| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-9353 | 10.0 | NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors. | 2015-02-06 16:06:00 | 2015-02-06 11:59:00 |
| CVE-2014-8272 | 5.0 | The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-f | 2015-02-05 20:13:00 | 2014-12-19 11:59:00 |
| CVE-2014-5776 | 5.4 | The PlayMemories Online (aka jp.co.sony.tablet.PersonalSpace) application 4.2.0.05070 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr | 2015-02-05 17:37:00 | 2014-09-09 10:55:00 |
| CVE-2014-9562 | 4.3 | Cross-site scripting (XSS) vulnerability in display_dialog.php in M2 OptimalSite 0.1 and 2.4 allows remote attackers to inject arbitrary web script or HTML via the image parameter. | 2015-02-05 16:08:00 | 2015-02-04 18:59:00 |
| CVE-2014-5341 | 4.3 | The SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the RSA Host key after login, which allows remote attackers to obtain sensitive information by sniffing the network. | 2015-02-05 15:20:00 | 2015-02-04 18:59:00 |
| CVE-2015-1478 | 4.3 | Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the view parameter to /classifieds. | 2015-02-04 19:54:00 | 2015-02-04 16:59:00 |
| CVE-2015-1477 | 7.5 | SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads. | 2015-02-04 19:54:00 | 2015-02-04 16:59:00 |
| CVE-2015-1476 | 7.5 | Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username or (3) password parameter to __admin/index.php. | 2015-02-04 19:40:00 | 2015-02-04 16:59:00 |
| CVE-2015-1469 | 9.0 | time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a cookie received in an HTTP response, a different vulnerability than CVE-2015-09 | 2015-02-04 17:53:00 | 2015-02-03 22:59:00 |
| CVE-2015-1460 | 7.5 | Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet. | 2015-02-04 17:51:00 | 2015-02-03 16:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: