| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3862 | 4.3 | CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an IMG element with an arbitrary URL in its SRC attribute, leading to information disclosure | 2014-09-02 19:04:00 | 2014-09-02 10:55:00 |
| CVE-2014-3861 | 4.3 | Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted reference element within a nonXMLBody element. | 2014-09-02 19:02:00 | 2014-09-02 10:55:00 |
| CVE-2013-6124 | 3.3 | The Qualcomm Innovation Center (QuIC) init scripts in Code Aurora Forum (CAF) releases of Android 4.1.x through 4.4.x allow local users to modify file metadata via a symlink attack on a file accessed by a (1) chown or (2) chmod command, as demonstrat | 2014-09-02 18:51:00 | 2014-08-31 10:55:00 |
| CVE-2013-2598 | 6.6 | app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to overwrite signature-verification code via crafted boot-image l | 2014-09-02 18:44:00 | 2014-08-31 10:55:00 |
| CVE-2013-2595 | 7.2 | The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, enables MSM_CAM_IOCTL_SET_MEM_MAP_INFO ioctl c | 2014-09-02 18:41:00 | 2014-08-31 10:55:00 |
| CVE-2014-3908 | 5.8 | The Amazon.com Kindle application before 4.5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 2014-09-02 18:04:00 | 2014-08-30 09:55:00 |
| CVE-2010-5110 | 4.3 | DCTStream.cc in Poppler before 0.13.3 allows remote attackers to cause a denial of service (crash) via a crafted PDF file. | 2014-09-02 16:54:00 | 2014-08-29 16:55:00 |
| CVE-2014-0327 | 9.3 | The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321. | 2014-08-28 18:57:00 | 2014-08-17 23:55:00 |
| CVE-2014-0326 | 9.3 | The Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allow remote attackers to read hardcoded credentials via the web interface. | 2014-08-28 18:57:00 | 2014-08-17 23:55:00 |
| CVE-2014-5203 | 7.5 | wp-includes/class-wp-customize-widgets.php in the widget implementation in WordPress 3.9.x before 3.9.2 might allow remote attackers to execute arbitrary code via crafted serialized data. | 2014-08-28 18:06:00 | 2014-08-18 11:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: