| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-7242 | 4.3 | Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote attackers to inject arbitrary web script or HTML via the display name in the FROM field of an SIP INVITE message. | 2018-10-09 19:58:00 | 2016-01-12 19:59:00 |
| CVE-2015-7706 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Secure Data Space SDS-API before 3.5.7 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO to api/v3/public/shares/downloads/, the (2) authType parameter to api/v3 | 2018-10-09 19:58:00 | 2016-01-11 15:59:00 |
| CVE-2015-7527 | 7.5 | lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page. | 2018-10-09 19:58:00 | 2015-12-17 19:59:00 |
| CVE-2015-8562 | 7.5 | Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015. | 2018-10-09 19:58:00 | 2015-12-16 21:59:00 |
| CVE-2015-8358 | 9.0 | Directory traversal vulnerability in the bitrix.mpbuilder module before 1.0.12 for Bitrix allows remote administrators to include and execute arbitrary local files via a .. (dot dot) in the element name of the "work" array parameter to admin/bitrix.m | 2018-10-09 19:58:00 | 2015-12-16 21:59:00 |
| CVE-2015-8357 | 6.5 | Directory traversal vulnerability in the bitrix.xscan module before 1.0.4 for Bitrix allows remote authenticated users to rename arbitrary files, and consequently obtain sensitive information or cause a denial of service, via a .. (dot dot) in the fi | 2018-10-09 19:58:00 | 2015-12-16 21:59:00 |
| CVE-2015-8247 | 4.3 | Cross-site scripting (XSS) vulnerability in synnefoclient in Synnefo Internet Management Software (IMS) 2015 allows remote attackers to inject arbitrary web script or HTML via the plan_name parameter to packagehistory/listusagesdata. | 2018-10-09 19:58:00 | 2015-12-15 21:59:00 |
| CVE-2015-8124 | 6.8 | Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 allows remote attackers to hijack web sessions via a session id. | 2018-10-09 19:58:00 | 2015-12-07 20:59:00 |
| CVE-2015-8320 | 5.0 | Apache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data, which makes it easier for attackers to conduct bridge hijacking attacks by predicting a value. | 2018-10-09 19:58:00 | 2015-11-23 11:59:00 |
| CVE-2015-7385 | 4.3 | Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script or HTML via the uid field in a PGP public key, which is not properly handled in "Guard PGP Settings." | 2018-10-09 19:58:00 | 2015-11-19 20:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: