|
274371
|
9.8 |
CRITICAL
Network
|
aviary_image_editor_add-on_for_gravity_forms_project
|
aviary_image_editor_add-on_for_gravity_forms
|
Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPress allows remote attackers to execute arbitrary code by up…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2015-4455
|
2024-11-21 11:31 |
2017-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274372
|
7.5 |
HIGH
Network
|
squashfs_project
|
squashfs
|
(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.
|
CWE-20
Improper Input Validation
|
CVE-2015-4646
|
2024-11-21 11:31 |
2017-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274373
|
5.4 |
MEDIUM
Network
|
clip-bucket
|
clipbucket
|
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via (1) the collection_description parameter to uploa…
|
CWE-79
Cross-site Scripting
|
CVE-2015-4673
|
2024-11-21 11:31 |
2017-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274374
|
7.5 |
HIGH
Network
|
freeradius suse
|
freeradius linux_enterprise_software_development_kit linux_enterprise_server
|
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
|
CWE-295
Improper Certificate Validation
|
CVE-2015-4680
|
2024-11-21 11:31 |
2017-04-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274375
|
7.5 |
HIGH
Adjacent
|
hak5
|
wi-fi_pineapple_firmware
|
Hak5 WiFi Pineapple 2.0 through 2.3 uses predictable CSRF tokens.
|
CWE-284
Improper Access Control
|
CVE-2015-4624
|
2024-11-21 11:31 |
2017-04-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274376
|
7.5 |
HIGH
Network
|
call-cc
|
chicken
|
The string-translate* procedure in the data-structures unit in CHICKEN before 4.10.0 allows remote attackers to cause a denial of service (crash).
|
CWE-20
Improper Input Validation
|
CVE-2015-4556
|
2024-11-21 11:31 |
2017-03-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274377
|
5.5 |
MEDIUM
Local
|
squashfs_project fedoraproject
|
squashfs fedora
|
Integer overflow in the read_fragment_table_4 function in unsquash-4.c in Squashfs and sasquatch allows remote attackers to cause a denial of service (application crash) via a crafted input, which tr…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2015-4645
|
2024-11-21 11:31 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274378
|
6.5 |
MEDIUM
Network
|
hikvision
|
ds-76xxx_series_firmware ds-77xxx_series_firmware
|
Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-4409
|
2024-11-21 11:31 |
2017-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274379
|
6.5 |
MEDIUM
Network
|
hikvision
|
ds-76xxx_series_firmware ds-77xxx_series_firmware
|
Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-4408
|
2024-11-21 11:31 |
2017-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
274380
|
6.5 |
MEDIUM
Network
|
hikvision
|
ds-76xxx_series_firmware ds-77xxx_series_firmware
|
Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-4407
|
2024-11-21 11:31 |
2017-03-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|