| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2015-1562 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter to admin/user_management.php, (2) data_search parameter to /admin/profile_data.php, or | 2015-02-09 19:16:00 | 2015-02-09 11:59:00 |
| CVE-2014-9643 | 7.2 | K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950 | 2015-02-09 16:09:00 | 2015-02-06 15:59:00 |
| CVE-2014-9642 | 7.2 | bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x0022405c IOCTL call. | 2015-02-09 16:09:00 | 2015-02-06 15:59:00 |
| CVE-2014-9641 | 7.2 | The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222400 IOCTL call. | 2015-02-09 16:02:00 | 2015-02-06 15:59:00 |
| CVE-2015-1442 | 7.5 | SQL injection vulnerability in views/zero_transact_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote authenticated users to execute arbitrary SQL commands via the user_id parameter in a Modify Account action. | 2015-02-09 14:14:00 | 2015-02-06 15:59:00 |
| CVE-2014-0605 | 10.0 | Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the SaveSettings method. | 2015-02-09 14:08:00 | 2015-02-06 11:59:00 |
| CVE-2014-0604 | 10.0 | Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors to the StartLog method. | 2015-02-09 14:05:00 | 2015-02-06 11:59:00 |
| CVE-2014-0603 | 10.0 | The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary code via vectors related to the (1) GetGlobalSettings or (2) GetSitePro | 2015-02-09 14:05:00 | 2015-02-06 11:59:00 |
| CVE-2014-9354 | 4.0 | NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storage. | 2015-02-09 14:04:00 | 2015-02-06 11:59:00 |
| CVE-2015-1479 | 6.5 | SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to execute arbitrary SQL commands via the site parameter. | 2015-02-06 20:40:00 | 2015-02-04 16:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: