| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-8153 | 4.0 | The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router update processing) by creating eight routers and assigning an ipv6 non-provider subnet t | 2015-01-16 00:37:00 | 2015-01-15 15:59:00 |
| CVE-2015-1052 | 4.3 | Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web script or HTML via the result parameter to upload_files/pk/include.php. | 2015-01-15 22:47:00 | 2015-01-15 15:59:00 |
| CVE-2015-1040 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lrealname field in the editProfile form to index.php/home/profile; t | 2015-01-15 22:46:00 | 2015-01-15 15:59:00 |
| CVE-2015-1039 | 4.3 | Cross-site scripting (XSS) vulnerability in user/login.phtml in ZF-Commons ZfcUser before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the redirect parameter. | 2015-01-15 22:45:00 | 2015-01-15 15:59:00 |
| CVE-2014-10035 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to inject arbitrary web script or HTML via the (1) sEcho parameter to comments_paginate.php or (2) stores_paginate.php or the | 2015-01-14 21:42:00 | 2015-01-13 15:59:00 |
| CVE-2014-100039 | 2.1 | mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call, which triggers an out-of-bounds read. NOTE: some of these details are obtained from thi | 2015-01-14 20:02:00 | 2015-01-13 15:59:00 |
| CVE-2014-100035 | 7.5 | SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 2015-01-14 20:00:00 | 2015-01-13 15:59:00 |
| CVE-2014-100033 | 5.0 | Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors. | 2015-01-14 19:59:00 | 2015-01-13 15:59:00 |
| CVE-2014-100037 | 4.3 | Cross-site scripting (XSS) vulnerability in Storytlr 1.3.dev and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to archives/. | 2015-01-14 19:56:00 | 2015-01-13 15:59:00 |
| CVE-2014-100021 | 4.3 | Cross-site scripting (XSS) vulnerability in symfony/web/index.php/pim/viewEmployeeList in OrangeHRM before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the empsearch[employee_name][empId] parameter. | 2015-01-14 19:51:00 | 2015-01-13 15:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: