|
270661
|
8.8 |
HIGH
Network
|
dell
|
integrated_remote_access_controller_firmware
|
Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute arbitrary administrative HTTP commands.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7274
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270662
|
9.8 |
CRITICAL
Network
|
dell
|
integrated_remote_access_controller_firmware
|
Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has XXE.
|
CWE-611
XXE
|
CVE-2015-7273
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270663
|
9.8 |
CRITICAL
Network
|
dell
|
integrated_remote_access_controller_firmware
|
Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-7272
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270664
|
9.8 |
CRITICAL
Network
|
dell
|
integrated_remote_access_controller_firmware
|
Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format string issue in racadm getsystinfo.
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2015-7271
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270665
|
7.8 |
HIGH
Local
|
dell
|
integrated_remote_access_controller_firmware
|
Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows directory traversal.
|
CWE-22
Path Traversal
|
CVE-2015-7270
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270666
|
7.5 |
HIGH
Network
|
proxygen_project
|
proxygen
|
Facebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote attackers to conduct hijacking attacks and bypass ACL checks.
|
CWE-284
Improper Access Control
|
CVE-2015-7265
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270667
|
9.8 |
CRITICAL
Network
|
proxygen_project
|
proxygen
|
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes, which allows hijacking and injection attacks.
|
CWE-74
Injection
|
CVE-2015-7264
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270668
|
7.5 |
HIGH
Network
|
proxygen_project
|
proxygen
|
The SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct hijacking attacks and bypass ACL checks via a crafted host value.
|
CWE-284
Improper Access Control
|
CVE-2015-7263
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270669
|
7.8 |
HIGH
Local
|
vertiv
|
liebert_multilink_automated_shutdown
|
Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7260
|
2024-11-21 11:36 |
2017-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
270670
|
5.5 |
MEDIUM
Local
|
libtiff
|
libtiff
|
LibTIFF allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file.
|
CWE-399
Resource Management Errors
|
CVE-2015-7313
|
2024-11-21 11:36 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|