| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2017-15270 | 5.0 | The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be used by attackers to hide data in the Graphical User Interface (GUI) view and create arbitrary entries to a certa | 2018-10-09 20:01:00 | 2017-11-15 16:29:00 |
| CVE-2017-14089 | 7.5 | An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access the OfficeScan server to target cgiShowClientAdm.exe and cause memory corruption issues. | 2018-10-09 20:01:00 | 2017-10-06 01:29:00 |
| CVE-2017-14087 | 5.0 | A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing the attacker to render arbitrary links that point to a malicious website with poisoned Host header webpages. | 2018-10-09 20:01:00 | 2017-10-06 01:29:00 |
| CVE-2017-14085 | 5.0 | Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan server to query the network's NT domain or the PHP version and modules. | 2018-10-09 20:01:00 | 2017-10-06 01:29:00 |
| CVE-2017-9538 | 4.0 | The 'Upload logo from external path' function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to cause a denial of service (permanent display of a "Cannot exit above the top directory" error message throughout | 2018-10-09 20:01:00 | 2017-10-03 01:29:00 |
| CVE-2017-9537 | 3.5 | Persistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance Monitor version 12.0.15300.90 allows remote attackers to introduce arbitrary JavaScript into various vulnerable parameters. | 2018-10-09 20:01:00 | 2017-10-03 01:29:00 |
| CVE-2017-13754 | 3.5 | Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeConfiguration. | 2018-10-09 20:01:00 | 2017-09-07 13:29:00 |
| CVE-2017-9767 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Name or (2) Description parameter to RM/Reservation/ReserveNew; the (3) Description p | 2018-10-09 20:01:00 | 2017-08-18 16:29:00 |
| CVE-2017-11494 | 7.5 | SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action. | 2018-10-09 20:01:00 | 2017-08-02 14:29:00 |
| CVE-2017-9613 | 3.5 | Stored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows remote authenticated users to inject arbitrary web script or HTML via the file upload functionality. | 2018-10-09 20:01:00 | 2017-06-15 18:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: