| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-5384 | 5.0 | The VIQR module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (out-of-bounds array access) via a crafted argument to the iconv_open function. NOTE: this issue was SPL | 2014-08-21 23:16:00 | 2014-08-21 22:55:00 |
| CVE-2014-3951 | 5.0 | The HZ module in the iconv implementation in FreeBSD 10.0 before p6 and NetBSD allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted argument to the iconv_open function. NOTE: this issue was SPLIT p | 2014-08-21 23:14:00 | 2014-08-21 22:55:00 |
| CVE-2014-5210 | 10.0 | The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary commands via a crafted (1) remote_task or (2) get_license request, a different vulnerability than CVE-2014-3804 and CVE-2014-3805. | 2014-08-21 16:57:00 | 2014-08-21 14:55:00 |
| CVE-2014-5159 | 7.5 | SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter. | 2014-08-21 16:52:00 | 2014-08-21 14:55:00 |
| CVE-2014-5158 | 10.0 | The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary commands via unspecified vectors. | 2014-08-21 16:49:00 | 2014-08-21 14:55:00 |
| CVE-2014-5382 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Schrack Technik microControl with firmware 1.7.0 (937) allow remote attackers to inject arbitrary web script or HTML via the position textbox in the configuration menu or oth | 2014-08-21 14:51:00 | 2014-08-20 14:55:00 |
| CVE-2014-5350 | 5.0 | Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter to webservice/CORE/downloadFullKitEpc/a/1 in the Web Console or (2) %2 | 2014-08-20 17:55:00 | 2014-08-19 19:55:00 |
| CVE-2014-5349 | 5.0 | Stack-based buffer overflow in Baidu Spark Browser 26.5.9999.3511 allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print JavaScript function. | 2014-08-20 17:36:00 | 2014-08-19 19:55:00 |
| CVE-2014-5348 | 4.3 | Cross-site scripting (XSS) vulnerability in apps/zxtm/locallog.cgi in Riverbed Stingray (aka SteelApp) Traffic Manager Virtual Appliance 9.6 patchlevel 9620140312 allows remote attackers to inject arbitrary web script or HTML via the logfile paramete | 2014-08-20 17:26:00 | 2014-08-19 19:55:00 |
| CVE-2014-5346 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Disqus Comment System plugin 2.77 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) activate or (2) deactivate the plugin via th | 2014-08-20 17:18:00 | 2014-08-19 19:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: