| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-7908 | 9.3 | Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discover cleartext passwords by sniffing the network. | 2015-12-21 18:29:00 | 2015-12-21 11:59:00 |
| CVE-2015-7906 | 10.0 | LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash backup file via unspecified vectors. | 2015-12-21 18:27:00 | 2015-12-21 11:59:00 |
| CVE-2014-4724 | 4.3 | Cross-site scripting (XSS) vulnerability in the Custom Banners plugin 1.2.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_banners_registered_name parameter to wp-admin/options.php. | 2015-12-19 02:02:00 | 2014-07-07 14:55:00 |
| CVE-2014-5881 | 5.4 | The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificat | 2015-12-18 19:55:00 | 2014-09-11 16:55:00 |
| CVE-2014-4669 | 3.5 | HP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity | 2015-12-18 19:05:00 | 2014-06-28 15:55:00 |
| CVE-2015-8602 | 3.5 | The Token Insert Entity module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote authenticated users with certain permissions to bypass intended access restrictions and possibly obtain sensitive information by | 2015-12-18 18:45:00 | 2015-12-17 19:59:00 |
| CVE-2015-8601 | 5.0 | The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms | 2015-12-18 18:45:00 | 2015-12-17 19:59:00 |
| CVE-2015-8368 | 6.0 | ntopng (aka ntop) before 2.2 allows remote authenticated users to change the login context and gain privileges via the user cookie and username parameter to admin/password_reset.lua. | 2015-12-18 18:43:00 | 2015-12-17 19:59:00 |
| CVE-2015-6556 | 2.3 | EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump. | 2015-12-18 18:42:00 | 2015-12-18 11:59:00 |
| CVE-2015-5204 | 4.3 | CRLF injection vulnerability in the Apache Cordova File Transfer Plugin (cordova-plugin-file-transfer) for Android before 1.3.0 allows remote attackers to inject arbitrary headers via CRLF sequences in the filename of an uploaded file. | 2015-12-18 18:04:00 | 2015-12-17 19:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: