Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-0998 State: PUBLISHED Published: 2015-03-29T10:00:00 Last Updated: 2024-08-06T04:26:11.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 transmit cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-085-01 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-02
CVE ID: CVE-2015-0999 State: PUBLISHED Published: 2015-03-29T10:00:00 Last Updated: 2024-08-06T04:26:11.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Schneider Electric InduSoft Web Studio before 7.1.3.4 SP3 Patch 4 and InTouch Machine Edition 2014 before 7.1.3.4 SP3 Patch 4 store cleartext OPC User credentials in a configuration file, which allows local users to obtain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-01 - https://ics-cert.us-cert.gov/advisories/ICSA-15-085-01 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-
//ics-cert.us-cert.gov/advisories/ICSA-15-085-01 - http://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2015-054-02
CVE ID: CVE-2015-1000000 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote file upload vulnerability in mailcwp v1.99 wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=138
CVE ID: CVE-2015-1000001 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96554 - http://www.vapidlabs.com/advisory.php?v=139
CVE ID: CVE-2015-1000002 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Proxy in filedownload v1.4 wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97100 - http://www.vapidlabs.com/advisory.php?v=140
CVE ID: CVE-2015-1000003 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blind SQL Injection in filedownload v1.4 wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=140 - http://www.securityfocus.com/bid/97106
CVE ID: CVE-2015-1000004 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: XSS in filedownload v1.4 wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=140 - http://www.securityfocus.com/bid/97107
CVE ID: CVE-2015-1000005 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote file download vulnerability in candidate-application-form v1.0 wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=142 - http://www.securityfocus.com/bid/97108
CVE ID: CVE-2015-1000006 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote file download vulnerability in recent-backups v0.7 wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=144 - http://www.securityfocus.com/bid/97125
CVE ID: CVE-2015-1000007 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote file download vulnerability in wptf-image-gallery v1.03 Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=148
CVE ID: CVE-2015-1000008 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Path Disclosure Vulnerability in wordpress plugin MP3-jPlayer v2.3.2 Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=149
CVE ID: CVE-2015-1000009 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open proxy in Wordpress plugin google-adsense-and-hotel-booking v1.05 Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=151
CVE ID: CVE-2015-1000010 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote file download in simple-image-manipulator v1.0 wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94563 - http://www.vapidlabs.com/advisory.php?v=147
CVE ID: CVE-2015-1000011 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blind SQL Injection in wordpress plugin dukapress v2.5.9 Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=152 - http://www.securityfocus.com/bid/94567
CVE ID: CVE-2015-1000012 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local File Inclusion Vulnerability in mypixs v0.3 wordpress plugin Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94495 - http://www.vapidlabs.com/advisory.php?v=154
CVE ID: CVE-2015-1000013 State: PUBLISHED Published: 2016-10-06T14:00:00 Last Updated: 2024-08-06T08:58:26.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1 Additional Analyst Notes: - CVE Program Container: References: - http://www.vapidlabs.com/advisory.php?v=153 - http://www.securityfocus.com/bid/94497
CVE ID: CVE-2015-10001 State: PUBLISHED Published: 2021-11-01T08:45:47 Last Updated: 2024-08-06T08:58:24.557Z Vendors: Unknown Products: WP-Stats Problem Types: CWE-352 Description: The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing attacker to make logged in high privilege users change them and set Cross-Site Scripting payloads Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f5c3dfea-7203-4a98-88ff-aa6a24d03734 - https://www.openwall.com/lists/oss-security/2015/06/17/6
CVE ID: CVE-2015-10002 State: PUBLISHED Published: 2022-03-28T18:00:15.000Z Last Updated: 2025-04-15T14:45:44.559Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: Kiddoware Products: Kids Place Problem Types: CWE-404 Description: A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button causes a local denial of service. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.118359
CVE ID: CVE-2015-10003 State: PUBLISHED Published: 2022-07-17T06:35:12.000Z Last Updated: 2025-04-15T14:04:51.775Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: FileZilla Products: Server Problem Types: CWE-441 Description: A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the attack remotely. Upgrading to version 0.9.51 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
s recommended to upgrade the affected component. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitygalore.com/site3/filezilla_ftp_server_advisory - https://vuldb.com/?id.97203
CVE ID: CVE-2015-10004 State: PUBLISHED Published: 2022-12-27T21:13:11.967Z Last Updated: 2025-04-11T22:58:21.630Z Vendors: github.com/robbert229/jwt Products: github.com/robbert229/jwt Problem Types: CWE 208: Information Exposure Through Timing Discrepancy Description: Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency connection, an attacker may use this to determine the expected HMAC. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/robbert229/jwt/commit/ca1404ee6e83fcbafb66b09ed0d543850a15b654 - https://github.com/robbert229/jwt/issu
tps://github.com/robbert229/jwt/commit/ca1404ee6e83fcbafb66b09ed0d543850a15b654 - https://github.com/robbert229/jwt/issues/12 - https://pkg.go.dev/vuln/GO-2020-0023
CVE ID: CVE-2015-10005 State: PUBLISHED Published: 2022-12-27T08:05:38.793Z Last Updated: 2025-04-11T15:09:04.522Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: markdown-it Problem Types: CWE-1333 Description: A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/html_re.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 3.0.0 is able to address this issue. The name of the patch is 89c8620157d6e38f9872811620d25138fc9d1b0d. It is recommended to upgrade the affected component. The identifier of this vulnerability i
38f9872811620d25138fc9d1b0d. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216852. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.216852 - https://vuldb.com/?ctiid.216852 - https://github.com/markdown-it/markdown-it/commit/89c8620157d6e38f9872811620d25138fc9d1b0d - https://github.com/markdown-it/markdown-it/releases/tag/3.0.0
CVE ID: CVE-2015-10006 State: PUBLISHED Published: 2023-01-01T16:36:45.875Z Last Updated: 2025-04-10T19:00:05.620Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: admont28 Products: Ingnovarq Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file app/controller/insertarSliderAjax.php. The manipulation of the argument imagetitle leads to cross site scripting. The attack may be launched remotely. The name of the patch is 9d18a39944d79dfedacd754a742df38f99d3c0e2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerabil
4d79dfedacd754a742df38f99d3c0e2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217172. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217172 - https://vuldb.com/?ctiid.217172 - https://github.com/admont28/ingnovarq/commit/9d18a39944d79dfedacd754a742df38f99d3c0e2
CVE ID: CVE-2015-10007 State: PUBLISHED Published: 2023-01-02T10:32:12.484Z Last Updated: 2025-04-11T13:42:00.372Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: 82Flex Products: WEIPDCRM Problem Types: CWE-79 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a4. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217184. NOTE: This vulnerability only affects product
tch to fix this issue. The identifier of this vulnerability is VDB-217184. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217184 - https://vuldb.com/?ctiid.217184 - https://github.com/82Flex/WEIPDCRM/commit/43bad79392332fa39e31b95268e76fbda9fec3a4
CVE ID: CVE-2015-10008 State: PUBLISHED Published: 2023-01-02T10:33:17.872Z Last Updated: 2025-04-10T20:29:04.081Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 82Flex Products: WEIPDCRM Problem Types: CWE-89 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The identifier of the patch is 43bad79392332fa39e31b95268e76fbda9fec3a4. It is recommended to apply a patch to fix this issue. The identifier VDB-217185 was assigned to this vulnerability. NOTE: This vulnerability only affects pro
fix this issue. The identifier VDB-217185 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217185 - https://vuldb.com/?ctiid.217185 - https://github.com/82Flex/WEIPDCRM/commit/43bad79392332fa39e31b95268e76fbda9fec3a4
CVE ID: CVE-2015-10009 State: PUBLISHED Published: 2023-01-02T15:37:56.480Z Last Updated: 2024-08-06T08:58:25.548Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: nterchange Problem Types: CWE-94 Description: A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file app/controllers/code_caller_controller.php. The manipulation of the argument q with the input %5C%27%29;phpinfo%28%29;/* leads to code injection. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.1 is able to address this issue. The patch is named fba7d89176fba8fe289
public and may be used. Upgrading to version 4.1.1 is able to address this issue. The patch is named fba7d89176fba8fe289edd58835fe45080797d99. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217187. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217187 - https://vuldb.com/?ctiid.217187 - https://github.com/nonfiction/nterchange_backend/commit/fba7d89176fba8fe289edd58835fe45080797d99 - https://github.com/nonfiction/nterchange_backend/releases/tag/4.1.1
CVE ID: CVE-2015-10010 State: PUBLISHED Published: 2023-01-02T20:55:47.826Z Last Updated: 2025-04-10T20:02:19.775Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: OpenDNS Products: OpenResolve Problem Types: CWE-79 Description: A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoints.py of the component API. The manipulation leads to cross site scripting. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The name of the patch is c680170d5583cd9342fe1af43001fe8b2b8004dd. It is recommende
ploitation is known to be difficult. The name of the patch is c680170d5583cd9342fe1af43001fe8b2b8004dd. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217196. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217196 - https://vuldb.com/?ctiid.217196 - https://github.com/opendns/OpenResolve/commit/c680170d5583cd9342fe1af43001fe8b2b8004dd
CVE ID: CVE-2015-10011 State: PUBLISHED Published: 2023-01-02T21:00:29.616Z Last Updated: 2025-04-10T19:56:32.012Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: OpenDNS Products: OpenResolve Problem Types: CWE-117 Description: A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is recommended to apply a patch to fix this issue. The identifier VDB-217197 was assigned to this vulnerability. Additional Analyst Notes: - CVE P
patch to fix this issue. The identifier VDB-217197 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217197 - https://vuldb.com/?ctiid.217197 - https://github.com/opendns/OpenResolve/commit/9eba6ba5abd89d0e36a008921eb307fcef8c5311
CVE ID: CVE-2015-10012 State: PUBLISHED Published: 2023-01-03T08:27:38.769Z Last Updated: 2024-08-06T08:58:24.638Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: sumocoders Products: FrameworkUserBundle Problem Types: CWE-209 Description: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this issue is some unknown functionality of the file Resources/views/Security/login.html.twig. The manipulation leads to information exposure through error message. Upgrading to version 1.4.0 is able to address this issue. The name of the patch is abe4993390ba9bd7821ab126782705
ssage. Upgrading to version 1.4.0 is able to address this issue. The name of the patch is abe4993390ba9bd7821ab12678270556645f94c8. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217268. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217268 - https://vuldb.com/?ctiid.217268 - https://github.com/sumocoders/FrameworkUserBundle/commit/abe4993390ba9bd7821ab12678270556645f94c8 - https://github.com/sumocoders/FrameworkUserBundle/releases/tag/v1.4.0
CVE ID: CVE-2015-10013 State: PUBLISHED Published: 2023-01-05T09:52:06.307Z Last Updated: 2024-08-06T08:58:25.964Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: WebDevStudios Products: taxonomy-switcher Plugin Problem Types: CWE-79 Description: A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function taxonomy_switcher_init of the file taxonomy-switcher.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 1.0.4 is able to address this issue. It is recommended to upgrade the affected component. VDB-217446 is the ide
version 1.0.4 is able to address this issue. It is recommended to upgrade the affected component. VDB-217446 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217446 - https://vuldb.com/?ctiid.217446 - https://github.com/WebDevStudios/taxonomy-switcher/commit/e1a0d99f936e7427b31e210c67aeb4833d804099 - https://github.com/WebDevStudios/taxonomy-switcher/releases/tag/1.0.4
CVE ID: CVE-2015-10014 State: PUBLISHED Published: 2023-01-05T13:06:31.182Z Last Updated: 2024-08-06T08:58:26.441Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: arekk Products: uke Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipulation leads to sql injection. The identifier of the patch is 52fd3b2d0bc16227ef57b7b98a3658bb67c1833f. It is recommended to apply a patch to fix this issue. The identifier VDB-217485 was assigned to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: -
signed to this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.217485 - https://vuldb.com/?ctiid.217485 - https://github.com/arekk/uke/commit/52fd3b2d0bc16227ef57b7b98a3658bb67c1833f
CVE ID: CVE-2015-10015 State: PUBLISHED Published: 2023-01-05T14:43:19.209Z Last Updated: 2025-05-28T13:36:54.346Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: glidernet Products: ogn-live Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in glidernet ogn-live. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named bc0f19965f760587645583b7624d66a260946e01. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217487. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
his vulnerability is VDB-217487. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217487 - https://vuldb.com/?ctiid.217487 - https://github.com/glidernet/ogn-live/pull/11 - https://github.com/glidernet/ogn-live/commit/bc0f19965f760587645583b7624d66a260946e01
CVE ID: CVE-2015-10016 State: PUBLISHED Published: 2023-01-06T09:49:12.503Z Last Updated: 2024-11-25T17:25:25.609Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: jeff-kelley Products: opensim-utils Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the file regionscrits.php. The manipulation of the argument region leads to sql injection. The patch is identified as c29e5c729a833a29dbf5b1e505a0553fe154575e. It is recommended to apply a patch to fix this issue. VDB-217550 is the identifier assigned to this vulnerability. A
5e. It is recommended to apply a patch to fix this issue. VDB-217550 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.217550 - https://vuldb.com/?ctiid.217550 - https://github.com/jeff-kelley/opensim-utils/commit/c29e5c729a833a29dbf5b1e505a0553fe154575e
CVE ID: CVE-2015-10017 State: PUBLISHED Published: 2023-01-06T10:26:12.339Z Last Updated: 2024-08-06T08:58:26.043Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: HPI-Information-Systems Products: ProLOD Problem Types: CWE-89 Description: A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The manipulation of the argument this leads to sql injection. The name of the patch is 3f710905458d49c77530bd3cbcd8960457566b73. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217552. Additional Analyst Notes: - CVE Program Container: Referen
is issue. The identifier of this vulnerability is VDB-217552. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.217552 - https://vuldb.com/?ctiid.217552 - https://github.com/HPI-Information-Systems/ProLOD/commit/3f710905458d49c77530bd3cbcd8960457566b73