| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-7790 | 4.3 | Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2015-12-30 18:19:00 | 2015-12-30 05:59:00 |
| CVE-2015-7782 | 4.3 | Cross-site scripting (XSS) vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2015-12-30 18:19:00 | 2015-12-30 05:59:00 |
| CVE-2015-7783 | 4.3 | Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2015-12-29 01:46:00 | 2015-12-27 19:59:00 |
| CVE-2015-8254 | 4.3 | The Frontel protocol before 3 on RSI Video Technologies Videofied devices does not use integrity protection, which makes it easier for man-in-the-middle attackers to (1) initiate a false alarm or (2) deactivate an alarm by modifying the client-server | 2015-12-28 21:43:00 | 2015-12-27 03:59:00 |
| CVE-2015-8253 | 4.3 | The Frontel protocol before 3 on RSI Video Technologies Videofied devices sets up AES encryption but sends all traffic in cleartext, which allows remote attackers to obtain sensitive (1) message or (2) MJPEG video data by sniffing the network. | 2015-12-28 21:38:00 | 2015-12-27 03:59:00 |
| CVE-2015-8252 | 4.3 | The Frontel protocol before 3 on RSI Video Technologies Videofied devices sends a cleartext serial number, which allows remote attackers to determine a hardcoded key by sniffing the network and performing a "jumbled up" calculation with this number. | 2015-12-28 19:39:00 | 2015-12-27 03:59:00 |
| CVE-2015-6538 | 7.5 | The login page in Epiphany Cardio Server 3.3, 4.0, and 4.1 mishandles authentication requests, which allows remote attackers to conduct LDAP injection attacks, and consequently bypass intended access restrictions, via a crafted URL. | 2015-12-28 18:44:00 | 2015-12-27 19:59:00 |
| CVE-2015-6537 | 7.5 | SQL injection vulnerability in the login page in Epiphany Cardio Server 3.3 allows remote attackers to execute arbitrary SQL commands via a crafted URL. | 2015-12-28 18:41:00 | 2015-12-27 19:59:00 |
| CVE-2015-7911 | 10.0 | Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remot | 2015-12-23 21:04:00 | 2015-12-23 03:59:00 |
| CVE-2015-6471 | 4.3 | Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize padding fields in Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet | 2015-12-23 20:42:00 | 2015-12-23 03:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: