27 December 2015

11 results · Feed

• Unscored —
  CVE-2015-7665

  Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, whic…

  Dec 27, 2015
• Unscored —
  CVE-2015-7783

  Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary w…

  Dec 27, 2015
• Unscored —
  CVE-2015-6538

  The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote atta…

  Dec 27, 2015
• Unscored —
  CVE-2015-6537

  SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrar…

  Dec 27, 2015
• Unscored —
  CVE-2015-6005

  Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inje…

  Dec 27, 2015
• Unscored —
  CVE-2015-6004

  Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary…

  Dec 27, 2015
• Unscored —
  CVE-2015-8252

  The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows…

  Dec 27, 2015
• Unscored —
  CVE-2015-8263

  NETGEAR WNR1000v3 devices with firmware 1.0.2.68 use the same source port number for every DNS query, which makes it ea…

  Dec 27, 2015
• Unscored —
  CVE-2015-8254

  The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which make…

  Dec 27, 2015
• Unscored —
  CVE-2015-8253

  The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic …

  Dec 27, 2015
• Unscored —
  CVE-2015-8262

  Buffalo WZR-600DHP2 devices with firmware 2.09, 2.13, and 2.16 use an improper algorithm for selecting the ID value in …

  Dec 27, 2015