| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-4018 | 7.8 | The ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors. | 2014-07-16 17:44:00 | 2014-07-16 14:19:00 |
| CVE-2014-3777 | 5.0 | Directory traversal vulnerability in Reportico PHP Report Designer before 4.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the xmlin parameter. | 2014-07-16 17:28:00 | 2014-07-16 14:19:00 |
| CVE-2014-4663 | 6.8 | TimThumb 2.8.13 and WordThumb 1.07, when Webshot (aka Webshots) is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the src parameter. | 2014-07-15 19:25:00 | 2014-07-15 14:55:00 |
| CVE-2014-4031 | 4.0 | The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain database credentials via unspecified vectors. | 2014-07-15 19:17:00 | 2014-07-15 14:55:00 |
| CVE-2014-1474 | 5.0 | Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string without an address. | 2014-07-15 16:37:00 | 2014-07-15 14:55:00 |
| CVE-2014-2955 | 10.0 | Raritan PX before 1.5.11 on DPXR20A-16 devices allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password. | 2014-07-15 16:24:00 | 2014-07-14 21:55:00 |
| CVE-2014-2951 | 10.0 | Datum Systems SnIP on PSM-500 and PSM-4500 devices has a hardcoded password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors. | 2014-07-15 15:44:00 | 2014-07-14 21:55:00 |
| CVE-2014-2950 | 7.8 | Datum Systems SnIP on PSM-500 and PSM-4500 devices does not require authentication for FTP sessions, which allows remote attackers to obtain sensitive information via RETR commands. | 2014-07-15 15:41:00 | 2014-07-14 21:55:00 |
| CVE-2014-2926 | 1.7 | kapfa.sys in Kaseya Virtual System Administrator (VSA) 6.5 before 6.5.0.17 and 7.0 before 7.0.0.16 allows local users to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors. | 2014-07-15 15:26:00 | 2014-07-14 21:55:00 |
| CVE-2014-4946 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Horde Internet Mail Program (IMP) before 6.1.8, as used in Horde Groupware Webmail Edition before 5.1.5, allow remote attackers to inject arbitrary web script or HTML via (1) unspecified flags or | 2014-07-14 18:34:00 | 2014-07-14 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: