| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3846 | 4.3 | Cross-site scripting (XSS) vulnerability in Flying Cart allows remote attackers to inject arbitrary web script or HTML via the p parameter to index.php. | 2014-06-25 18:00:00 | 2014-05-22 15:13:00 |
| CVE-2014-3923 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink parameter to (1) preview.swf, (2) preview_skin_roug | 2014-06-25 17:59:00 | 2014-05-30 14:55:00 |
| CVE-2013-4599 | 4.3 | The Misery module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.2 for Drupal, when the "delay misery" configuration is set to a high value, allows remote attackers to cause a denial of service (process consumption) via multiple requests. | 2014-06-25 16:59:00 | 2014-06-09 19:55:00 |
| CVE-2014-3882 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Login rebuilder plugin before 1.2.0 for WordPress allows remote attackers to hijack the authentication of arbitrary users. | 2014-06-25 14:35:00 | 2014-06-25 11:19:00 |
| CVE-2014-2591 | 6.9 | Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting. | 2014-06-24 18:45:00 | 2014-05-14 00:55:00 |
| CVE-2014-3921 | 4.3 | Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter. | 2014-06-24 17:21:00 | 2014-05-30 14:55:00 |
| CVE-2012-5572 | 5.0 | CRLF injection vulnerability in the cookie method (lib/Dancer/Cookie.pm) in Dancer before 1.3114 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name, a different vulnerability than CV | 2014-06-24 17:07:00 | 2014-05-30 14:55:00 |
| CVE-2014-3780 | 7.5 | Unspecified vulnerability in Citrix VDI-In-A-Box 5.3.x before 5.3.8 and 5.4.x before 5.4.4 allows remote attackers to bypass authentication via unspecified vectors, related to a Java servlet. | 2014-06-24 16:50:00 | 2014-05-30 14:55:00 |
| CVE-2012-5560 | 2.1 | The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call. | 2014-06-24 16:27:00 | 2014-05-30 14:55:00 |
| CVE-2014-3227 | 6.4 | dpkg 1.15.9, 1.16.x before 1.16.14, and 1.17.x before 1.17.9 expect the patch program to be compliant with a need for the "C-style encoded filenames" feature, but is supported in environments with noncompliant patch programs, which triggers an intera | 2014-06-24 15:55:00 | 2014-05-30 18:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: