| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3842 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) decrypt or (2) encrypt parameter. | 2014-06-27 16:56:00 | 2014-05-22 15:13:00 |
| CVE-2014-3841 | 4.3 | Cross-site scripting (XSS) vulnerability in the Contact Bank plugin before 2.0.20 for WordPress allows remote attackers to inject arbitrary web script or HTML via the Label field, related to form layout configuration. NOTE: some of these details are | 2014-06-27 16:56:00 | 2014-05-22 15:13:00 |
| CVE-2014-3843 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Search Everything plugin before 8.1.1 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | 2014-06-27 16:53:00 | 2014-05-22 15:13:00 |
| CVE-2014-3844 | 5.0 | The TinyMCE Color Picker plugin before 1.2 for WordPress does not properly check permissions, which allows remote attackers to modify plugin settings via unspecified vectors. NOTE: some of these details are obtained from third party information. | 2014-06-27 16:52:00 | 2014-05-22 15:13:00 |
| CVE-2014-3845 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the TinyMCE Color Picker plugin before 1.2 for WordPress allows remote attackers to hijack the authentication of unspecified users for requests that change plugin settings via unknown vectors. NOTE: | 2014-06-27 16:51:00 | 2014-05-22 15:13:00 |
| CVE-2014-2948 | 6.5 | SQL injection vulnerability in workflowenginesoa.asmx in Bizagi BPM Suite through 10.4 allows remote authenticated users to execute arbitrary SQL commands via a crafted SOAP request. | 2014-06-27 16:50:00 | 2014-05-22 20:55:00 |
| CVE-2014-3788 | 7.5 | Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary code via a negative value in the Content-Length field in a request. | 2014-06-27 16:48:00 | 2014-05-22 23:55:00 |
| CVE-2013-1668 | 8.5 | The uploadFile function in upload/index.php in CosCMS before 1.822 allows remote administrators to execute arbitrary commands via shell metacharacters in the name of an uploaded file. | 2014-06-27 16:35:00 | 2014-05-23 14:55:00 |
| CVE-2013-4143 | 2.1 | The (1) checkPasswd and (2) checkGroupXlockPasswds functions in xlockmore before 5.43 do not properly handle when a NULL value is returned upon an error by the crypt or dispcrypt function as implemented in glibc 2.17 and later, which allows attackers | 2014-06-26 15:46:00 | 2014-05-30 14:55:00 |
| CVE-2013-6788 | 7.5 | The Bitrix e-Store module before 14.0.1 for Bitrix Site Manager uses sequential values for the BITRIX_SM_SALE_UID cookie, which makes it easier for remote attackers to guess the cookie value and bypass authentication via a brute force attack. | 2014-06-26 15:38:00 | 2014-05-30 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: