Exploits

    Dashboard / Exploits

    9.8
    Critical

    CVE-2015-8352

    Last Modified: 17 Dec 2015

    Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the act parameter to ajax.php.

    Source:High-Tech Bridge SA
    Published:24 Aug 2017
    9
    Critical

    CVE-2015-8351

    Last Modified: 3 Dec 2015

    PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences regardless of whether allow_url_include is enabled.

    Source:High-Tech Bridge SA
    Published:11 Sept 2017
    4.3
    Medium

    CVE-2015-8309

    Last Modified: 13 Sept 2016

    Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."

    Source:feedersec
    Published:27 Mar 2017
    9.8
    Critical

    CVE-2015-8299

    Last Modified: 20 Apr 2025

    Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute arbitrary code via a crafted KNXnet/IP UDP packet.

    Published:29 Aug 2017
    7.5
    High

    CVE-2015-8285

    Last Modified: 19 Feb 2016

    The webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.

    Source:Fitzl Csaba
    Published:20 Apr 2017
    8.8
    High

    CVE-2015-8284

    Last Modified: 18 Jan 2016

    SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.

    Source:Karn Ganeshen
    Published:13 Apr 2017
    6.5
    Medium

    CVE-2015-8283

    Last Modified: 18 Jan 2016

    Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.

    Source:Karn Ganeshen
    Published:13 Apr 2017
    9.8
    Critical

    CVE-2015-8282

    Last Modified: 18 Jan 2016

    SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.

    Source:Karn Ganeshen
    Published:13 Apr 2017
    9.8
    Critical

    CVE-2015-8277

    Last Modified: 12 Apr 2025

    Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a crafted packet with opcode (a) 0x107 or (b) 0x10a.

    Published:24 Feb 2016
    9.8
    Critical

    CVE-2015-8261

    Last Modified: 13 Jan 2016

    The DroneDeleteOldMeasurements implementation in Ipswitch WhatsUp Gold before 16.4 does not properly validate serialized XML objects, which allows remote attackers to conduct SQL injection attacks via a crafted SOAP request.

    Source:Matt Buzanowski
    Published:8 Jan 2016
    7.5
    High

    CVE-2015-8258

    Last Modified: 17 Mar 2017

    AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability."

    Source:Orwelllabs
    Published:10 Apr 2017
    8.8
    High

    CVE-2015-8257

    Last Modified: 29 Jul 2016

    The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in the app parameter to (1) app_license.shtml, (2) app_license_custom.shtml, (3) app_index.shtml, or (4) app_params.shtml.

    Source:Orwelllabs
    Published:2 May 2017
    6.1
    Medium

    CVE-2015-8256

    Last Modified: 11 Apr 2016

    Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.

    Source:Orwelllabs
    Published:17 Apr 2017
    8.8
    High

    CVE-2015-8255

    Last Modified: 17 Mar 2017

    AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.

    Source:Orwelllabs
    Published:10 Apr 2017
    9.8
    Critical

    CVE-2015-8249

    Last Modified: 15 Dec 2015

    The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.

    Source:Metasploit
    Published:27 Sept 2017
    7
    High

    CVE-2015-8239

    Last Modified: 20 Apr 2025

    The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.

    Published:9 Nov 2015
    9.8
    Critical

    CVE-2015-8103

    Last Modified: 15 Dec 2015

    The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy variant in 'ysoserial'".

    Source:Metasploit
    Published:11 Nov 2015
    7.8
    High

    CVE-2015-8088

    Last Modified: 19 Mar 2018

    Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application.

    Source:pray3r
    Published:12 Jan 2016
    10
    Critical

    CVE-2015-8048

    Last Modified: 1 Apr 2016

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-8049, CVE-2015-8050, CVE-2015-8055, CVE-2015-8056, CVE-2015-8057, CVE-2015-8058, CVE-2015-8059, CVE-2015-8061, CVE-2015-8062, CVE-2015-8063, CVE-2015-8064, CVE-2015-8065, CVE-2015-8066, CVE-2015-8067, CVE-2015-8068, CVE-2015-8069, CVE-2015-8070, CVE-2015-8071, CVE-2015-8401, CVE-2015-8402, CVE-2015-8403, CVE-2015-8404, CVE-2015-8405, CVE-2015-8406, CVE-2015-8410, CVE-2015-8411, CVE-2015-8412, CVE-2015-8413, CVE-2015-8414, CVE-2015-8420, CVE-2015-8421, CVE-2015-8422, CVE-2015-8423, CVE-2015-8424, CVE-2015-8425, CVE-2015-8426, CVE-2015-8427, CVE-2015-8428, CVE-2015-8429, CVE-2015-8430, CVE-2015-8431, CVE-2015-8432, CVE-2015-8433, CVE-2015-8434, CVE-2015-8435, CVE-2015-8436, CVE-2015-8437, CVE-2015-8441, CVE-2015-8442, CVE-2015-8447, CVE-2015-8448, CVE-2015-8449, CVE-2015-8450, CVE-2015-8452, and CVE-2015-8454.

    Source:Google Security Research
    Published:8 Dec 2015
    10
    Critical

    CVE-2015-8046

    Last Modified: 17 Dec 2015

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, and CVE-2015-8044.

    Source:Google Security Research
    Published:10 Nov 2015
    10
    Critical

    CVE-2015-8044

    Last Modified: 17 Dec 2015

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8043, and CVE-2015-8046.

    Source:Google Security Research
    Published:10 Nov 2015
    10
    Critical

    CVE-2015-8043

    Last Modified: 17 Dec 2015

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and before 11.2.202.548 on Linux, Adobe AIR before 19.0.0.241, Adobe AIR SDK before 19.0.0.241, and Adobe AIR SDK & Compiler before 19.0.0.241 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-7651, CVE-2015-7652, CVE-2015-7653, CVE-2015-7654, CVE-2015-7655, CVE-2015-7656, CVE-2015-7657, CVE-2015-7658, CVE-2015-7660, CVE-2015-7661, CVE-2015-7663, CVE-2015-8042, CVE-2015-8044, and CVE-2015-8046.

    Source:Google Security Research
    Published:10 Nov 2015
    4.3
    Medium

    CVE-2015-8038

    Last Modified: 25 Sept 2015

    Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) sharedjobmanager or (2) SOMServiceObjDialog.

    Source:hyp3rlinx
    Published:2 Nov 2015
    4.3
    Medium

    CVE-2015-8037

    Last Modified: 25 Sept 2015

    Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SOMVpnSSLPortalDialog or (2) FGDMngUpdHistory.

    Source:hyp3rlinx
    Published:2 Nov 2015
    7.5
    High

    CVE-2015-7986

    Last Modified: 28 Jan 2016

    The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.

    Source:ERPScan
    Published:27 Oct 2015
    7.2
    High

    CVE-2015-7985

    Last Modified: 12 Apr 2025

    Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file.

    Source:MrDoug
    Published:24 Nov 2015
    6.8
    Medium

    CVE-2015-7984

    Last Modified: 19 Nov 2015

    Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail Edition before 5.2.11 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary (1) commands via the cmd parameter to admin/cmdshell.php, (2) SQL queries via the sql parameter to admin/sqlshell.php, or (3) PHP code via the php parameter to admin/phpshell.php.

    Source:High-Tech Bridge SA
    Published:19 Nov 2015
    7.5
    High

    CVE-2015-7945

    Last Modified: 5 Jan 2016

    The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.

    Source:Pierre Kim
    Published:18 Aug 2017
    7.5
    High

    CVE-2015-7944

    Last Modified: 5 Jan 2016

    The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2, when used in SSL mode, allows remote attackers to cause a denial of service (resource consumption) via SSL parameter renegotiation.

    Source:Pierre Kim
    Published:18 Aug 2017
    6.5
    Medium

    CVE-2015-7904

    Last Modified: 28 Sept 2015

    Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file.

    Source:LiquidWorm
    Published:28 Oct 2015
    6.5
    Medium

    CVE-2015-7903

    Last Modified: 28 Sept 2015

    SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

    Source:LiquidWorm
    Published:28 Oct 2015
    5
    Medium

    CVE-2015-7902

    Last Modified: 28 Sept 2015

    Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers to obtain sensitive information via a series of requests.

    Source:LiquidWorm
    Published:28 Oct 2015
    6.5
    Medium

    CVE-2015-7901

    Last Modified: 13 Sept 2017

    Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.

    Source:James Fitts
    Published:28 Oct 2015
    4.3
    Medium

    CVE-2015-7900

    Last Modified: 28 Sept 2015

    Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain status page.

    Source:LiquidWorm
    Published:28 Oct 2015
    5.5
    Medium

    CVE-2015-7898

    Last Modified: 3 Nov 2015

    Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).

    Source:Google Security Research
    Published:27 Jun 2017
    7.5
    High

    CVE-2015-7897

    Last Modified: 3 Nov 2015

    The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory corruption) via a crafted BMP image file.

    Source:Google Security Research
    Published:16 Nov 2015
    6.5
    Medium

    CVE-2015-7896

    Last Modified: 3 Nov 2015

    LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.

    Source:Google Security Research
    Published:24 Aug 2017
    5.5
    Medium

    CVE-2015-7895

    Last Modified: 3 Nov 2015

    Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).

    Source:Google Security Research
    Published:27 Jun 2017
    8.8
    High

    CVE-2015-7894

    Last Modified: 3 Nov 2015

    The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentation fault and process crash) and execute arbitrary code via a crafted JPG.

    Source:Google Security Research
    Published:9 Aug 2017
    8.8
    High

    CVE-2015-7893

    Last Modified: 28 Oct 2015

    SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript.

    Source:Google Security Research
    Published:11 Apr 2017
    7.8
    High

    CVE-2015-7892

    Last Modified: 28 Oct 2017

    Stack-based buffer overflow in the m2m1shot_compat_ioctl32 function in the Samsung m2m1shot driver framework, as used in Samsung S6 Edge, allows local users to have unspecified impact via a large data.buf_out.num_planes value in an ioctl call.

    Source:Google Security Research
    Published:9 Dec 2019
    7
    High

    CVE-2015-7891

    Last Modified: 28 Oct 2015

    Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with Android L(5.0/5.1) allows local users to trigger memory errors by leveraging definition of g2d_lock and g2d_unlock lock macros as no-ops, aka SVE-2015-4598.

    Source:Google Security Research
    Published:2 Aug 2017
    5.5
    Medium

    CVE-2015-7890

    Last Modified: 28 Oct 2017

    Multiple buffer overflows in the esa_write function in /dev/seirenin the Exynos Seiren Audio driver, as used in Samsung S6 Edge, allow local users to cause a denial of service (memory corruption) via a large (1) buffer or (2) size parameter.

    Source:Google Security Research
    Published:12 Feb 2020
    5.5
    Medium

    CVE-2015-7889

    Last Modified: 28 Oct 2015

    The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent.

    Source:Google Security Research
    Published:27 Dec 2017
    9.8
    Critical

    CVE-2015-7874

    Last Modified: 2 Jan 2016

    Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nickname.

    Source:Guillaume Kaddouch
    Published:15 Jan 2020
    7.7
    High

    CVE-2015-7865

    Last Modified: 23 Nov 2015

    nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 354.35, and R358 before 358.87 on Windows does not properly restrict access to the stereosvrpipe named pipe, which allows local users to gain privileges via a commandline in a number 2 command, which is stored in the HKEY_LOCAL_MACHINE explorer Run registry key, a different vulnerability than CVE-2011-4784.

    Source:Google Security Research
    Published:24 Nov 2015
    7.5
    High

    CVE-2015-7858

    Last Modified: 13 Dec 2016

    SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7297.

    Source:Metasploit
    Published:29 Oct 2015
    7.5
    High

    CVE-2015-7857

    Last Modified: 13 Dec 2016

    SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php.

    Source:Metasploit
    Published:29 Oct 2015
    6.5
    Medium

    CVE-2015-7855

    Last Modified: 28 Nov 2016

    The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a long data value.

    Source:Magnus Klaaborg Stubman
    Published:21 Oct 2015
    7.5
    High

    CVE-2015-7808

    Last Modified: 21 Aug 2020

    The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object in the arguments parameter to ajax/api/hook/decodeArguments.

    Source:Metasploit
    Published:24 Nov 2015
    Items Per Page