CVE-2015-5990
Published Dec 31, 2015Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attackers to hijack the authentication of arbitrary users.
Year archive
CVEs published in 2015
Archive summary6,494 CVEs published in 2015 — 1,148 Critical, 1,254 High, 3,504 Medium, 588 Low, 0 Unrated.
CVE-2015-5989
Published Dec 31, 2015Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remote attackers to obtain administrative privileges via certain…
CVE-2015-5988
Published Dec 31, 2015The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote attackers to obtain administrative privileges by leveragin…
CVE-2015-5987
Published Dec 31, 2015Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers to spo…
CVE-2015-1947
Published Dec 31, 2015Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to gain privileges via a Trojan h…
CVE-2015-7447
Published Dec 31, 2015IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote attackers t…
CVE-2015-7284
Published Dec 31, 2015Cross-site request forgery (CSRF) vulnerability on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 allows remote attackers to hijack the authentication of arbitrary users.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-7283
Published Dec 31, 2015The web administration interface on ZyXEL NBG-418N devices with firmware 1.00(AADZ.3)C0 has a default password of 1234 for the admin account, which allows remote attackers to obta…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-7282
Published Dec 31, 2015ReadyNet WRT300N-DD devices with firmware 1.0.26 use the same source port number for every DNS query, which makes it easier for remote attackers to spoof responses by selecting th…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-7281
Published Dec 31, 2015Cross-site request forgery (CSRF) vulnerability on ReadyNet WRT300N-DD devices with firmware 1.0.26 allows remote attackers to hijack the authentication of arbitrary users.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-7280
Published Dec 31, 2015The web administration interface on ReadyNet WRT300N-DD devices with firmware 1.0.26 has a default password of admin for the admin account, which allows remote attackers to obtain…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-7279
Published Dec 31, 2015Amped Wireless R10000 devices with firmware 2.5.2.11 use an improper algorithm for selecting the ID value in the header of a DNS query, which makes it easier for remote attackers…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-7278
Published Dec 31, 2015Cross-site request forgery (CSRF) vulnerability on Amped Wireless R10000 devices with firmware 2.5.2.11 allows remote attackers to hijack the authentication of arbitrary users.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-7277
Published Dec 31, 2015The web administration interface on Amped Wireless R10000 devices with firmware 2.5.2.11 has a default password of admin for the admin account, which allows remote attackers to ob…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-6020
Published Dec 31, 2015ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 allow remote authenticated users to obtain administrative privileges by leveraging access to the user account.
CVE-2015-6019
Published Dec 31, 2015The management portal on ZyXEL PMG5318-B20A devices with firmware 1.00AANC0b5 does not terminate sessions upon a logout action, which allows remote attackers to bypass intended ac…
CVE-2015-6018
Published Dec 31, 2015The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbitrary commands via the PingIPAddr param…
CVE-2015-6017
Published Dec 31, 2015Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attackers to inject arbitrary web…
CVE-2015-6016
Published Dec 31, 2015ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N devices have a default password of 1234 for the admin acco…
CVE-2015-5996
Published Dec 31, 2015Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allows remote attackers to hijack the authentication of arbitra…
- evidence mentions
- 2
- Buzz score
- 17.5
CVE-2015-5995
Published Dec 31, 2015Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain administrative access via a certain admin subs…
CVE-2015-5994
Published Dec 31, 2015The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 has a default password of admin for the admin account and a default password of pa…
CVE-2015-2918
Published Dec 31, 2015The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict use of FRAME elements, which makes it easier for remote a…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-2913
Published Dec 31, 2015server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 improperly relies on the ja…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2015-2912
Published Dec 31, 2015The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows remot…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-25 of 6,494 CVEsPage 1 of 260