CNA 2015

VulDB is an officially certified CVE Numbering Authority (CNA) by MITRE and Authorized Data Publisher (ADP) by NIST NVD. We are authorized to handle new vulnerability submissions, assign unique CVEs and disclose them. CVE is an international program to discover vulnerabilities which are then assigned and published to the CVE list. Partners coordinate such CVE entries to communicate consistent descriptions. Information technology and cybersecurity professionals all around the world use CVE records to ensure they are discussing the same issues, and to coordinate their efforts to prioritize and address these properly.

Vendor

Not Defined	44
NREL	2
Dovgalyuk	2
OpenDNS	2
82Flex	2

Identifying all affected vendors is a good starting point for an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Product

NREL api-umbrella-web	2
Dovgalyuk AIBattle	2
OpenDNS OpenResolve	2
82Flex WEIPDCRM	2
Thimo Grauerholz WP-Spreadplugin	1

Grouping vulnerabilities by products helps to get an overview. This makes it possible to determine an homogeneous landscape or the most important hotspots in heterogeneous landscapes.

Remediation

Official Fix	128
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	0

Vendors and researchers are eager to find countermeasures to mitigate security vulnerabilities. These can be distinguished between multiple forms and levels of remediation which influence risks differently.

Exploitability

High	1
Functional	0
Proof-of-Concept	5
Unproven	0
Not Defined	122

Researcher and attacker which are looking for security vulnerabilities try to exploit them for academic purposes or personal gain. The level and quality of exploitability can be distinguished to determine simplicity and strength of attacks.

Access Vector

Not Defined	0
Physical	0
Local	2
Adjacent	57
Network	69

The approach a vulnerability it becomes important to use the expected access vector. This is typically via the network, local, or physically even.

Authentication

Not Defined	0
High	3
Low	111
None	14

To exploit a vulnerability a certail level of authentication might be required. Vulnerabilities without such a requirement are much more popular.

User Interaction

Not Defined	0
Required	49
None	79

Some attack scenarios require some user interaction by a victim. This is typical for phishing, social engineering and cross site scripting attacks.

VulDB

≤1	0
≤2	0
≤3	5
≤4	42
≤5	16
≤6	48
≤7	15
≤8	2
≤9	0
≤10	0

The moderation team is always defining the base vector and base score for an entry. These and all other available scores are used to generate the meta score.

Exploit 0-day

<1k	9
<2k	118
<5k	1
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

The moderation team is working with the threat intelligence team to determine prices for exploits. Our unique algorithm is used to identify the 0-day prices for an exploit, before it got distributed or became public. Calculated prices are aligned to prices disclosed by vulnerability broker and compared to prices we see on exploit markets.

ID	Vulnerability	Scope	Responsible	Created	Updated	CVE	CNA
261676	Thimo Grauerholz WP-Spreadplugin spreadplugin.php cross site scripting	VulDB	VulDB	04/20/2024	04/20/2024	CVE-2015-10132	accepted
258620	chrisy TFO Graphviz Plugin tfo-graphviz-admin.php admin_page cross site scripting	VulDB	VulDB	03/29/2024	03/29/2024	CVE-2015-10131	accepted
252716	planet-freo auth.inc.php comparison	VulDB	VulDB	02/02/2024	02/25/2024	CVE-2015-10129	accepted
249422	rt-prettyphoto Plugin rt-prettyphoto.php royal_prettyphoto_plugin_links cross site scripting	VulDB	VulDB	12/31/2023	01/22/2024	CVE-2015-10128	accepted
248954	PlusCaptcha Plugin cross site scripting	VulDB	VulDB	12/24/2023	01/18/2024	CVE-2015-10127	accepted
241318	Easy2Map Photos Plugin sql injection	VulDB	VulDB	10/04/2023	10/25/2023	CVE-2015-10126	accepted
241317	WP Ultimate CSV Importer Plugin cross-site request forgery	VulDB	VulDB	10/04/2023	10/25/2023	CVE-2015-10125	accepted
241026	Most Popular Posts Widget Plugin functions.php show_views sql injection	VulDB	VulDB	10/01/2023	10/23/2023	CVE-2015-10124	accepted
234249	wp-donate Plugin donate-display.php sql injection	VulDB	VulDB	07/16/2023	08/06/2023	CVE-2015-10122	accepted
233365	Beeliked Microsite Plugin beelikedmicrosite.php embed_handler cross site scripting	VulDB	VulDB	07/08/2023	07/26/2023	CVE-2015-10121	accepted
233364	WDS Multisite Aggregate Plugin WDS_Multisite_Aggregate_Options.php update_options cross site scripting	VulDB	VulDB	07/08/2023	07/25/2023	CVE-2015-10120	accepted
233363	View All Posts Page Plugin view-all-posts-pages.php action_admin_notices_activation cross site scripting	VulDB	VulDB	07/08/2023	07/25/2023	CVE-2015-10119	accepted
231202	cchetanonline WP-CopyProtect wp-copyprotect.php CopyProtect_options_page cross site scripting	VulDB	VulDB	06/10/2023	07/08/2023	CVE-2015-10118	accepted
230664	Gravity Forms DPS PxPay Plugin cross site scripting	VulDB	VulDB	06/03/2023	06/30/2023	CVE-2015-10117	accepted
230661	RealFaviconGenerator Favicon Plugin class-favicon-by-realfavicongenerator-admin.php install_new_favicon cross-site request forgery	VulDB	VulDB	06/03/2023	06/30/2023	CVE-2015-10116	accepted
230655	WooSidebars Sidebar Manager Converter Plugin class-woosidebars-sbm-converter.php process_request redirect	VulDB	VulDB	06/03/2023	06/30/2023	CVE-2015-10115	accepted
230654	WooSidebars Plugin class-woo-sidebars.php enable_custom_post_sidebars redirect	VulDB	VulDB	06/03/2023	06/30/2023	CVE-2015-10114	accepted
230653	WooFramework Tweaks Plugin wooframework-tweaks.php admin_screen_logic redirect	VulDB	VulDB	06/03/2023	06/29/2023	CVE-2015-10113	accepted
230652	WooFramework Branding Plugin wooframework-branding.php admin_screen_logic redirect	VulDB	VulDB	06/03/2023	06/29/2023	CVE-2015-10112	accepted
230651	Watu Quiz Plugin Exam exam.php watu_exams sql injection	VulDB	VulDB	06/03/2023	06/29/2023	CVE-2015-10111	accepted
230392	ruddernation TinyChat Room Spy Plugin room-spy.php wp_show_room_spy cross site scripting	VulDB	VulDB	05/31/2023	06/25/2023	CVE-2015-10110	accepted
230264	Video Playlist and Gallery Plugin wp-media-cincopa.php cross-site request forgery	VulDB	VulDB	05/30/2023	06/24/2023	CVE-2015-10109	accepted
230234	meitar Inline Google Spreadsheet Viewer Plugin inline-gdocs-viewer.php displayShortcode cross-site request forgery	VulDB	VulDB	05/30/2023	06/24/2023	CVE-2015-10108	accepted
230153	Simplr Registration Form Plus+ Plugin cross site scripting	VulDB	VulDB	05/29/2023	06/21/2023	CVE-2015-10107	accepted
230086	mback2k mh_httpbl Extension index.php moduleContent sql injection	VulDB	VulDB	05/27/2023	06/21/2023	CVE-2015-10106	accepted
227757	IP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversal	VulDB	VulDB	04/29/2023	05/24/2023	CVE-2015-10105	accepted
227756	Icons for Features Plugin class-icons-for-features-admin.php redirect	VulDB	VulDB	04/29/2023	05/24/2023	CVE-2015-10104	accepted
226119	InternalError503 Forget It settings.js infinite loop	VulDB	VulDB	04/15/2023	05/05/2023	CVE-2015-10103	accepted
226118	Freshdesk Plugin redirect	VulDB	VulDB	04/15/2023	05/05/2023	CVE-2015-10102	accepted
226117	Google Analytics Top Content Widget Plugin class-tgm-plugin-activation.php cross site scripting	VulDB	VulDB	04/15/2023	05/05/2023	CVE-2015-10101	accepted
225353	Dynamic Widgets Plugin dynwid_class.php sql injection	VulDB	VulDB	04/08/2023	04/26/2023	CVE-2015-10100	accepted
225351	CP Appointment Calendar Plugin dex_appointments.php dex_process_ready_to_go_appointment sql injection	VulDB	VulDB	04/08/2023	04/26/2023	CVE-2015-10099	accepted
225152	Broken Link Checker Plugin ui_get_action_links cross site scripting	VulDB	VulDB	04/06/2023	04/23/2023	CVE-2015-10098	accepted
223801	grinnellplans-php read.php interface_disp_page sql injection	VulDB	VulDB	03/24/2023	04/14/2023	CVE-2015-10097	accepted
223383	Zarthus IRC Twitter Announcer Bot twitter_announcer.rb get_tweets command injection	VulDB	VulDB	03/18/2023	04/11/2023	CVE-2015-10096	accepted
222327	woo-popup Plugin class-woo-popup-admin.php cross site scripting	VulDB	VulDB	03/04/2023	03/31/2023	CVE-2015-10095	accepted
222326	Fastly Plugin api.php post cross site scripting	VulDB	VulDB	03/04/2023	03/31/2023	CVE-2015-10094	accepted
222325	Mark User as Spammer Plugin plugin.php user_row_actions cross site scripting	VulDB	VulDB	03/04/2023	03/31/2023	CVE-2015-10093	accepted
222324	Qtranslate Slug Plugin class-qtranslate-slug.php add_slug_meta_box cross site scripting	VulDB	VulDB	03/04/2023	03/31/2023	CVE-2015-10092	accepted
222322	ByWater Solutions bywater-koha-xslt systempreferences.pl StringSearch sql injection	VulDB	VulDB	03/04/2023	03/31/2023	CVE-2015-10091	accepted
222320	Landing Pages Plugin cross site scripting	VulDB	VulDB	03/04/2023	03/31/2023	CVE-2015-10090	accepted
222291	flame.js cross site scripting	VulDB	VulDB	03/03/2023	03/31/2023	CVE-2015-10089	accepted
222267	ayttm proxy.c http_connect format string	VulDB	VulDB	03/03/2023	03/31/2023	CVE-2015-10088	accepted
221809	UpThemes Theme DesignFolio Plus unrestricted upload	VulDB	VulDB	02/26/2023	03/25/2023	CVE-2015-10087	accepted
221808	OpenCycleCompass server-php login.php sql injection	VulDB	VulDB	02/26/2023	03/25/2023	CVE-2015-10086	accepted
221506	GoPistolet MTA denial of service	VulDB	VulDB	02/19/2023	03/23/2023	CVE-2015-10085	accepted
221504	irontec klear-library BaseController.php _prepareWhere sql injection	VulDB	VulDB	02/19/2023	03/23/2023	CVE-2015-10084	accepted
221503	harrystech Dynosaur-Rails application_controller.rb basic_auth improper authentication	VulDB	VulDB	02/19/2023	03/23/2023	CVE-2015-10083	accepted
221499	UIKit0 libplist XML xplist.c plist_from_xml xml external entity reference	VulDB	VulDB	02/19/2023	03/23/2023	CVE-2015-10082	accepted
221495	arnoldle submitByMailPlugin edit_list.php cross-site request forgery	VulDB	VulDB	02/19/2023	03/23/2023	CVE-2015-10081	accepted
221487	NREL api-umbrella-web Admin Data Table cross site scripting	VulDB	VulDB	02/18/2023	03/23/2023	CVE-2015-10080	accepted
220751	juju2143 WalrusIRC parser.js parseLinks cross site scripting	VulDB	VulDB	02/12/2023	03/10/2023	CVE-2015-10079	accepted
220637	atwellpub Resend Welcome Email Plugin resend-welcome-email.php send_welcome_email_url cross site scripting	VulDB	VulDB	02/11/2023	03/10/2023	CVE-2015-10078	accepted
220471	webbuilders-group silverstripe-kapost-bridge KapostService.php getPreview sql injection	VulDB	VulDB	02/09/2023	03/09/2023	CVE-2015-10077	accepted
220453	dimtion Shaarlier Tag TagsSource.java createTag sql injection	VulDB	VulDB	02/08/2023	03/09/2023	CVE-2015-10076	accepted
220219	Custom-Content-Width custom-content-width.php register_settings cross site scripting	VulDB	VulDB	02/06/2023	03/05/2023	CVE-2015-10075	accepted
220218	OpenSeaMap online_chart index.php init cross site scripting	VulDB	VulDB	02/06/2023	03/05/2023	CVE-2015-10074	accepted
220215	tinymighty WikiSEO Meta Property Tag WikiSEO.body.php modifyHTML cross site scripting	VulDB	VulDB	02/05/2023	03/05/2023	CVE-2015-10073	accepted
220060	NREL api-umbrella-web Flash Message cross site scripting	VulDB	VulDB	02/02/2023	03/04/2023	CVE-2015-10072	accepted
218951	gitter-badger ezpublish-modern-legacy forgotpassword.php password recovery	VulDB	VulDB	01/18/2023	02/15/2023	CVE-2015-10071	accepted
218897	copperwall Twiddit index.php sql injection	VulDB	VulDB	01/18/2023	02/15/2023	CVE-2015-10070	accepted
218896	viakondratiuk cash-machine machine.py update_failed_attempts sql injection	VulDB	VulDB	01/18/2023	02/15/2023	CVE-2015-10069	accepted
218476	danynab movify-j ReviewServiceImpl.java getByMovieId sql injection	VulDB	VulDB	01/17/2023	02/09/2023	CVE-2015-10068	accepted
218463	oznetmaster SSharpSmartThreadPool SmartThreadPool.cs race condition	VulDB	VulDB	01/17/2023	02/09/2023	CVE-2015-10067	accepted
218462	tynx wuersch Store.class.php getByCustomQuery sql injection	VulDB	VulDB	01/17/2023	02/09/2023	CVE-2015-10066	accepted
218458	AenBleidd FiND my_validator.cpp init_result buffer overflow	VulDB	VulDB	01/16/2023	02/09/2023	CVE-2015-10065	accepted
218455	VictorFerraresi pokemon-database-php sql injection	VulDB	VulDB	01/16/2023	02/09/2023	CVE-2015-10064	accepted
218453	saemorris TheRadSystem _login.php redirect sql injection	VulDB	VulDB	01/16/2023	02/09/2023	CVE-2015-10063	accepted
218451	galaxy-data-resource Command Line Template injection	VulDB	VulDB	01/16/2023	02/09/2023	CVE-2015-10062	accepted
218427	evandro-machado Trabalho-Web2 ClienteDAO.java sql injection	VulDB	VulDB	01/16/2023	02/08/2023	CVE-2015-10061	accepted
218417	MNBikeways database views.py sql injection	VulDB	VulDB	01/16/2023	02/08/2023	CVE-2015-10060	accepted
218416	s134328 Webapplication-Veganguide apiService.js cross site scripting	VulDB	VulDB	01/16/2023	02/08/2023	CVE-2015-10059	accepted
218415	Wikisource Category Browser index.php cross site scripting	VulDB	VulDB	01/16/2023	02/08/2023	CVE-2015-10058	accepted
218401	Little Apps Little Software Stats Password Reset class.securelogin.php access control	VulDB	VulDB	01/15/2023	02/07/2023	CVE-2015-10057	accepted
218400	2071174A vinylmap views.py contact sql injection	VulDB	VulDB	01/15/2023	02/07/2023	CVE-2015-10056	accepted
218399	PictureThisWebServer user.js router.post sql injection	VulDB	VulDB	01/15/2023	02/07/2023	CVE-2015-10055	accepted
218397	githuis P2Manage Database.cs Execute sql injection	VulDB	VulDB	01/15/2023	02/07/2023	CVE-2015-10054	accepted
218394	prodigasistemas curupira passwords_controller.rb sql injection	VulDB	VulDB	01/15/2023	02/07/2023	CVE-2015-10053	accepted
218380	ssn2013 cis450Project AddAppUser.java addUser sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10020	accepted
218379	calesanz gibb-modul-151 login redirect	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10052	accepted
218378	bony2023 Discussion-Board main.php display_all_replies sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10051	accepted
218374	brandonfire miRNA_Database_by_PHP_MySql model.php count_rna sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10050	accepted
218372	Overdrive Eletrônica course-builder oeditor.html cross site scripting	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10049	accepted
218357	bmattoso desafio_buzz_woody sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10048	accepted
218355	KYUUBl school-register DBManager.java sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10047	accepted
218353	lolfeedback sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10046	accepted
218352	tutrantta project_todolist Database.php update sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10045	accepted
218350	gophergala sqldump sql injection	VulDB	VulDB	01/14/2023	02/07/2023	CVE-2015-10044	accepted
218307	abreen Apollo path traversal	VulDB	VulDB	01/13/2023	02/07/2023	CVE-2015-10043	accepted
218305	Dovgalyuk AIBattle procedures.php registerUser sql injection	VulDB	VulDB	01/13/2023	02/07/2023	CVE-2015-10042	accepted
218304	Dovgalyuk AIBattle procedures.php sendComments sql injection	VulDB	VulDB	01/13/2023	02/07/2023	CVE-2015-10041	accepted
218302	gitlearn Escape Sequence config.sh getOutOf injection	VulDB	VulDB	01/13/2023	02/07/2023	CVE-2015-10040	accepted
218024	dobos domino EntityFactory.cs sql injection	VulDB	VulDB	01/11/2023	02/04/2023	CVE-2015-10039	accepted
218023	nym3r0s pplv2 sql injection	VulDB	VulDB	01/11/2023	02/04/2023	CVE-2015-10038	accepted
217965	ACI_Escola sql injection	VulDB	VulDB	01/11/2023	02/01/2023	CVE-2015-10037	accepted
217951	kylebebak dronfelipe sql injection	VulDB	VulDB	01/11/2023	02/01/2023	CVE-2015-10036	accepted
217715	gperson angular-test-reporter data-server.js addTest sql injection	VulDB	VulDB	01/09/2023	01/30/2023	CVE-2015-10035	accepted
217714	j-nowak workout-organizer sql injection	VulDB	VulDB	01/09/2023	01/30/2023	CVE-2015-10034	accepted
217713	jvvlee MerlinsBoard Grade improper authorization	VulDB	VulDB	01/09/2023	01/30/2023	CVE-2015-10033	accepted
217663	HealthMateWeb createaccount.php cross site scripting	VulDB	VulDB	01/09/2023	01/30/2023	CVE-2015-10032	accepted

28 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 28 results.

◂ Previous Overview Next ▸

Do you need the next level of professionalism?

Upgrade your account now!