| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-1491 | 5.4 | The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area. | 2018-10-09 19:59:00 | 2016-01-26 19:59:00 |
| CVE-2016-1490 | 2.7 | The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows allows remote attackers to obtain sensitive file names via a crafted file request to /list. | 2018-10-09 19:59:00 | 2016-01-26 19:59:00 |
| CVE-2016-1489 | 4.3 | Lenovo SHAREit before 3.2.0 for Windows and SHAREit before 3.5.48_ww for Android transfer files in cleartext, which allows remote attackers to (1) obtain sensitive information by sniffing the network or (2) conduct man-in-the-middle (MITM) attacks vi | 2018-10-09 19:59:00 | 2016-01-26 19:59:00 |
| CVE-2015-7667 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via t | 2018-10-09 19:58:00 | 2017-12-27 19:29:00 |
| CVE-2015-7670 | 7.5 | Multiple SQL injection vulnerabilities in includes/update.php in the Support Ticket System plugin before 1.2.1 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user or (2) id parameter. | 2018-10-09 19:58:00 | 2017-09-26 15:29:00 |
| CVE-2015-7391 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in TestLink before 1.9.14 allow remote attackers to inject arbitrary web script or HTML via the (1) selected_end_date or (2) selected_start_date parameter to lib/results/tcCreatedPerUserOnTestProjec | 2018-10-09 19:58:00 | 2017-09-26 15:29:00 |
| CVE-2015-8354 | 4.3 | Cross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _refer parameter to wp-admin/users.php. | 2018-10-09 19:58:00 | 2017-09-11 20:29:00 |
| CVE-2015-8353 | 4.3 | Cross-site scripting (XSS) vulnerability in the Role Scoper plugin before 1.3.67 for WordPress allows remote attackers to inject arbitrary web script or HTML via the object_name parameter in a rs-object_role_edit page to wp-admin/admin.php. | 2018-10-09 19:58:00 | 2017-09-11 20:29:00 |
| CVE-2015-8351 | 6.8 | PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captc | 2018-10-09 19:58:00 | 2017-09-11 20:29:00 |
| CVE-2015-8350 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab parameter in a wp_cta_global_settings action to wp-admin/e | 2018-10-09 19:58:00 | 2017-09-11 20:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: