|
275351
|
- |
|
honeywell
|
tuxedo_touch
|
Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests…
|
CWE-284
Improper Access Control
|
CVE-2015-2847
|
2024-11-21 11:28 |
2015-07-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275352
|
- |
|
research-artisan
|
research_artisan_lite
|
Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors.
|
NVD-CWE-noinfo
|
CVE-2015-2975
|
2024-11-21 11:28 |
2015-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275353
|
- |
|
research-artisan
|
research_artisan_lite
|
Multiple cross-site scripting (XSS) vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted HTML document or (2) a crafted…
|
CWE-79
Cross-site Scripting
|
CVE-2015-2976
|
2024-11-21 11:28 |
2015-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275354
|
- |
|
collne
|
welcart
|
Multiple cross-site scripting (XSS) vulnerabilities in the Welcart plugin before 1.4.18 for WordPress allow remote attackers to inject arbitrary web script or HTML via the usces_referer parameter to …
|
CWE-79
Cross-site Scripting
|
CVE-2015-2973
|
2024-11-21 11:28 |
2015-07-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275355
|
- |
|
ghisler
|
total_commander
|
The FileInfo plugin before 2.22 for Ghisler Total Commander allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via (1) a large Size value in the Archive M…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-2869
|
2024-11-21 11:28 |
2015-07-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275356
|
- |
|
canonical
apache
apple
|
ubuntu_linux
http_server
mac_os_x
xcode
mac_os_x_server
|
The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directive may be associated with an authorization setting rather …
|
CWE-264
Permissions, Privileges, and Access Controls
|
CVE-2015-3185
|
2024-11-21 11:28 |
2015-07-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275357
|
- |
|
apache
|
http_server
|
The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remote attackers to conduct HTTP request smuggling attacks via a…
|
CWE-20
CWE-17
Improper Input Validation
Code
|
CVE-2015-3183
|
2024-11-21 11:28 |
2015-07-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275358
|
- |
|
kaseya
|
virtual_system_administrator
|
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote attackers to redirect user…
|
NVD-CWE-Other
|
CVE-2015-2863
|
2024-11-21 11:28 |
2015-07-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275359
|
- |
|
kaseya
|
virtual_system_administrator
|
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and 9.1 before 9.1.0.4 allows remote authenticated users …
|
CWE-22
Path Traversal
|
CVE-2015-2862
|
2024-11-21 11:28 |
2015-07-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
275360
|
- |
|
sysphonic
|
thetis
|
Multiple SQL injection vulnerabilities in Sysphonic Thetis before 2.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2015-2972
|
2024-11-21 11:28 |
2015-07-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
