| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-16349 | 4.3 | WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter. | 2018-10-23 19:55:00 | 2018-09-02 18:29:00 |
| CVE-2014-6050 | 5.0 | phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request. | 2018-10-23 19:17:00 | 2018-08-28 17:29:00 |
| CVE-2014-6049 | 5.5 | phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted instance ID parameter. | 2018-10-23 19:05:00 | 2018-08-28 17:29:00 |
| CVE-2018-1000652 | 7.5 | JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploita | 2018-10-23 19:00:00 | 2018-08-20 19:31:00 |
| CVE-2014-6048 | 5.0 | phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request. | 2018-10-23 18:55:00 | 2018-08-28 17:29:00 |
| CVE-2014-6047 | 5.0 | phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leveraging incorrect "download an attachment" permission checks. | 2018-10-23 18:46:00 | 2018-08-28 17:29:00 |
| CVE-2018-14007 | 10.0 | Citrix XenServer 7.1 and newer allows Directory Traversal. | 2018-10-23 18:14:00 | 2018-08-15 18:29:00 |
| CVE-2018-11247 | 7.5 | The JMX/RMI interface in Nasdaq BWise 5.0 does not require authentication for an SAP BO Component, which allows remote attackers to execute arbitrary code via a session on port 81. | 2018-10-23 18:01:00 | 2018-08-15 18:29:00 |
| CVE-2018-8412 | 4.6 | An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka "Microsoft (MAU) Office Elevation of Privilege Vulnerability." This affects Microsoft Offic | 2018-10-23 17:55:00 | 2018-08-15 17:29:00 |
| CVE-2018-15894 | 7.5 | A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue parameter. | 2018-10-23 17:42:00 | 2018-08-27 04:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: