| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-7259 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Neo4J 1.9.2 allow remote attackers to hijack the authentication of administrators for requests that execute arbitrary code, as demonstrated by a request to (1) db/data/ext/GremlinPlugin/gr | 2014-08-04 21:42:00 | 2014-04-29 14:38:00 |
| CVE-2013-1804 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbitrary web script or HTML via the (1) highlight parameter to forum/viewthread.php; or remote authenticated users with certain permiss | 2014-08-04 21:41:00 | 2014-04-29 20:55:00 |
| CVE-2014-3045 | 2.1 | IBM Scale Out Network Attached Storage (SONAS) 1.3.x and 1.4.x before 1.4.3.3 places an administrative password in the shell history upon use of the -p option to chuser, which allows local users to obtain sensitive information by leveraging root acce | 2014-08-04 19:05:00 | 2014-07-19 05:09:00 |
| CVE-2014-1987 | 10.0 | The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors. | 2014-08-04 19:00:00 | 2014-07-20 11:12:00 |
| CVE-2014-1993 | 4.0 | The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. | 2014-08-04 18:38:00 | 2014-07-20 11:12:00 |
| CVE-2014-1996 | 7.5 | Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call. | 2014-08-04 16:54:00 | 2014-07-20 11:12:00 |
| CVE-2014-1999 | 7.5 | The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response. | 2014-08-04 16:27:00 | 2014-07-20 11:12:00 |
| CVE-2014-3894 | 4.3 | Cross-site scripting (XSS) vulnerability in PHP Kobo Multifunctional MailForm Free 2014/1/28 and earlier allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header. | 2014-08-04 16:06:00 | 2014-07-20 11:12:00 |
| CVE-2014-5101 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in WeBid 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) TPL_name, (2) TPL_nick, (3) TPL_email, (4) TPL_year, (5) TPL_address, (6) TPL_city, (7) TPL_prov, (8) TPL_zip | 2014-08-04 15:29:00 | 2014-07-25 19:55:00 |
| CVE-2013-5758 | 9.0 | cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system method in the body of a request, as demonstrated by running unauthorized services, changing directory permissio | 2014-08-04 14:13:00 | 2014-08-03 18:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: