| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-10002 | 5.0 | Unspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain sensitive information via unknown vectors. | 2015-01-13 23:05:00 | 2015-01-13 11:59:00 |
| CVE-2014-100009 | 5.0 | The Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to obtain the installation path via a request to (1) functions.php, (2) myCalendar.php, (3) refreshDate.php, (4) show_ | 2015-01-13 22:30:00 | 2015-01-13 11:59:00 |
| CVE-2013-2604 | 7.2 | RealNetworks GameHouse RealArcade Installer (aka ActiveMARK Game Installer) 2.6.0.481 and 3.0.7 uses weak permissions (Create Files/Write Data) for the GameHouse Games directory tree, which allows local users to gain privileges via a Trojan horse DLL | 2015-01-13 20:43:00 | 2015-01-12 19:59:00 |
| CVE-2013-2603 | 10.0 | The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to execute arbitrary code or cau | 2015-01-13 20:42:00 | 2015-01-12 19:59:00 |
| CVE-2014-9510 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the administration console in TP-Link TL-WR840N (V1) router with firmware before 3.13.27 build 141120 allows remote attackers to hijack the authentication of administrators for requests that change r | 2015-01-13 01:49:00 | 2015-01-09 18:59:00 |
| CVE-2014-9501 | 3.5 | Cross-site scripting (XSS) vulnerability in the Poll Chart Block module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a poll node title. | 2015-01-12 19:09:00 | 2015-01-09 18:59:00 |
| CVE-2014-9500 | 4.3 | Cross-site scripting (XSS) vulnerability in the Moip module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to the notification page callback. | 2015-01-12 19:09:00 | 2015-01-09 18:59:00 |
| CVE-2014-9498 | 3.5 | Cross-site scripting (XSS) vulnerability in the Webform Invitation module 7.x-1.x before 7.x-1.3 and 7.x-2.x before 7.x-2.4 for Drupal allows remote authenticated users with the Webform: Create new content, Webform: Edit own content, or Webform: Edit | 2015-01-12 19:08:00 | 2015-01-09 18:59:00 |
| CVE-2013-7419 | 4.3 | Cross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the roomid para | 2015-01-12 17:31:00 | 2015-01-09 18:59:00 |
| CVE-2014-4644 | 7.5 | SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execute arbitrary SQL commands via the id parameter. | 2015-01-12 07:10:00 | 2014-06-25 20:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: