Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2015-6746

EPSS 0.12% · P30
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2015-6746

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Basware Banking (Maksuliikenne) before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications with banks via unspecified vectors. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 due to different vulnerability types.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Basware Banking 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Basware Banking(Maksuliikenne)是芬兰Basware公司的一套与银行建立连接对自己的金融进行管理的软件。 Basware Banking 8.90.07及之前版本中存在安全漏洞,该漏洞源于程序在SQL数据库中以明文形式存储私钥。远程攻击者可利用该漏洞伪造与银行之间的通信。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2015-6746

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-6746

登录查看更多情报信息。

Same Patch Batch · n/a · 2015-08-31 · 44 CVEs total

CVE-2015-6751Drupal Time Tracker模块跨站脚本漏洞
CVE-2015-6753Drupal Quick Edit模块跨站脚本漏洞
CVE-2015-6655Pligg CMS 跨站请求伪造漏洞
CVE-2015-6754Drupal Path Breadcrumbs模块跨站脚本漏洞
CVE-2015-6269Cisco ASR 1000 IOS XE 资源管理错误漏洞
CVE-2015-6270Cisco ASR 1000 IOS XE 资源管理错误漏洞
CVE-2015-6271Cisco ASR 1000 IOS XE 资源管理错误漏洞
CVE-2015-6272Cisco ASR 1000 IOS XE 资源管理错误漏洞
CVE-2015-6526Linux kernel‘perf_callchain_user_64()’函数拒绝服务漏洞
CVE-2015-4036Linux kernel‘vhost_scsi_make_tpg()’数组索引错误漏洞
CVE-2015-6752Drupal Search API Autocomplete模块跨站脚本漏洞
CVE-2015-6535WordPress YouTube Embed插件跨站脚本漏洞
CVE-2014-6616Softing FG-100 PB PROFIBUS 跨站脚本漏洞
CVE-2014-3148OkCupid OKWS 跨站脚本漏洞
CVE-2014-2570PHP Font Lib 跨站脚本漏洞
CVE-2014-2332Mathias Kettner Check_MK 任意文件删除漏洞
CVE-2014-2331Mathias Kettner Check_MK 代码注入漏洞
CVE-2014-2330Mathias Kettner Check_MK 跨站请求伪造漏洞
CVE-2014-2329Mathias Kettner Check_MK 跨站脚本漏洞
CVE-2015-6750Ricoh DL FTP Server 缓冲区溢出漏洞

Showing top 20 of 44 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2015-6746

No comments yet


Leave a comment