|
271771
|
5.5 |
MEDIUM
Local
|
redhat
|
enterprise_linux_desktop enterprise_linux_workstation enterprise_linux enterprise_linux_server_aus kernel-rt enterprise_mrg
|
The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot re…
|
CWE-254
7PK - Security Features
|
CVE-2015-7837
|
2024-11-21 11:37 |
2017-09-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271772
|
4.3 |
MEDIUM
Network
|
drupal
|
drupal
|
The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information by leveraging the "Register other accounts" permission and …
|
CWE-200
Information Exposure
|
CVE-2015-7880
|
2024-11-21 11:37 |
2017-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271773
|
5.4 |
MEDIUM
Network
|
stickynote_project
|
stickynote
|
Cross-site scripting (XSS) vulnerability in the Stickynote module 7.x before 7.x-1.3 for Drupal allows remote authenticated users with permission to create or edit a stickynote to inject arbitrary we…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7879
|
2024-11-21 11:37 |
2017-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271774
|
9.8 |
CRITICAL
Network
|
user_dashboard_project
|
user_dashboard
|
Multiple SQL injection vulnerabilities in the User Dashboard module 7.x before 7.x-1.4 for Drupal allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2015-7877
|
2024-11-21 11:37 |
2017-09-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271775
|
5.3 |
MEDIUM
Network
|
qt
|
qtwebkit
|
qt5-qtwebkit before 5.4 records private browsing URLs to its favicon database, WebpageIcons.db.
|
CWE-200
Information Exposure
|
CVE-2015-8079
|
2024-11-21 11:37 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271776
|
5.4 |
MEDIUM
Network
|
centreon
|
centreon
|
Cross-site scripting (XSS) vulnerability in Centreon 2.6.1 (fixed in Centreon 18.10.0 and Centreon web 2.8.27).
|
CWE-79
Cross-site Scripting
|
CVE-2015-7672
|
2024-11-21 11:37 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271777
|
9.8 |
CRITICAL
Network
|
netapp
|
data_ontap
|
NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8…
|
CWE-287
Improper Authentication
|
CVE-2015-7746
|
2024-11-21 11:37 |
2017-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271778
|
6.1 |
MEDIUM
Network
|
atutor
|
atutor
|
Cross-site scripting (XSS) vulnerability in popuphelp.php in ATutor 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the h parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2015-7711
|
2024-11-21 11:37 |
2017-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271779
|
9.8 |
CRITICAL
Network
|
pngcrush_project
|
pngcrush
|
Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.
|
CWE-415
Double Free
|
CVE-2015-7700
|
2024-11-21 11:37 |
2017-09-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
271780
|
6.5 |
MEDIUM
Network
|
samsung
|
samsung_mobile
|
LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-7896
|
2024-11-21 11:37 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|