| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-4649 | 6.5 | SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field. | 2014-06-30 22:10:00 | 2014-06-28 15:55:00 |
| CVE-2013-7060 | 5.0 | Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initialized in class scope. | 2014-06-30 22:03:00 | 2014-05-02 14:55:00 |
| CVE-2013-7003 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) full name field, (2) company field, or (3) filename to chat.php. | 2014-06-30 18:33:00 | 2014-05-05 17:06:00 |
| CVE-2010-5299 | 6.8 | Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file. NOTE: it has been reported that the overflow is in the lpFileName parameter of the CreateFileA function, but the overflow is | 2014-06-30 18:07:00 | 2014-05-23 00:55:00 |
| CVE-2014-4648 | 10.0 | Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure." | 2014-06-30 15:22:00 | 2014-06-28 15:55:00 |
| CVE-2014-3881 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to hijack the authentication of arbitrary users. | 2014-06-30 14:57:00 | 2014-06-28 00:55:00 |
| CVE-2014-2006 | 4.3 | Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-06-30 14:39:00 | 2014-06-28 00:55:00 |
| CVE-2014-3011 | 5.0 | IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to conduct link injection attacks via unspecified vectors. | 2014-06-30 14:06:00 | 2014-06-27 23:55:00 |
| CVE-2011-1381 | 6.4 | Unspecified vulnerability in IBM OpenPages GRC Platform 6.1.0.1 before IF4 allows remote attackers to bypass intended access restrictions via unknown vectors. | 2014-06-30 14:02:00 | 2014-06-27 23:55:00 |
| CVE-2013-7138 | 5.0 | Directory traversal vulnerability in lib/functions/d-load.php in Horizon Quick Content Management System (QCMS) 4.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the start parameter. | 2014-06-27 17:08:00 | 2014-01-09 18:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: