| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-9582 | 4.3 | Cross-site scripting (XSS) vulnerability in components/filemanager/dialog.php in Codiad 2.4.3 allows remote attackers to inject arbitrary web script or HTML via the short_name parameter in a rename action. NOTE: this issue was originally incorrectly | 2015-01-11 02:59:00 | 2015-01-08 20:59:00 |
| CVE-2014-9581 | 5.0 | Directory traversal vulnerability in components/filemanager/download.php in Codiad 2.4.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter. NOTE: this issue was originally incorrectly mapped to CVE-2014-1137; s | 2015-01-11 02:59:00 | 2015-01-08 20:59:00 |
| CVE-2010-4054 | 4.3 | The gs_type2_interpret function in Ghostscript allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) via crafted font data in a compressed data stream, aka bug 691043. | 2015-01-09 23:44:00 | 2010-10-23 20:39:00 |
| CVE-2010-2055 | 7.2 | Ghostscript 8.71 and earlier reads initialization files from the current working directory, which allows local users to execute arbitrary PostScript commands via a Trojan horse file, related to improper support for the -P- option to the gs program, a | 2015-01-09 23:44:00 | 2010-07-22 05:43:00 |
| CVE-2009-4270 | 9.3 | Stack-based buffer overflow in the errprintf function in base/gsmisc.c in ghostscript 8.64 through 8.70 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PDF file, as originally reported fo | 2015-01-09 23:42:00 | 2009-12-21 16:30:00 |
| CVE-2014-4883 | 4.3 | resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poiso | 2015-01-08 19:56:00 | 2014-11-28 02:59:00 |
| CVE-2015-0919 | 7.5 | Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrators to execute arbitrary SQL commands via the (1) idcat or (2) idclient parameter to backend/main.php. | 2015-01-08 19:55:00 | 2015-01-08 15:59:00 |
| CVE-2015-0918 | 4.3 | Cross-site scripting (XSS) vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter to backend/main.php. | 2015-01-08 19:55:00 | 2015-01-08 15:59:00 |
| CVE-2015-0917 | 4.3 | Cross-site scripting (XSS) vulnerability in the backend in Kajona before 4.6.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter to index.php. | 2015-01-08 19:54:00 | 2015-01-08 15:59:00 |
| CVE-2014-9579 | 5.0 | VDG Security SENSE (formerly DIVA) 2.3.13 stores administrator credentials in cleartext, which allows attackers to obtain sensitive information by reading the plugin configuration files. | 2015-01-08 19:54:00 | 2015-01-08 15:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39679
Zapisa po stranici: