| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2010-1610 | 6.8 | Cross-site request forgery (CSRF) vulnerability in index.php in OpenCart 1.4 allows remote attackers to hijack the authentication of an application administrator for requests that create an administrative account via a POST request with the route par | 2018-10-10 19:57:00 | 2010-04-29 19:30:00 |
| CVE-2010-1609 | 4.3 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and 2004s before SP13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2018-10-10 19:57:00 | 2010-04-29 17:30:00 |
| CVE-2010-1593 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via (1) the CommenterURL parameter to PostCommentForm, and in the Forum module before 0.2.5 in SilverStripe | 2018-10-10 19:57:00 | 2010-04-28 23:30:00 |
| CVE-2010-1587 | 5.0 | The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics. | 2018-10-10 19:57:00 | 2010-04-28 22:30:00 |
| CVE-2010-1585 | 9.3 | The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a c | 2018-10-10 19:57:00 | 2010-04-28 22:30:00 |
| CVE-2010-1464 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) currency_id_left, (2) currency_id_right, (3) darkcolor, (4) lightcolor, (5) middlecolor, and (6 | 2018-10-10 19:57:00 | 2010-04-16 19:30:00 |
| CVE-2010-1463 | 7.5 | Multiple SQL injection vulnerabilities in WebAsyst Shop-Script FREE allow attackers to execute arbitrary SQL commands via the (1) add2cart, (2) c_id, (3) categoryID, (4) list_price, (5) name, (6) new_offer, (7) price, (8) product_code, (9) productID, | 2018-10-10 19:57:00 | 2010-04-16 19:30:00 |
| CVE-2010-1462 | 10.0 | Directory traversal vulnerability in WebAsyst Shop-Script FREE has unknown impact and attack vectors via the sub parameter. | 2018-10-10 19:57:00 | 2010-04-16 19:30:00 |
| CVE-2010-1460 | 5.0 | The IBM BladeCenter with Advanced Management Module (AMM) firmware before bpet50g does not properly perform interrupt sharing for USB and iSCSI, which allows remote attackers to cause a denial of service (management module reboot) via TCP packets wit | 2018-10-10 19:57:00 | 2010-04-16 18:30:00 |
| CVE-2018-7090 | 4.3 | HPE XP P9000 Command View Advanced Edition Software (CVAE) has local and remote cross site scripting vulnerability in versions 7.0.0-00 to earlier than 8.60-00 of DevMgr, TSMgr and RepMgr. | 2018-10-10 19:56:00 | 2018-08-06 20:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: