| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-0779 | 7.5 | The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object. | 2018-10-09 19:58:00 | 2017-04-11 16:59:00 |
| CVE-2016-0392 | 4.6 | IBM General Parallel File System (GPFS) in GPFS Storage Server 2.0.0 through 2.0.7 and Elastic Storage Server 2.5.x through 2.5.5, 3.x before 3.5.5, and 4.x before 4.0.3, as distributed in Spectrum Scale RAID, allows local users to gain privileges vi | 2018-10-09 19:58:00 | 2016-06-19 20:59:00 |
| CVE-2015-7611 | 9.3 | Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors. | 2018-10-09 19:58:00 | 2016-06-07 14:06:00 |
| CVE-2015-7360 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet FortiSandbox before 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) serial parameter to alerts/summary/profile/; the (2) u | 2018-10-09 19:58:00 | 2016-05-26 15:59:00 |
| CVE-2016-0891 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in administrative pages in EMC ViPR SRM before 3.7 allow remote attackers to hijack the authentication of administrators. | 2018-10-09 19:58:00 | 2016-04-20 17:59:00 |
| CVE-2015-7555 | 4.3 | Heap-based buffer overflow in giffix.c in giffix in giflib 5.1.1 allows attackers to cause a denial of service (program crash) via crafted image and logical screen width fields in a GIF file. | 2018-10-09 19:58:00 | 2016-04-13 15:59:00 |
| CVE-2015-8399 | 4.0 | Atlassian Confluence before 5.8.17 allows remote authenticated users to read configuration files via the decoratorName parameter to (1) spaces/viewdefaultdecorator.action or (2) admin/viewdefaultdecorator.action. | 2018-10-09 19:58:00 | 2016-04-11 21:59:00 |
| CVE-2015-8398 | 4.3 | Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.8.17 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to rest/prototype/1/session/check. | 2018-10-09 19:58:00 | 2016-04-11 21:59:00 |
| CVE-2016-0784 | 4.0 | Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry. | 2018-10-09 19:58:00 | 2016-04-11 14:59:00 |
| CVE-2016-0783 | 5.0 | The sendHashByUser function in Apache OpenMeetings before 3.1.1 generates predictable password reset tokens, which makes it easier for remote attackers to reset arbitrary user passwords by leveraging knowledge of a user name and the current system ti | 2018-10-09 19:58:00 | 2016-04-11 14:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: