| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2752 | 7.5 | SAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. | 2014-06-18 04:32:00 | 2014-04-10 20:55:00 |
| CVE-2014-2751 | 7.5 | SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. | 2014-06-18 04:32:00 | 2014-04-10 20:55:00 |
| CVE-2014-1997 | 7.8 | The ATEN CN8000 remote-access unit with firmware 1.6.154 and earlier allows remote attackers to cause a denial of service via unspecified vectors. | 2014-06-18 04:31:00 | 2014-06-05 17:55:00 |
| CVE-2013-5355 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote attackers to hijack the authentication of administrators for requests that (1) change configuration settings or (2) create new administrative users via unspe | 2014-06-18 04:25:00 | 2013-12-09 16:55:00 |
| CVE-2013-5354 | 7.5 | Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) fb_user_id or (2) tw_user_id parameter to signup. | 2014-06-18 04:25:00 | 2013-12-09 16:55:00 |
| CVE-2013-4099 | 10.0 | Multiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11, as used in JOGAMP, allow context-dependent attackers to execute arbitrary code via a crafted parameter to the (1) alAuxiliaryEffectSlotf1, (2) alBuffer3f1, (3) alBufferfv1, (4) al | 2014-06-18 04:23:00 | 2014-06-13 14:55:00 |
| CVE-2014-4166 | 4.3 | Cross-site scripting (XSS) vulnerability in the song history in SHOUTcast DNAS 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the mp3 title field. | 2014-06-17 14:58:00 | 2014-06-16 18:55:00 |
| CVE-2014-4163 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Featured Comments plugin 1.2.1 for WordPress allow remote attackers to hijack the authentication of administrators for requests that change the (1) buried or (2) featured status of a c | 2014-06-17 14:39:00 | 2014-06-16 18:55:00 |
| CVE-2014-3995 | 4.3 | Cross-site scripting (XSS) vulnerability in gravatars/templatetags/gravatars.py in Djblets before 0.7.30 and 0.8.x before 0.8.3 for Django allows remote attackers to inject arbitrary web script or HTML via a user display name. | 2014-06-17 14:22:00 | 2014-06-16 18:55:00 |
| CVE-2010-5111 | 6.8 | Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted reply in the (1) TLS_readline or (2) SSL_readline function, related to the EchoPin | 2014-06-17 13:00:00 | 2014-06-16 18:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: