CVE-2015-4627

SQL injection vulnerability in Pragyan CMS 3.0.

Source: CVE-2015-4627

CVE-2015-4697

Cross-site request forgery (CSRF) vulnerability in Google Analyticator WordPress Plugin before 6.4.9.3 rev @1183563.

Source: CVE-2015-4697

CVE-2015-7672

Cross-site scripting (XSS) vulnerability in Centreon 2.6.1.

Source: CVE-2015-7672

CVE-2015-4629

Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions.

Source: CVE-2015-4629

CVE-2015-4724

SQL injection vulnerability in Concrete5 5.7.3.1.

Source: CVE-2015-4724

CVE-2017-14194

The out function in controllers/member/Login.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer.

Source: CVE-2017-14194

CVE-2017-14193

The oauth function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer.

Source: CVE-2017-14193

CVE-2017-14195

The call_msg function in controllers/Form.php in dayrui FineCms 5.0.11 might have XSS related to the Referer HTTP header with Internet Explorer.

Source: CVE-2017-14195

CVE-2017-14192

The checktitle function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the module field.

Source: CVE-2017-14192

CVE-2017-1189

IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123558.

Source: CVE-2017-1189