| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-8756 | 3.5 | Cross-site scripting (XSS) vulnerability in the search result view in the Indexed Search (indexed_search) component in TYPO3 6.2.x before 6.2.16 allows remote authenticated editors to inject arbitrary web script or HTML via unspecified vectors. | 2016-01-12 02:56:00 | 2016-01-08 19:59:00 |
| CVE-2015-8754 | 5.0 | The Mollom module 6.x-2.7 before 6.x-2.15 for Drupal allows remote attackers to bypass intended access restrictions and modify the mollom blacklist via unspecified vectors. | 2016-01-12 02:55:00 | 2016-01-08 19:59:00 |
| CVE-2015-8755 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in unspecified backend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors. | 2016-01-12 02:53:00 | 2016-01-08 19:59:00 |
| CVE-2015-8761 | 6.0 | The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import. | 2016-01-12 02:46:00 | 2016-01-08 19:59:00 |
| CVE-2015-8759 | 3.5 | Cross-site scripting (XSS) vulnerability in the typoLink function in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allows remote authenticated editors to inject arbitrary web script or HTML via a link field. | 2016-01-12 02:45:00 | 2016-01-08 19:59:00 |
| CVE-2016-1565 | 3.5 | Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an element attribute | 2016-01-12 02:44:00 | 2016-01-08 21:59:00 |
| CVE-2015-8758 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in unspecified frontend components in TYPO3 6.2.x before 6.2.16 and 7.x before 7.6.1 allow remote authenticated editors to inject arbitrary web script or HTML via unknown vectors. | 2016-01-12 02:44:00 | 2016-01-08 19:59:00 |
| CVE-2015-7466 | 4.0 | Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended query restrictions or modify the LDAP directo | 2016-01-12 02:43:00 | 2016-01-10 03:59:00 |
| CVE-2015-7465 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service (JRS) 6.0 before 6.0.0-Rational-CLM-ifix005 allows remote authenticated users to hijack the authentication of arbitrary users for requests t | 2016-01-12 02:42:00 | 2016-01-10 03:59:00 |
| CVE-2015-7024 | 6.9 | Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a val | 2016-01-12 01:30:00 | 2016-01-11 11:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: