| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3279 | 5.0 | The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka B | 2015-12-04 18:43:00 | 2014-05-29 17:55:00 |
| CVE-2014-3278 | 5.0 | The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to enumerate accounts by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun39619 and CSC | 2015-12-04 18:42:00 | 2014-06-08 16:55:00 |
| CVE-2014-3898 | 4.3 | Cross-site scripting (XSS) vulnerability in Fujitsu ServerView Operations Manager 5.00.09 through 6.30.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2015-12-04 16:21:00 | 2014-08-14 05:01:00 |
| CVE-2014-4911 | 5.0 | The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensi | 2015-12-04 16:21:00 | 2014-07-22 14:55:00 |
| CVE-2014-4164 | 4.3 | Cross-site scripting (XSS) vulnerability in AlgoSec FireFlow 6.3-b230 allows remote attackers to inject arbitrary web script or HTML via a user signature to SelfService/Prefs.html. | 2015-12-04 16:21:00 | 2014-06-16 18:55:00 |
| CVE-2014-5239 | 4.0 | The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 2015-12-04 16:19:00 | 2014-08-14 05:01:00 |
| CVE-2014-5193 | 4.3 | Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the category parameter. NOTE: the url parameter vector is already covered by CVE-2014-5082. | 2015-12-04 16:18:00 | 2014-08-07 11:13:00 |
| CVE-2014-5196 | 4.3 | Cross-site request forgery (CSRF) vulnerability in improved-user-search-in-backend.php in the backend in the Improved user search in backend plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of administrators for | 2015-12-04 16:17:00 | 2014-08-12 20:55:00 |
| CVE-2014-0972 | 7.2 | The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to s | 2015-12-04 16:16:00 | 2014-08-01 11:13:00 |
| CVE-2014-2949 | 6.5 | SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. | 2015-12-04 16:16:00 | 2014-06-18 16:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39823
Zapisa po stranici: