| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-100018 | 4.3 | Cross-site scripting (XSS) vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in the unconfirmed page to wp-admin/network/users.php. | 2015-01-14 19:48:00 | 2015-01-13 15:59:00 |
| CVE-2014-100012 | 7.5 | SQL injection vulnerability in /app in Sendy 1.1.8.4 allows remote attackers to execute arbitrary SQL commands via the i parameter. | 2015-01-14 19:45:00 | 2015-01-13 15:59:00 |
| CVE-2014-9507 | 2.6 | MediaWiki 1.21.x, 1.22.x before 1.22.14, and 1.23.x before 1.23.7, when $wgContentHandlerUseDB is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks by setting the content model for a revision to JS. | 2015-01-14 02:59:00 | 2015-01-04 21:59:00 |
| CVE-2014-9459 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the AdminObserver function in e107_admin/users.php in e107 2.0 alpha2 allows remote attackers to hijack the authentication of administrators for requests that add users to the administrator group via | 2015-01-14 02:59:00 | 2015-01-02 20:59:00 |
| CVE-2014-10030 | 5.8 | Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect_url parameter. | 2015-01-14 00:32:00 | 2015-01-13 11:59:00 |
| CVE-2014-10024 | 7.5 | Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code via a (1) negative or (2) large value in a Stream Format (STRF) chunk in an | 2015-01-14 00:30:00 | 2015-01-13 11:59:00 |
| CVE-2014-10022 | 5.0 | Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing. | 2015-01-14 00:29:00 | 2015-01-13 11:59:00 |
| CVE-2014-10015 | 7.5 | SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter. | 2015-01-14 00:20:00 | 2015-01-13 11:59:00 |
| CVE-2014-10006 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site scripting (XSS) attacks via the width parameter to (1) uplo | 2015-01-13 23:57:00 | 2015-01-13 11:59:00 |
| CVE-2014-10005 | 5.0 | Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in an error message. | 2015-01-13 23:55:00 | 2015-01-13 11:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: