|
273171
|
8.8 |
HIGH
Network
|
codestyling_localization_project
|
codestyling_localization
|
Multiple cross-site request forgery (CSRF) vulnerabilities in the Codestyling Localization plugin 1.99.30 and earlier for Wordpress.
|
CWE-352
Origin Validation Error
|
CVE-2015-4179
|
2024-11-21 11:30 |
2018-02-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273172
|
7.5 |
HIGH
Network
|
jolla
|
sailfish_os
|
Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL.
|
CWE-284
Improper Access Control
|
CVE-2015-3888
|
2024-11-21 11:30 |
2018-01-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273173
|
6.8 |
MEDIUM
Network
|
puppet
|
puppet_enterprise
|
Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Author…
|
CWE-295
Improper Certificate Validation
|
CVE-2015-4100
|
2024-11-21 11:30 |
2017-12-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273174
|
9.8 |
CRITICAL
Network
|
fiyo
|
fiyo_cms
|
Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/app_article/controller/rating.php or (2) user pa…
|
CWE-89
SQL Injection
|
CVE-2015-3934
|
2024-11-21 11:30 |
2017-11-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273175
|
9.8 |
CRITICAL
Network
|
metalgenix
|
genixcms
|
Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) …
|
CWE-89
SQL Injection
|
CVE-2015-3933
|
2024-11-21 11:30 |
2017-11-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273176
|
7.8 |
HIGH
Local
|
proxychains-ng_project
|
proxychains-ng
|
Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referen…
|
CWE-426
Untrusted Search Path
|
CVE-2015-3887
|
2024-11-21 11:30 |
2017-09-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273177
|
7.5 |
HIGH
Network
|
litespeedtech
|
openlitespeed
|
Use-after-free vulnerability in Open Litespeed before 1.3.10.
|
CWE-416
Use After Free
|
CVE-2015-3890
|
2024-11-21 11:30 |
2017-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273178
|
8.1 |
HIGH
Network
|
helpdeskpro
|
helpdesk_pro
|
The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted language.save task.
|
CWE-74
Injection
|
CVE-2015-4075
|
2024-11-21 11:30 |
2017-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273179
|
7.5 |
HIGH
Network
|
helpdesk_pro_project
|
helpdesk_pro
|
Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter in a ticket.download…
|
CWE-22
Path Traversal
|
CVE-2015-4074
|
2024-11-21 11:30 |
2017-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
273180
|
9.8 |
CRITICAL
Network
|
helpdesk_pro_project
|
helpdesk_pro
|
Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) ticket_code or (2) email parameter or (…
|
CWE-89
SQL Injection
|
CVE-2015-4073
|
2024-11-21 11:30 |
2017-09-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|