|
272481
|
6.5 |
MEDIUM
Network
|
samba canonical debian
|
samba ubuntu_linux debian_linux
|
The SMB1 implementation in smbd in Samba 3.x and 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4 allows remote authenticated users to modify arbitrary ACLs by usi…
|
CWE-284
Improper Access Control
|
CVE-2015-7560
|
2024-11-21 11:36 |
2016-03-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272482
|
8.8 |
HIGH
Network
|
ibm
|
flashsystem_v9000_firmware
|
Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack the authentication of arbitr…
|
CWE-352
Origin Validation Error
|
CVE-2015-7446
|
2024-11-21 11:36 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272483
|
9.9 |
CRITICAL
Network
|
ibm
|
tivoli_monitoring
|
The portal client in IBM Tivoli Monitoring (ITM) 6.2.2 through FP9, 6.2.3 through FP5, and 6.3.0 through FP6 allows remote authenticated users to gain privileges via unspecified vectors.
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7411
|
2024-11-21 11:36 |
2016-03-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272484
|
5.4 |
MEDIUM
Network
|
ibm
|
maximo_asset_management tivoli_service_request_manager tivoli_asset_management_for_it maximo_asset_management_essentials maximo_for_utilities change_and_configuration_management_databa…
|
SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maximo Asset Management 7.5.0 before 7.5.0.9 IFIX003, …
|
CWE-89
SQL Injection
|
CVE-2015-7448
|
2024-11-21 11:36 |
2016-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272485
|
3.1 |
LOW
Network
|
ibm
|
infosphere_information_server
|
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a…
|
CWE-284
Improper Access Control
|
CVE-2015-7490
|
2024-11-21 11:36 |
2016-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272486
|
5.4 |
MEDIUM
Network
|
ibm
|
websphere_portal
|
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote authenticated users to inject arbitrary web script or HTML via a…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7491
|
2024-11-21 11:36 |
2016-02-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272487
|
6.1 |
MEDIUM
Network
|
ibm
|
websphere_portal
|
Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to inject arbitrary web script or HTML via a crafted U…
|
CWE-79
Cross-site Scripting
|
CVE-2015-7457
|
2024-11-21 11:36 |
2016-02-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272488
|
3.1 |
LOW
Network
|
ibm
|
websphere_portal
|
IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifi…
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-7455
|
2024-11-21 11:36 |
2016-02-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272489
|
7.4 |
HIGH
Network
|
ibm
|
websphere_portal
|
Open redirect vulnerability in IBM WebSphere Portal 8.0.x before 8.0.0.1 CF20 and 8.5.x before 8.5.0.0 CF09 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attac…
|
NVD-CWE-Other
|
CVE-2015-7428
|
2024-11-21 11:36 |
2016-02-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
272490
|
7.5 |
HIGH
Network
|
qnap
|
iartist_lite signage_station
|
QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for th…
|
CWE-18
Source Code
|
CVE-2015-7262
|
2024-11-21 11:36 |
2016-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|