|
272191
|
- |
|
thinkshout
|
mailchimp
|
Cross-site scripting (XSS) vulnerability in the MailChimp Signup submodule in the MailChimp module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "administer mailchimp" …
|
CWE-79
Cross-site Scripting
|
CVE-2015-5488
|
2024-11-21 11:33 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272192
|
- |
|
techsmith
|
camtasia_relay
|
Cross-site scripting (XSS) vulnerability in the Camtasia Relay module 6.x-2.x before 6.x-3.2 and 7.x-2.x before 7.x-1.3 for Drupal allows remote authenticated users with the "view meta information" p…
|
CWE-79
Cross-site Scripting
|
CVE-2015-5487
|
2024-11-21 11:33 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272193
|
- |
|
dev4press
|
gd_bbpress_attachments
|
Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary local files via a .. (dot dot) in the tab…
|
CWE-22
Path Traversal
|
CVE-2015-5482
|
2024-11-21 11:33 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272194
|
- |
|
dev4press
|
gd_bbpress_attachments
|
Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab p…
|
CWE-79
Cross-site Scripting
|
CVE-2015-5481
|
2024-11-21 11:33 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272195
|
- |
|
wpslideshow
|
powerplay_gallery
|
Unrestricted file upload vulnerability in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extensi…
|
NVD-CWE-Other
|
CVE-2015-5681
|
2024-11-21 11:33 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272196
|
- |
|
powerplay_gallery_project
|
powerplay_gallery
|
Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) albumid or (2) name paramet…
|
CWE-89
SQL Injection
|
CVE-2015-5599
|
2024-11-21 11:33 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272197
|
- |
|
theeventscalendar
|
eventbrite_tickets
|
Cross-site scripting (XSS) vulnerability in the Event Import page (import-eventbrite-events.php) in the Modern Tribe Eventbrite Tickets plugin before 3.10.2 for WordPress allows remote attackers to i…
|
CWE-79
Cross-site Scripting
|
CVE-2015-5485
|
2024-11-21 11:33 |
2015-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272198
|
- |
|
elasticsearch
|
elasticsearch
|
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
|
CWE-22
Path Traversal
|
CVE-2015-5531
|
2024-11-21 11:33 |
2015-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272199
|
- |
|
apple
|
mac_os_x
|
runner in Install.framework in the Install Framework Legacy component in Apple OS X before 10.10.5 does not properly drop privileges, which allows attackers to execute arbitrary code in a privileged …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-5784
|
2024-11-21 11:33 |
2015-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272200
|
- |
|
apple
|
mac_os_x
|
IOGraphics in Apple OS X before 10.10.5 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2015-3770.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-5783
|
2024-11-21 11:33 |
2015-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|