| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-7370 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive Adserver before 3.2.2 and CA Release Automation (formerly LISA Release Automation) 5.0.2 before 5.0.2-227, 5.5 | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7369 | 7.5 | The default Flash cross-domain policy (crossdomain.xml) in Revive Adserver before 3.2.2 does not restrict access cross domain access, which allows remote attackers to conduct cross domain attacks via unspecified vectors. | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7368 | 2.1 | Revive Adserver before 3.2.2 does not send the appropriate Cache-Control HTTP headers in responses for admin UI pages, which allows local users to obtain sensitive information via the web browser cache. | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7367 | 7.5 | Revive Adserver before 3.2.2 allows remote attackers to perform unspecified actions by leveraging an unexpired session after the user has been (1) deleted or (2) unlinked. | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7366 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Revive Adserver before 3.2.2 allow remote attackers to hijack the authentication of users for requests that (1) perform certain plugin actions and possibly cause a denial of service (disab | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7365 | 4.3 | Cross-site scripting (XSS) vulnerability in the plugin upgrade form in Revive Adserver before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via the filename of an uploaded file containing errors. | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7364 | 6.8 | The HTML_Quickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protection mechanism via an empty token. | 2018-10-09 19:58:00 | 2015-10-14 19:59:00 |
| CVE-2015-7392 | 7.5 | Heap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing \u in a json string to cJSON_Parse. | 2018-10-09 19:58:00 | 2015-10-05 14:59:00 |
| CVE-2015-7320 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecif | 2018-10-09 19:58:00 | 2015-09-29 19:59:00 |
| CVE-2015-7319 | 7.5 | SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to updat | 2018-10-09 19:58:00 | 2015-09-29 19:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: