| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3909 | 6.8 | Session fixation vulnerability in Falcon WisePoint 4.1.19.7 and earlier allows remote attackers to hijack web sessions via unspecified vectors. | 2014-09-08 14:45:00 | 2014-09-05 17:55:00 |
| CVE-2014-5036 | 1.9 | The Storage Controller (SC) component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs. | 2014-09-08 14:32:00 | 2014-09-05 14:55:00 |
| CVE-2014-5285 | 7.5 | Unspecified vulnerability in the Authentication Module in TIBCO Spotfire Server before 4.5.2, 5.0.x before 5.0.3, 5.5.x before 5.5.2, 6.0.x before 6.0.3, and 6.5.x before 6.5.1 allows remote attackers to gain privileges, and obtain sensitive informat | 2014-09-05 14:45:00 | 2014-09-04 10:55:00 |
| CVE-2013-5879 | 6.8 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. | 2014-09-04 05:25:00 | 2014-01-15 16:11:00 |
| CVE-2013-6398 | 2.8 | The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request. | 2014-09-04 05:25:00 | 2014-01-15 16:08:00 |
| CVE-2013-4736 | 7.8 | Multiple integer overflows in the JPEG engine drivers in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denia | 2014-09-04 05:23:00 | 2014-02-10 18:15:00 |
| CVE-2014-5465 | 5.0 | Directory traversal vulnerability in force-download.php in the Download Shortcode plugin 0.2.3 and earlier for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. | 2014-09-03 20:15:00 | 2014-09-03 19:55:00 |
| CVE-2014-5521 | 6.5 | plugins/useradmin/fingeruser.php in XRMS CRM, possibly 1.99.2, allows remote authenticated users to execute arbitrary code via shell metacharacters in the username parameter. | 2014-09-03 14:15:00 | 2014-09-02 14:55:00 |
| CVE-2014-0485 | 7.5 | S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/. | 2014-09-03 13:33:00 | 2014-09-02 14:55:00 |
| CVE-2014-5076 | 4.3 | The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated | 2014-09-02 19:13:00 | 2014-09-02 10:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: