| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3938 | 9.3 | Integer overflow in Autodesk SketchBook Pro before 6.2.6 allows remote attackers to execute arbitrary code via crafted layer mask data in a PSD file, which triggers a heap-based buffer overflow. | 2014-07-23 17:14:00 | 2014-07-23 14:55:00 |
| CVE-2014-3518 | 6.8 | jmx-remoting.sar in JBoss Remoting, as used in Red Hat JBoss Enterprise Application Platform (JEAP) 5.2.0, Red Hat JBoss BRMS 5.3.1, Red Hat JBoss Portal Platform 5.2.2, and Red Hat JBoss SOA Platform 5.3.1, does not properly implement the JSR 160 sp | 2014-07-23 13:14:00 | 2014-07-22 20:55:00 |
| CVE-2014-1992 | 3.5 | Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. | 2014-07-22 22:59:00 | 2014-07-20 11:12:00 |
| CVE-2014-3884 | 4.3 | Cross-site scripting (XSS) vulnerability in Usermin before 1.600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924. | 2014-07-22 22:55:00 | 2014-07-20 11:12:00 |
| CVE-2014-3886 | 2.6 | Cross-site scripting (XSS) vulnerability in Webmin before 1.690, when referrer checking is disabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924. | 2014-07-22 22:54:00 | 2014-07-20 11:12:00 |
| CVE-2014-3885 | 4.3 | Cross-site scripting (XSS) vulnerability in Webmin before 1.690 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. NOTE: this might overlap CVE-2014-3924. | 2014-07-22 22:54:00 | 2014-07-20 11:12:00 |
| CVE-2014-5022 | 4.3 | Cross-site scripting (XSS) vulnerability in the Ajax system in Drupal 7.x before 7.29 allows remote attackers to inject arbitrary web script or HTML via vectors involving forms with an Ajax-enabled textfield and a file field. | 2014-07-22 19:21:00 | 2014-07-22 14:55:00 |
| CVE-2014-5021 | 2.1 | Cross-site scripting (XSS) vulnerability in the Form API in Drupal 6.x before 6.32 and possibly 7.x before 7.29 allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via an option group lab | 2014-07-22 19:10:00 | 2014-07-22 14:55:00 |
| CVE-2014-4017 | 4.3 | Cross-site scripting (XSS) vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php. | 2014-07-22 19:05:00 | 2014-06-10 14:55:00 |
| CVE-2014-5020 | 4.9 | The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file | 2014-07-22 19:03:00 | 2014-07-22 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: