| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2017-1286 | 4.0 | Sensitive information about the configuration of the IBM UrbanCode Deploy 6.1 through 6.9.6.0 server and database can be obtained by a user who has been given elevated permissions in the UI, even after those elevated permissions have been revoked. IB | 2018-10-10 16:30:00 | 2018-08-13 16:29:00 |
| CVE-2018-13392 | 4.3 | Several resources in Atlassian Fisheye and Crucible before version 4.6.0 allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in linked issue keys. | 2018-10-10 16:24:00 | 2018-08-13 13:29:00 |
| CVE-2018-14850 | 3.5 | Stored XSS vulnerabilities in Tiki before 18.2, 15.7 and 12.14 allow an authenticated user injecting JavaScript to gain administrator privileges if an administrator opens a wiki page and moves the mouse pointer over a modified link or thumb image. | 2018-10-10 15:46:00 | 2018-08-13 17:29:00 |
| CVE-2018-15125 | 5.0 | Sensitive Information Disclosure in Zipato Zipabox Smart Home Controller allows remote attacker get sensitive information that expands attack surface. | 2018-10-10 15:43:00 | 2018-08-13 21:48:00 |
| CVE-2018-15124 | 10.0 | Weak hashing algorithm in Zipato Zipabox Smart Home Controller BOARD REV - 1 with System Version -118 allows unauthenticated attacker extract clear text passwords and get root access on the device. | 2018-10-10 15:35:00 | 2018-08-13 21:48:00 |
| CVE-2018-14849 | 3.5 | Tiki before 18.2, 15.7 and 12.14 has XSS via link attributes, related to lib/core/WikiParser/OutputLink.php and lib/parser/parserlib.php. | 2018-10-10 15:27:00 | 2018-08-13 17:29:00 |
| CVE-2018-14923 | 9.3 | A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via video playback. | 2018-10-10 15:09:00 | 2018-08-03 20:29:00 |
| CVE-2018-14857 | 6.5 | Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Inventory NG OCS Inventory Server through 2.5 allows a privileged user to gain access to the server via a template file containing PHP cod | 2018-10-10 15:05:00 | 2018-08-06 21:29:00 |
| CVE-2018-14911 | 6.5 | A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly filtering the file upload type. An attacker can exploit the vulnerability to upload a script Trojan to admin.php/admin/configset/index | 2018-10-10 15:04:00 | 2018-08-03 19:29:00 |
| CVE-2018-7060 | 6.8 | Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface. | 2018-10-10 13:38:00 | 2018-08-06 20:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: