| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-4682 | 5.0 | The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote attackers to obtain sensitive information via an HTTP request. | 2014-07-25 14:27:00 | 2014-07-24 14:55:00 |
| CVE-2014-2971 | 3.5 | Cross-site scripting (XSS) vulnerability in AddStdLetter.jsp in MicroPact iComplaints before 8.0.2.1.8.8014 allows remote authenticated users to inject arbitrary web script or HTML via the description parameter. | 2014-07-25 14:00:00 | 2014-07-24 14:55:00 |
| CVE-2014-2717 | 7.6 | Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain administrative access by visiting the change-password page | 2014-07-25 13:52:00 | 2014-07-24 14:55:00 |
| CVE-2014-2968 | 4.3 | Cross-site scripting (XSS) vulnerability in the web interface on the Huawei E355 CH1E355SM modem with software 21.157.37.01.910 and Web UI 11.001.08.00.03 allows remote attackers to inject arbitrary web script or HTML via an SMS message. | 2014-07-24 18:49:00 | 2014-07-24 14:55:00 |
| CVE-2014-0607 | 10.0 | Unrestricted file upload vulnerability in Attachmate Verastream Process Designer (VPD) before R6 SP1 Hotfix 1 allows remote attackers to execute arbitrary code by uploading and launching an executable file. | 2014-07-24 17:33:00 | 2014-07-24 14:55:00 |
| CVE-2014-4672 | 7.5 | The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property. | 2014-07-24 05:01:00 | 2014-07-03 17:55:00 |
| CVE-2014-3815 | 7.8 | Juniper Junos 12.1X46 before 12.1X46-D20 and 12.1X47 before 12.1X47-D10 on SRX Series devices allows remote attackers to cause a denial of service (flowd crash) via a crafted SIP packet. | 2014-07-24 05:00:00 | 2014-07-11 20:55:00 |
| CVE-2014-3433 | 4.3 | Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field, related to an "HTML script injection" iss | 2014-07-24 05:00:00 | 2014-06-27 14:55:00 |
| CVE-2014-3432 | 4.3 | Cross-site scripting (XSS) vulnerability in the management console in Symantec Data Insight 3.x and 4.x before 4.5 allows remote attackers to inject arbitrary web script or HTML via an unspecified form field. | 2014-07-24 05:00:00 | 2014-06-27 14:55:00 |
| CVE-2014-2613 | 9.0 | Unspecified vulnerability in HP Release Control 9.x before 9.13 p3 and 9.2x before RC 9.21.0003 p1 on Windows and 9.2x before RC 9.21.0002 p1 on Linux allows remote authenticated users to gain privileges via unknown vectors. | 2014-07-24 04:59:00 | 2014-06-28 15:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: