|
270331
|
7.5 |
HIGH
Network
|
huawei
|
s2300_firmware
s2700_firmware
s3300_firmware
s3700_firmware
s5300ei_firmware
s5700ei_firmware
s5300si_firmware
s5700si_firmware
s5300hi_firmware
s5700hi_firmware
s6300ei…
|
The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot) via a crafted ICMP request message.
|
CWE-20
Improper Input Validation
|
CVE-2015-3913
|
2024-11-21 11:30 |
2017-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270332
|
7.5 |
HIGH
Network
|
pgbouncer
|
pgbouncer
|
PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packet before a startup packet.
|
CWE-476
NULL Pointer Dereference
|
CVE-2015-4054
|
2024-11-21 11:30 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270333
|
7.2 |
HIGH
Network
|
alienvault
|
open_source_security_information_management
|
The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets array parameter to netscan/do_scan.php.
|
CWE-77
Command Injection
|
CVE-2015-4046
|
2024-11-21 11:30 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270334
|
6.7 |
MEDIUM
Local
|
alienvault
|
open_source_security_information_management
|
The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain privileges via a crafted nmap script.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-4045
|
2024-11-21 11:30 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270335
|
6.1 |
MEDIUM
Network
|
wow_new_media
|
wow_moodboard_lite
|
Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and con…
|
CWE-601
Open Redirect
|
CVE-2015-4070
|
2024-11-21 11:30 |
2017-05-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270336
|
6.1 |
MEDIUM
Network
|
clickfraud-monitoring
phpwhois_project
|
adsense-click-fraud-monitoring
phpwhois
|
Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 for WordPress, allows remote attackers to inject arbitrary web script or HTML vi…
|
CWE-79
Cross-site Scripting
|
CVE-2015-3998
|
2024-11-21 11:30 |
2017-05-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270337
|
9.8 |
CRITICAL
Network
|
cloudera
|
key_trustee_server
|
Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.
|
CWE-320
Key Management Errors
|
CVE-2015-4166
|
2024-11-21 11:30 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270338
|
3.1 |
LOW
Network
|
cloudera
|
navigator
cloudera_manager
|
Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data v…
|
CWE-200
Information Exposure
|
CVE-2015-4078
|
2024-11-21 11:30 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270339
|
8.8 |
HIGH
Network
|
qdpm
|
qdpm
|
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) scheduler pages in qdPM 8.3 allows remote attackers to execute…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2015-3884
|
2024-11-21 11:30 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270340
|
5.3 |
MEDIUM
Network
|
qdpm
|
qdpm
|
qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], which reveals the installation path in an error message.
|
CWE-200
Information Exposure
|
CVE-2015-3882
|
2024-11-21 11:30 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
