| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-5105 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in ol-commerce 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) a_country parameter in a process action to affiliate_signup.php or (2) entry_country_id parameter in an | 2014-07-29 13:05:00 | 2014-07-28 15:55:00 |
| CVE-2014-5104 | 7.5 | Multiple SQL injection vulnerabilities in ol-commerce 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) a_country parameter in a process action to affiliate_signup.php, (2) affiliate_banner_id parameter to affiliate_show_bann | 2014-07-29 13:04:00 | 2014-07-28 15:55:00 |
| CVE-2014-4726 | 7.5 | Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8 for WordPress has unspecified impact and attack vectors. | 2014-07-28 19:21:00 | 2014-07-27 18:55:00 |
| CVE-2014-4725 | 7.5 | The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-admin/admin-post.php and accessing the theme in wp-c | 2014-07-28 19:18:00 | 2014-07-27 18:55:00 |
| CVE-2014-4857 | 4.3 | Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By field in a project activity. | 2014-07-28 19:05:00 | 2014-07-26 15:55:00 |
| CVE-2014-2966 | 5.0 | The ISO-8859-1 encoder in Resin Pro before 4.0.40 does not properly perform Unicode transformations, which allows remote attackers to bypass intended text restrictions via crafted characters, as demonstrated by bypassing an XSS protection mechanism. | 2014-07-28 19:00:00 | 2014-07-26 15:55:00 |
| CVE-2014-4686 | 6.8 | The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive information by extracting this key from another product | 2014-07-25 14:59:00 | 2014-07-24 14:55:00 |
| CVE-2014-4685 | 4.6 | Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control. | 2014-07-25 14:49:00 | 2014-07-24 14:55:00 |
| CVE-2014-4684 | 6.0 | The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433. | 2014-07-25 14:42:00 | 2014-07-24 14:55:00 |
| CVE-2014-4683 | 4.9 | The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request. | 2014-07-25 14:37:00 | 2014-07-24 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: