CVE-2015-10148 | High | 8.2 | 2026-04-03 | Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical default SSH and SSL keys that cannot b… |
CVE-2015-20121 | High | 8.2 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting… |
CVE-2015-20120 | High | 8.2 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extract databas… |
CVE-2015-20119 | Medium | 6.4 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious HTML and if… |
CVE-2015-20118 | High | 7.2 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface. At… |
CVE-2015-20117 | Medium | 5.3 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthorized user ac… |
CVE-2015-20116 | Medium | 6.1 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize CSV file uploads, allowing attackers to inject malicious scripts through filename parameters… |
CVE-2015-20115 | High | 7.2 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter i… |
CVE-2015-20114 | Medium | 6.1 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 contains a cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecti… |
CVE-2015-20113 | Medium | 5.3 | 2026-03-16 | Next Click Ventures RealtyScript 4.0.2 contains cross-site request forgery and persistent cross-site scripting vulnerabilities that allow attackers to perform… |
CVE-2015-10145 | High | 8.8 | 2025-12-31 | Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utility/run_commands.sh. The application fail… |
CVE-2015-10147 | Medium | 4.9 | 2025-10-29 | The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.2 due… |
CVE-2015-10146 | Medium | 4.9 | 2025-10-29 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.4 due t… |
CVE-2015-10142 | | | 2025-07-25 | Sitecore Experience Platform (XP) prior to 8.0 Initial Release (rev. 141212) and Content Management System (CMS) prior to 7.2 Update-3 (rev. 141226) and prior… |
CVE-2015-10144 | High | 8.8 | 2025-07-25 | The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sanitization in the via the image uploade… |
CVE-2015-10143 | Critical | 9.8 | 2025-07-25 | The Platform theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on… |
CVE-2015-10141 | | | 2025-07-23 | An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans. W… |
CVE-2015-10140 | High | 8.8 | 2025-07-22 | The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to uplo… |
CVE-2015-10137 | Critical | 9.8 | 2025-07-22 | The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_file(… |
CVE-2015-10139 | High | 8.8 | 2025-07-19 | The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possi… |
CVE-2015-10138 | Critical | 9.8 | 2025-07-19 | The Work The Flow File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jQuery-File-Upload-9.5.0… |
CVE-2015-10136 | High | 7.5 | 2025-07-19 | The GI-Media Library plugin for WordPress is vulnerable to Directory Traversal in versions before 3.0 via the 'fileid' parameter. This allows unauthenticated a… |
CVE-2015-10135 | Critical | 9.8 | 2025-07-19 | The WPshop 2 – E-Commerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajaxUpload function in versio… |
CVE-2015-10134 | High | 7.5 | 2025-07-19 | The Simple Backup plugin for WordPress is vulnerable to Arbitrary File Download in versions up to, and including, 2.7.10. via the download_backup_file function… |
CVE-2015-10133 | High | 7.2 | 2025-07-19 | The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value. This allows… |
CVE-2015-20112 | Low | 3.4 | 2025-06-29 | RLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network. |
CVE-2015-0849 | Low | 3.9 | 2025-06-26 | pycode-browser before version 1.0 is prone to a predictable temporary file vulnerability. |
CVE-2015-0843 | Critical | 9.8 | 2025-06-26 | yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf. |
CVE-2015-0842 | Critical | 9.8 | 2025-06-26 | yubiserver before 0.6 is prone to SQL injection issues, potentially leading to an authentication bypass. |
CVE-2015-4582 | High | 7.2 | 2025-04-28 | The TheCartPress boot-store (aka Boot Store) theme 1.6.4 for WordPress allows header.php tcp_register_error XSS. NOTE: CVE-2015-4582 is not assigned to any Ora… |
CVE-2015-2079 | Critical | 9.9 | 2025-04-28 | Usermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution because it uses the two argument (not three argument) form o… |
CVE-2015-20111 | Critical | 9.8 | 2024-11-18 | miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffer overflow and sign… |
CVE-2015-10132 | Low | 3.5 | 2024-04-21 | A vulnerability classified as problematic was found in Thimo Grauerholz WP-Spreadplugin up to 3.8.6.1 on WordPress. This vulnerability affects unknown code of… |
CVE-2015-10131 | Low | 3.5 | 2024-03-31 | A vulnerability was found in chrisy TFO Graphviz Plugin up to 1.9 on WordPress and classified as problematic. Affected by this issue is the function admin_page… |
CVE-2015-10123 | High | 8.8 | 2024-03-13 | An unautheticated remote attacker could send specifically crafted packets to a affected device. If an authenticated user then views that data in a specific pag… |
CVE-2015-10130 | Medium | 5.3 | 2024-03-13 | The Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0. This is due to missing or incorrect… |
CVE-2015-10129 | Low | 3.7 | 2024-02-04 | A vulnerability was found in planet-freo up to 20150116 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/i… |
CVE-2015-10128 | Low | 3.5 | 2024-01-02 | A vulnerability was found in rt-prettyphoto Plugin up to 1.2 on WordPress and classified as problematic. Affected by this issue is the function royal_prettypho… |
CVE-2015-10127 | Low | 3.5 | 2023-12-26 | A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. T… |
CVE-2015-8314 | High | 7.5 | 2023-12-12 | The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application ac… |
CVE-2015-2179 | Medium | 5.5 | 2023-12-12 | The xaviershay-dm-rails gem 0.10.3.8 for Ruby allows local users to discover MySQL credentials by listing a process and its arguments. |
CVE-2015-2968 | Medium | 5.9 | 2023-10-31 | LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS comm… |
CVE-2015-0897 | Medium | 5.9 | 2023-10-31 | LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application a… |
CVE-2015-20110 | High | 7.5 | 2023-10-31 | JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that stops at the first character that is dif… |
CVE-2015-10126 | Medium | 6.3 | 2023-10-06 | A vulnerability classified as critical was found in Easy2Map Photos Plugin 1.0.1 on WordPress. This vulnerability affects unknown code. The manipulation leads… |
CVE-2015-10125 | Medium | 4.3 | 2023-10-05 | A vulnerability classified as problematic has been found in WP Ultimate CSV Importer Plugin 3.7.2 on WordPress. This affects an unknown part. The manipulation… |
CVE-2015-10124 | Medium | 6.3 | 2023-10-02 | A vulnerability was found in Most Popular Posts Widget Plugin up to 0.8 on WordPress. It has been classified as critical. Affected is the function add_views/sh… |
CVE-2015-6964 | Medium | 5.3 | 2023-09-25 | MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into the list that MultiBit uses to send fe… |
CVE-2015-8371 | High | 8.8 | 2023-09-21 | Composer before 2016-02-10 allows cache poisoning from other projects built on the same host. This results in attacker-controlled code entering a server-side b… |
CVE-2015-5467 | Critical | 9.8 | 2023-09-21 | web\ViewAction in Yii (aka Yii2) 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter. |
CVE-2015-2202 | High | 7.2 | 2023-09-05 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the underlying OS. |
CVE-2015-2201 | High | 7.2 | 2023-09-05 | Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by administrative users. |
CVE-2015-1391 | High | 8.8 | 2023-09-05 | Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism. |
CVE-2015-1390 | Medium | 6.1 | 2023-09-05 | Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator. |
CVE-2015-10122 | Medium | 6.3 | 2023-07-18 | A vulnerability was found in wp-donate Plugin up to 1.4 on WordPress. It has been classified as critical. This affects an unknown part of the file includes/don… |
CVE-2015-10121 | Low | 3.5 | 2023-07-10 | A vulnerability has been found in Beeliked Microsite Plugin up to 1.0.1 on WordPress and classified as problematic. Affected by this vulnerability is the funct… |
CVE-2015-10120 | Low | 3.5 | 2023-07-10 | A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0 on WordPress. Affected is the function update_opt… |
CVE-2015-10119 | Low | 3.5 | 2023-07-10 | A vulnerability, which was classified as problematic, has been found in View All Posts Page Plugin up to 0.9.0 on WordPress. This issue affects the function ac… |
CVE-2015-1313 | Medium | 6.5 | 2023-06-29 | JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request data can be deduced b… |
CVE-2015-20109 | Medium | 5.5 | 2023-06-25 | end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to cause a denial of s… |
CVE-2015-10118 | Low | 3.5 | 2023-06-12 | A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affects the function CopyProtect_options_pa… |
CVE-2015-10117 | Low | 3.5 | 2023-06-06 | A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPress. Affected is an unknown function. Th… |
CVE-2015-10116 | Medium | 4.3 | 2023-06-06 | A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPress. This affects the function install_ne… |
CVE-2015-10115 | Medium | 4.3 | 2023-06-05 | A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1.1.1 on WordPress. This affects the func… |
CVE-2015-10114 | Medium | 4.3 | 2023-06-05 | A vulnerability, which was classified as problematic, has been found in WooSidebars Plugin up to 1.4.1 on WordPress. Affected by this issue is the function ena… |
CVE-2015-10113 | Low | 3.5 | 2023-06-05 | A vulnerability classified as problematic was found in WooFramework Tweaks Plugin up to 1.0.1 on WordPress. Affected by this vulnerability is the function admi… |
CVE-2015-10112 | Medium | 4.3 | 2023-06-05 | A vulnerability classified as problematic has been found in WooFramework Branding Plugin up to 1.0.1 on WordPress. Affected is the function admin_screen_logic… |
CVE-2015-10111 | Medium | 6.3 | 2023-06-04 | A vulnerability was found in Watu Quiz Plugin up to 2.6.7 on WordPress. It has been rated as critical. This issue affects the function watu_exams of the file c… |
CVE-2015-10110 | Low | 3.5 | 2023-06-02 | A vulnerability classified as problematic was found in ruddernation TinyChat Room Spy Plugin up to 1.2.8 on WordPress. This vulnerability affects the function… |
CVE-2015-10109 | Medium | 4.3 | 2023-06-01 | A vulnerability was found in Video Playlist and Gallery Plugin up to 1.136 on WordPress. It has been rated as problematic. Affected by this issue is some unkno… |
CVE-2015-10108 | Medium | 4.3 | 2023-05-31 | A vulnerability was found in meitar Inline Google Spreadsheet Viewer Plugin up to 0.9.6 on WordPress and classified as problematic. Affected by this issue is t… |
CVE-2015-10107 | Low | 3.5 | 2023-05-31 | A vulnerability was found in Simplr Registration Form Plus+ Plugin up to 2.3.4 on WordPress and classified as problematic. This issue affects some unknown proc… |
CVE-2015-10106 | Medium | 6.3 | 2023-05-28 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in mback2k mh_httpbl Extension up to 1.1.7 on TYPO3. This vulnerability affect… |
CVE-2015-20108 | Critical | 9.8 | 2023-05-27 | xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used. |
CVE-2015-10105 | Medium | 6.3 | 2023-05-01 | A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress. This affects the function valid_js_identifie… |
CVE-2015-10104 | Low | 3.5 | 2023-04-30 | A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown fu… |
CVE-2015-10103 | Low | 2.8 | 2023-04-17 | A vulnerability, which was classified as problematic, was found in InternalError503 Forget It up to 1.3. This affects an unknown part of the file js/settings.j… |
CVE-2015-10102 | Medium | 6.3 | 2023-04-17 | A vulnerability, which was classified as critical, has been found in Freshdesk Plugin 1.7 on WordPress. Affected by this issue is some unknown functionality. T… |
CVE-2015-10101 | Low | 3.5 | 2023-04-15 | A vulnerability classified as problematic was found in Google Analytics Top Content Widget Plugin up to 1.5.6 on WordPress. Affected by this vulnerability is a… |
CVE-2015-10100 | Medium | 6.3 | 2023-04-10 | A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10 on WordPress. This issue affects some unknown processi… |
CVE-2015-10099 | Medium | 6.3 | 2023-04-10 | A vulnerability classified as critical has been found in CP Appointment Calendar Plugin up to 1.1.5 on WordPress. This affects the function dex_process_ready_t… |
CVE-2015-10098 | Low | 3.5 | 2023-04-08 | A vulnerability was found in Broken Link Checker Plugin up to 1.10.5 on WordPress. It has been rated as problematic. Affected by this issue is the function pri… |
CVE-2015-10097 | Medium | 6.3 | 2023-03-25 | A vulnerability was found in grinnellplans-php up to 3.0. It has been declared as critical. Affected by this vulnerability is the function interface_disp_page/… |
CVE-2015-10096 | Medium | 5.0 | 2023-03-20 | A vulnerability, which was classified as critical, was found in Zarthus IRC Twitter Announcer Bot up to 1.1.0. This affects the function get_tweets of the file… |
CVE-2015-10087 | Medium | 6.3 | 2023-03-07 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and classified as problematic. Affected by t… |
CVE-2015-10095 | Low | 3.5 | 2023-03-06 | A vulnerability classified as problematic has been found in woo-popup Plugin up to 1.2.2 on WordPress. This affects an unknown part of the file admin/class-woo… |
CVE-2015-10094 | Low | 2.4 | 2023-03-06 | A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file l… |
CVE-2015-10093 | Low | 2.6 | 2023-03-06 | A vulnerability was found in Mark User as Spammer Plugin 1.0.0/1.0.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the f… |
CVE-2015-10092 | Low | 3.5 | 2023-03-06 | A vulnerability was found in Qtranslate Slug Plugin up to 1.1.16 on WordPress. It has been classified as problematic. Affected is the function add_slug_meta_bo… |
CVE-2015-10091 | Medium | 4.7 | 2023-03-06 | A vulnerability has been found in ByWater Solutions bywater-koha-xslt and classified as critical. This vulnerability affects the function StringSearch of the f… |
CVE-2015-10090 | Low | 3.5 | 2023-03-06 | A vulnerability, which was classified as problematic, has been found in Landing Pages Plugin up to 1.8.7 on WordPress. Affected by this issue is some unknown f… |
CVE-2015-10089 | Low | 3.5 | 2023-03-05 | A vulnerability classified as problematic has been found in flame.js. This affects an unknown part. The manipulation leads to cross site scripting. It is possi… |
CVE-2015-10088 | Medium | 5.0 | 2023-03-05 | A vulnerability, which was classified as critical, was found in ayttm up to 0.5.0.89. This affects the function http_connect in the library libproxy/proxy.c. T… |
CVE-2015-10086 | High | 7.3 | 2023-02-28 | A vulnerability, which was classified as critical, was found in OpenCycleCompass server-php. Affected is an unknown function of the file api1/login.php. The ma… |
CVE-2015-10085 | Low | 3.5 | 2023-02-21 | A vulnerability was found in GoPistolet. It has been declared as problematic. This vulnerability affects unknown code of the component MTA. The manipulation le… |
CVE-2015-10084 | Medium | 5.5 | 2023-02-21 | A vulnerability was found in irontec klear-library chloe and classified as critical. Affected by this issue is the function _prepareWhere of the file Controlle… |
CVE-2015-10083 | Medium | 6.3 | 2023-02-21 | A vulnerability has been found in harrystech Dynosaur-Rails and classified as critical. Affected by this vulnerability is the function basic_auth of the file a… |
CVE-2015-10082 | Medium | 5.5 | 2023-02-21 | A vulnerability classified as problematic has been found in UIKit0 libplist 1.12. This affects the function plist_from_xml of the file src/xplist.c of the comp… |
CVE-2015-10081 | Medium | 4.3 | 2023-02-20 | A vulnerability was found in arnoldle submitByMailPlugin 1.0b2.9 and classified as problematic. This issue affects some unknown processing of the file edit_lis… |
CVE-2015-10080 | Low | 3.5 | 2023-02-20 | A vulnerability was found in NREL api-umbrella-web 0.7.1. It has been classified as problematic. This affects an unknown part of the component Admin Data Table… |