| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-5019 | 5.0 | The multisite feature in Drupal 6.x before 6.32 and 7.x before 7.29 allows remote attackers to cause a denial of service via a crafted HTTP Host header, related to determining which configuration file to use. | 2014-07-22 19:00:00 | 2014-07-22 14:55:00 |
| CVE-2014-5023 | 6.8 | Repository.php in Gitter, as used in Gitlist, allows remote attackers with commit privileges to execute arbitrary commands via shell metacharacters in a branch name, as demonstrated by a "git checkout -b" command. | 2014-07-22 15:20:00 | 2014-07-22 14:55:00 |
| CVE-2013-7392 | 7.5 | Gitlist allows remote attackers to execute arbitrary commands via shell metacharacters in a file name to Source/. | 2014-07-22 15:14:00 | 2014-07-22 14:55:00 |
| CVE-2014-5018 | 4.3 | Incomplete blacklist vulnerability in the autoEscape function in common_helper.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to conduct cross-site scripting (XSS) attacks via the GBK charset in the loadname parameter to index.php, rela | 2014-07-22 14:01:00 | 2014-07-21 14:55:00 |
| CVE-2014-5017 | 7.5 | SQL injection vulnerability in CPDB in application/controllers/admin/participantsaction.php in LimeSurvey 2.05+ Build 140618 allows remote attackers to execute arbitrary SQL commands via the sidx parameter in a JSON request to admin/participants/sa/g | 2014-07-22 14:01:00 | 2014-07-21 14:55:00 |
| CVE-2014-5016 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in LimeSurvey 2.05+ Build 140618 allow remote attackers to inject arbitrary web script or HTML via (1) the pid attribute to the getAttribute_json function to application/controllers/admin/participan | 2014-07-22 13:58:00 | 2014-07-21 14:55:00 |
| CVE-2014-0470 | 7.2 | super.c in Super 3.30.0 does not check the return value of the setuid function when the -F flag is set, which allows local users to gain privileges via unspecified vectors, aka an RLIMIT_NPROC attack. | 2014-07-18 18:40:00 | 2014-04-30 14:22:00 |
| CVE-2014-1956 | 5.0 | CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. | 2014-07-18 18:38:00 | 2014-04-30 14:22:00 |
| CVE-2014-1955 | 4.3 | Cross-site scripting (XSS) vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-07-18 18:38:00 | 2014-04-30 14:22:00 |
| CVE-2014-1957 | 6.5 | FortiGuard FortiWeb before 5.0.3 allows remote authenticated users to gain privileges via unspecified vectors. | 2014-07-18 18:32:00 | 2014-04-30 14:22:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: