Skip to content
OpenAdvisories

Archive

28 September 2015

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2015-3203 Public exploit

    Unrestricted file upload vulnerability in h5ai before 0.25.0 allows remote attackers to execute arbitrary code by uploa…

  • Unscored —
    CVE-2015-7387 Public exploit EPSS 80%

    ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restriction…

  • Unscored —
    CVE-2015-5082 Public exploit EPSS 70%

    Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) NE…

  • Unscored —
    CVE-2015-7382 Public exploit

    SQL injection vulnerability in install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attacker…

  • Unscored —
    CVE-2015-7381 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in install.php in Web Reference Database (aka refbase) through 0.9.6…

  • Unscored —
    CVE-2015-6008 Public exploit

    install.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands…

  • Unscored —
    CVE-2015-6009 Public exploit

    Multiple SQL injection vulnerabilities in Web Reference Database (aka refbase) through 0.9.6 allow remote attackers to …