
2015-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270114
|
- |
|
emc
|
documentum_content_server
|
EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly check authorization for subgroups of privileged groups, which …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-4531
|
2024-11-21 11:31 |
2015-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270115
|
- |
|
emc
|
documentum_webtop documentum_administrator documentum_web_publisher documentum_taskspace documentum_digital_asset_manager
|
Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Digital Assets Manager through 6.5SP6, Documentum Web Publishe…
|
CWE-352
Origin Validation Error
|
CVE-2015-4530
|
2024-11-21 11:31 |
2015-08-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270116
|
- |
|
devexpress
|
ajax_control_toolkit
|
Directory traversal vulnerability in the AjaxFileUpload control in DevExpress AJAX Control Toolkit (aka AjaxControlToolkit) before 15.1 allows remote attackers to write to arbitrary files via a .. (d…
|
CWE-22
Path Traversal
|
CVE-2015-4670
|
2024-11-21 11:31 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270117
|
- |
|
pimcore
|
pimcore
|
SQL injection vulnerability in pimcore before build 3473 allows remote attackers to execute arbitrary SQL commands via the filter parameter to admin/asset/grid-proxy.
|
CWE-89
SQL Injection
|
CVE-2015-4426
|
2024-11-21 11:31 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270118
|
- |
|
pimcore
|
pimcore
|
Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. (dot dot) in the dir param…
|
CWE-22
Path Traversal
|
CVE-2015-4425
|
2024-11-21 11:31 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270119
|
- |
|
oracle mozilla
|
solaris firefox
|
Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CV…
|
CWE-189
Numeric Errors
|
CVE-2015-4496
|
2024-11-21 11:31 |
2015-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270120
|
- |
|
oracle mozilla canonical opensuse
|
solaris firefox ubuntu_linux opensuse
|
Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute ar…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-4493
|
2024-11-21 11:31 |
2015-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|