| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2017-7357 | 6.5 | Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file. | 2018-10-09 20:01:00 | 2017-04-14 18:59:00 |
| CVE-2017-7185 | 5.0 | Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of service (crash | 2018-10-09 20:01:00 | 2017-04-10 15:59:00 |
| CVE-2017-7183 | 5.0 | The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large (1) read or (2) write TFTP protocol message. | 2018-10-09 20:01:00 | 2017-03-27 17:59:00 |
| CVE-2017-5359 | 5.0 | EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI. | 2018-10-09 20:01:00 | 2017-03-15 15:59:00 |
| CVE-2016-9832 | 6.5 | PricewaterhouseCoopers (PwC) ACE-ABAP 8.10.304 for SAP Security allows remote authenticated users to conduct ABAP injection attacks and execute arbitrary code via (1) SAPGUI or (2) Internet Communication Framework (ICF) over HTTP or HTTPS, as demonst | 2018-10-09 20:01:00 | 2016-12-10 02:59:00 |
| CVE-2016-6133 | 4.3 | Cross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3(9.1.0.184.3.127) allows remote attackers to inject arbitrary web script or HTML via the rptStatus parameter in a Report action to WorkArea/SelectUserGrou | 2018-10-09 20:00:00 | 2017-07-25 20:29:00 |
| CVE-2016-5648 | 4.3 | Acer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which allows remote attackers to perform a Man-in-the-middle attack via a crafted SSL certificate. | 2018-10-09 20:00:00 | 2017-06-08 20:29:00 |
| CVE-2016-4313 | 6.8 | Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (dot dot) in an archive file. | 2018-10-09 20:00:00 | 2017-04-24 18:59:00 |
| CVE-2016-7955 | 7.5 | The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or ex | 2018-10-09 20:00:00 | 2017-03-15 16:59:00 |
| CVE-2016-7140 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the ZMI page in Zope2 in Plone CMS 5.x through 5.0.6, 4.x through 4.3.11, and 3.3.x through 3.3.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2018-10-09 20:00:00 | 2017-03-07 16:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: