| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-4195 | 4.3 | Cross-site scripting (XSS) vulnerability in zero_view_article.php in ZeroCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the article_id parameter. | 2014-07-09 01:29:00 | 2014-07-03 14:55:00 |
| CVE-2014-2956 | 9.3 | ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attack | 2014-07-08 18:49:00 | 2014-07-08 11:06:00 |
| CVE-2014-4723 | 4.3 | Cross-site scripting (XSS) vulnerability in the Easy Banners plugin 1.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter to wp-admin/options-general.php. | 2014-07-08 15:27:00 | 2014-07-07 14:55:00 |
| CVE-2014-4646 | 6.8 | Buffer overflow in the FPDFBookmark_GetTitle method in Foxit PDF SDK DLL before 3.1.1.5005 allows context-dependent attackers to execute arbitrary code via unspecified vectors. | 2014-07-08 15:12:00 | 2014-07-07 14:55:00 |
| CVE-2014-2969 | 8.3 | NETGEAR GS108PE Prosafe Plus switches with firmware 1.2.0.5 have a hardcoded password of debugpassword for the ntgruser account, which allows remote attackers to upload firmware or read or modify memory contents, and consequently execute arbitrary co | 2014-07-07 19:14:00 | 2014-07-07 11:01:00 |
| CVE-2014-2967 | 10.0 | Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server. | 2014-07-07 19:10:00 | 2014-07-07 11:01:00 |
| CVE-2014-4720 | 5.0 | Email::Address module before 1.904 for Perl uses an inefficient regular expression, which allows remote attackers to cause a denial of service (CPU consumption) via vectors related to "backtracking into the phrase," a different vulnerability than CVE | 2014-07-07 14:52:00 | 2014-07-06 23:55:00 |
| CVE-2014-4168 | 5.0 | (1) iodined.c and (2) user.c in iodine before 0.7.0 allows remote attackers to bypass authentication by continuing execution after an error has been triggering. | 2014-07-07 14:49:00 | 2014-07-03 17:55:00 |
| CVE-2014-4719 | 4.3 | Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field. | 2014-07-07 14:15:00 | 2014-07-03 14:55:00 |
| CVE-2014-4718 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Lunar CMS before 3.3-3 allow remote attackers to hijack the authentication of administrators for requests that (1) add Super users via a request to admin/user_create.php or conduct cross-s | 2014-07-07 14:10:00 | 2014-07-03 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: