|
280351
|
9.8 |
CRITICAL
Network
|
cloudera
|
key_trustee_server
|
Cloudera Key Trustee Server before 5.4.3 does not store keys synchronously, which might allow attackers to have unspecified impact via vectors related to loss of an encryption key.
|
CWE-320
Key Management Errors
|
CVE-2015-4166
|
2024-11-21 11:30 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280352
|
3.1 |
LOW
Network
|
cloudera
|
navigator
cloudera_manager
|
Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to obtain cleartext data v…
|
CWE-200
Information Exposure
|
CVE-2015-4078
|
2024-11-21 11:30 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280353
|
8.8 |
HIGH
Network
|
qdpm
|
qdpm
|
Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) reports, and (7) scheduler pages in qdPM 8.3 allows remote attackers to execute…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2015-3884
|
2024-11-21 11:30 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280354
|
5.3 |
MEDIUM
Network
|
qdpm
|
qdpm
|
qdPM 8.3 allows remote attackers to obtain sensitive information via invalid ID value to index.php/users/info/id/[ID], which reveals the installation path in an error message.
|
CWE-200
Information Exposure
|
CVE-2015-3882
|
2024-11-21 11:30 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280355
|
7.5 |
HIGH
Network
|
qdpm
|
qdpm
|
Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to (1) core/config/databases.yml, (2) core/log/qdPM_prod.log, or (3) core/apps/qd…
|
CWE-200
Information Exposure
|
CVE-2015-3881
|
2024-11-21 11:30 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280356
|
6.1 |
MEDIUM
Network
|
qdpm
|
qdpm
|
Multiple cross-site scripting (XSS) vulnerabilities in qdPM 8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) search[keywords] parameter to index.php/users page; the (2) "…
|
CWE-79
Cross-site Scripting
|
CVE-2015-3883
|
2024-11-21 11:30 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280357
|
7.5 |
HIGH
Network
|
dell
|
vce_vision_intelligent_operations
|
The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon a request for the Settings screen, which allows remote attackers to discover th…
|
CWE-200
Information Exposure
|
CVE-2015-4057
|
2024-11-21 11:30 |
2017-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280358
|
6.7 |
MEDIUM
Local
|
dell
|
vce_vision_intelligent_operations
|
The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which makes it easier for local users to discover credentials by leveraging administrati…
|
CWE-310
Cryptographic Issues
|
CVE-2015-4056
|
2024-11-21 11:30 |
2017-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280359
|
6.8 |
MEDIUM
Network
|
unisys
|
mcp-firmware
|
Unisys Libra 43xx, 63xx, and 83xx, and FS600 class systems with MCP-FIRMWARE 40.0 before 40.0IC4 Build 270 might allow remote authenticated users to cause a denial of service (data corruption or syst…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2015-4049
|
2024-11-21 11:30 |
2017-02-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280360
|
9.8 |
CRITICAL
Network
|
opensuse
php
|
leap
php
|
Use-after-free vulnerability in the spl_ptr_heap_insert function in ext/spl/spl_heap.c in PHP before 5.5.27 and 5.6.x before 5.6.11 allows remote attackers to execute arbitrary code by triggering a f…
|
NVD-CWE-Other
|
CVE-2015-4116
|
2024-11-21 11:30 |
2016-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
