| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-14028 | 6.5 | In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This allows for PHP files to be uploaded. Once a PHP file is uploaded, the plugin extraction fails, but the PHP file remains in a predictable wp-content/uplo | 2018-10-10 13:06:00 | 2018-08-10 16:29:00 |
| CVE-2012-0711 | 7.5 | Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through FP5 on UNIX platforms allows remote attackers to execute arbitrary code via a crafted request that t | 2018-10-10 10:29:00 | 2012-03-20 20:55:00 |
| CVE-2012-0710 | 5.0 | IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Distributed Relational Database Architecture (DRDA) request. | 2018-10-10 10:29:00 | 2012-03-20 20:55:00 |
| CVE-2018-6563 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in totemomail Encryption Gateway before 6.0.0_Build_371 allow remote attackers to hijack the authentication of users for requests that (1) change user settings, (2) send emails, or (3) change | 2018-10-09 20:01:00 | 2018-06-20 14:29:00 |
| CVE-2018-11027 | 4.3 | A reflected XSS vulnerability on Ruckus ICX7450-48 devices allows remote attackers to inject arbitrary web script or HTML. | 2018-10-09 20:01:00 | 2018-05-29 20:29:00 |
| CVE-2018-7268 | 4.9 | MagniComp SysInfo before 10-H81, as shipped with BMC BladeLogic Automation and other products, contains an information exposure vulnerability in which a local unprivileged user is able to read any root (uid 0) owned file on the system, regardless of | 2018-10-09 20:01:00 | 2018-05-21 15:29:00 |
| CVE-2017-12815 | 10.0 | Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archive can be downloaded from a given Bomgar Remote Support Portal deployment at https://domain | 2018-10-09 20:01:00 | 2018-03-26 21:29:00 |
| CVE-2017-12410 | 6.9 | It is possible to exploit a Time of Check & Time of Use (TOCTOU) vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Succes | 2018-10-09 20:01:00 | 2018-03-26 21:29:00 |
| CVE-2017-8802 | 3.5 | Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote attackers to inject arbitrary web script or HTML via vectors related to the "Show Snippet" functionality. | 2018-10-09 20:01:00 | 2018-01-16 19:29:00 |
| CVE-2017-15271 | 4.3 | A use-after-free issue could be triggered remotely in the SFTP component of PSFTPd 10.0.4 Build 729. This issue could be triggered prior to authentication. The PSFTPd server did not automatically restart, which enabled attackers to perform a very eff | 2018-10-09 20:01:00 | 2017-11-15 16:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: