| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-4595 | 4.3 | The Secure Pages module 6.x-2.x before 6.x-2.0 for Drupal does not properly match URLs, which causes HTTP to be used instead of HTTPS and makes it easier for remote attackers to obtain sensitive information via a crafted web page. | 2014-06-24 15:37:00 | 2014-06-09 19:55:00 |
| CVE-2013-2562 | 2.1 | Mambo CMS 4.6.5 stores the MySQL database password in cleartext in the document root, which allows local users to obtain sensitive information via unspecified vectors. | 2014-06-24 15:34:00 | 2014-06-09 19:55:00 |
| CVE-2013-2563 | 2.1 | Mambo CMS 4.6.5 uses world-readable permissions on configuration.php, which allows local users to obtain the admin password hash by reading the file. | 2014-06-24 15:29:00 | 2014-06-09 19:55:00 |
| CVE-2013-2564 | 5.0 | Mambo CMS 4.6.5 allows remote attackers to cause a denial of service (memory and bandwidth consumption) by uploading a crafted file. | 2014-06-24 15:20:00 | 2014-06-09 19:55:00 |
| CVE-2013-4597 | 4.0 | The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content marked unpublished by the Scheduled module, which allows remote authenticated users to obtain sensitive information via unspecified v | 2014-06-24 15:10:00 | 2014-06-09 19:55:00 |
| CVE-2013-6223 | 2.1 | LiveZilla before 5.1.1.0 stores the admin Base64 encoded username and password in a 1click file, which allows local users to obtain access by reading the file. | 2014-06-24 15:03:00 | 2014-06-09 19:55:00 |
| CVE-2013-1973 | 4.0 | The autocomplete callback in Autocomplete Widgets for Text and Number Fields (autocomplete_widgets) module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.0-rc1 does not properly handle node permissions, which allows remote authenticated users to obt | 2014-06-24 15:01:00 | 2014-06-09 19:55:00 |
| CVE-2013-7323 | 7.5 | python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. | 2014-06-24 14:59:00 | 2014-06-09 19:55:00 |
| CVE-2009-5023 | 4.7 | The (1) dshield.conf, (2) mail-buffered.conf, (3) mynetwatchman.conf, and (4) mynetwatchman.conf actions in action.d/ in Fail2ban before 0.8.5 allows local users to write to arbitrary files via a symlink attack on temporary files with predictable nam | 2014-06-24 14:51:00 | 2014-06-10 14:55:00 |
| CVE-2014-3216 | 4.3 | GOM Media Player 2.2.57.5189 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file. | 2014-06-24 14:42:00 | 2014-06-10 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: