| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-4716 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter parameters to goform/RgSecurity. | 2014-07-07 13:57:00 | 2014-07-03 14:55:00 |
| CVE-2014-3492 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the host YAML view in Foreman before 1.4.5 and 1.5.x before 1.5.1 allow remote attackers to inject arbitrary web script or HTML via a parameter (1) name or (2) value related to the host. | 2014-07-02 17:50:00 | 2014-07-01 16:55:00 |
| CVE-2014-3491 | 4.3 | Cross-site scripting (XSS) vulnerability in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field to the New Host groups page, related to create, update, and destroy notification | 2014-07-02 17:45:00 | 2014-07-01 16:55:00 |
| CVE-2014-4602 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in xencarousel-admin.js.php in the XEN Carousel plugin 0.12.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) path or (2) ajaxpath parameter. | 2014-07-02 17:40:00 | 2014-07-01 14:55:00 |
| CVE-2014-4585 | 4.3 | Cross-site scripting (XSS) vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajax_url parameter to index.php. | 2014-07-02 17:12:00 | 2014-07-01 14:55:00 |
| CVE-2014-4584 | 4.3 | Cross-site scripting (XSS) vulnerability in admin/editFacility.php in the wp-easybooking plugin 1.0.3 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the fID parameter. | 2014-07-02 17:09:00 | 2014-07-01 14:55:00 |
| CVE-2014-4583 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in forms/messages.php in the WP-Contact (wp-contact-sidebar-widget) plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) edit, (2) order_dir | 2014-07-02 16:59:00 | 2014-07-01 14:55:00 |
| CVE-2014-4575 | 4.3 | Cross-site scripting (XSS) vulnerability in js/window.php in the Wikipop plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter. | 2014-07-02 16:54:00 | 2014-07-01 14:55:00 |
| CVE-2014-4564 | 4.3 | Cross-site scripting (XSS) vulnerability in check.php in the Validated plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter. | 2014-07-02 16:23:00 | 2014-07-01 14:55:00 |
| CVE-2014-4556 | 4.3 | Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkout for eShop plugin 3.7.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the api_url parameter. | 2014-07-02 16:20:00 | 2014-07-01 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: