| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-8051 | 10.0 | The Adobe Premiere Clip app before 1.2.1 for iOS mishandles unspecified input, which has unknown impact and attack vectors. | 2018-10-09 19:58:00 | 2015-11-18 21:59:00 |
| CVE-2015-8221 | 10.0 | Integer overflow in Google Picasa before 3.9.140 Build 259 allows remote attackers to execute arbitrary code via the CAMF section in a FOVb image, which triggers a heap-based buffer overflow. | 2018-10-09 19:58:00 | 2015-11-17 15:59:00 |
| CVE-2015-7712 | 6.5 | Multiple eval injection vulnerabilities in mods/_standard/gradebook/edit_marks.php in ATutor 2.2 and earlier allow remote authenticated users with the AT_PRIV_GRADEBOOK privilege to execute arbitrary PHP code via the (1) asc or (2) desc parameter. | 2018-10-09 19:58:00 | 2015-11-16 19:59:00 |
| CVE-2015-8096 | 10.0 | Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related to "phase one 0x412 tag," which triggers a heap-based buffer overflow. | 2018-10-09 19:58:00 | 2015-11-09 16:59:00 |
| CVE-2015-7683 | 4.0 | Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitrary files via a full pathname in the url parameter to AjaxProxy.php. | 2018-10-09 19:58:00 | 2015-10-16 20:59:00 |
| CVE-2015-7682 | 6.5 | Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del | 2018-10-09 19:58:00 | 2015-10-16 20:59:00 |
| CVE-2015-7377 | 4.3 | Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the invitaion_code parameter in a pie-register page to | 2018-10-09 19:58:00 | 2015-10-16 20:59:00 |
| CVE-2015-7373 | 4.3 | Cross-site scripting (XSS) vulnerability in the "magic-macros" feature in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via a GET parameter, which is not properly handled in a banner. | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7372 | 7.5 | Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the layerstyle parameter. | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7371 | 5.0 | Revive Adserver before 3.2.2 does not restrict access to run-mpe.php, which allows remote attackers to run the Maintenance Priority Engine and possibly cause a denial of service (resource consumption) via a direct request. | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: