| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-5912 | 5.0 | The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses. | 2018-10-09 19:57:00 | 2015-09-18 12:00:00 |
| CVE-2015-6973 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via a crafted request to user-password.jsp, (2 | 2018-10-09 19:57:00 | 2015-09-16 19:59:00 |
| CVE-2015-5465 | 7.2 | Silicon Integrated Systems WindowsXP Display Manager (aka VGA Driver Manager and VGA Display Manager) 6.14.10.3930 allows local users to gain privileges via a crafted (1) 0x96002400 or (2) 0x96002404 IOCTL call. | 2018-10-09 19:57:00 | 2015-09-16 18:59:00 |
| CVE-2015-5956 | 3.5 | The sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated b | 2018-10-09 19:57:00 | 2015-09-16 14:59:00 |
| CVE-2015-6945 | 4.3 | Cross-site scripting (XSS) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to inject arbitrary web script or HTML via the bd parameter to sys/sys/listaBD2.jsp. | 2018-10-09 19:57:00 | 2015-09-15 18:59:00 |
| CVE-2015-6944 | 6.8 | Cross-site request forgery (CSRF) vulnerability in JSP/MySQL Administrador Web 1 allows remote attackers to hijack the authentication of users for requests that execute arbitrary SQL commands via the cmd parameter to sys/sys/listaBD2.jsp. | 2018-10-09 19:57:00 | 2015-09-15 18:59:00 |
| CVE-2015-6913 | 4.3 | Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in Synology Download Station before 3.5-2967 allows remote attackers to inject arbitrary web script or HTML via the urls parameter in an add_url_task action to dlm | 2018-10-09 19:57:00 | 2015-09-11 16:59:00 |
| CVE-2015-6912 | 10.0 | Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle_codepage parameter to subtitle.cgi. | 2018-10-09 19:57:00 | 2015-09-11 16:59:00 |
| CVE-2015-6911 | 7.5 | SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter to watchstatus.cgi. | 2018-10-09 19:57:00 | 2015-09-11 16:59:00 |
| CVE-2015-6910 | 7.5 | SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi. | 2018-10-09 19:57:00 | 2015-09-11 16:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: