| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-4108 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary code via a crafted request to admin_lua_script.ht | 2018-10-09 19:57:00 | 2015-06-10 18:59:00 |
| CVE-2015-4415 | 5.0 | Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) theme or (2) lang cookie parameter to AnimaGallery/. | 2018-10-09 19:57:00 | 2015-06-10 14:59:00 |
| CVE-2015-4427 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in Test/WorkArea/workarea.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.114) allow remote authenticated users to inject arbitrary web script or HTML via the (1) p | 2018-10-09 19:57:00 | 2015-06-09 14:59:00 |
| CVE-2015-4109 | 7.5 | Multiple SQL injection vulnerabilities in the ratings module in the Users Ultra plugin before 1.5.16 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) data_target or (2) data_vote parameter in a rating_vote (wp_ajax_n | 2018-10-09 19:57:00 | 2015-06-09 14:59:00 |
| CVE-2015-4080 | 6.8 | The Kankun Smart Socket device and mobile application uses a hardcoded AES 256 bit key, which makes it easier for remote attackers to (1) obtain sensitive information by sniffing the network and (2) obtain access to the device by encrypting messages. | 2018-10-09 19:57:00 | 2015-06-09 14:59:00 |
| CVE-2015-4038 | 6.5 | The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an iv_membership_update_user_settings action to wp-admin/admin-ajax.php. | 2018-10-09 19:57:00 | 2015-06-03 20:59:00 |
| CVE-2015-3995 | 4.0 | SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement, aka SAP Security Note 2109565. | 2018-10-09 19:57:00 | 2015-05-29 15:59:00 |
| CVE-2015-3994 | 4.0 | The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818. | 2018-10-09 19:57:00 | 2015-05-29 15:59:00 |
| CVE-2015-4084 | 4.3 | Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value_ parameter in a check_stat action to wp-admin/admin-ajax.php. | 2018-10-09 19:57:00 | 2015-05-28 14:59:00 |
| CVE-2015-3986 | 4.3 | Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to hijack the authentication of administrators f | 2018-10-09 19:57:00 | 2015-05-14 14:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: