| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-4033 | 4.3 | Cross-site scripting (XSS) vulnerability in libraries/includes/personal/profile.php in Epignosis eFront 3.6.14.4 allows remote attackers to inject arbitrary web script or HTML via the surname parameter to student.php. | 2014-06-12 17:46:00 | 2014-06-11 14:55:00 |
| CVE-2014-3980 | 4.6 | libfep 0.0.5 before 0.1.0 does not properly use UNIX domain sockets in the abstract namespace, which allows local users to gain privileges via unspecified vectors. | 2014-06-12 17:37:00 | 2014-06-11 14:55:00 |
| CVE-2014-3915 | 10.0 | The userRequest servlet in the Admin Center for Tivoli Storage Manager in Rocket Servergraph allows remote attackers to execute arbitrary commands via a (1) auth, (2) auth_session, (3) auth_simple, (4) add, (5) add_flat, (6) remove, (7) set_pwd, (8) | 2014-06-12 16:58:00 | 2014-06-11 14:55:00 |
| CVE-2014-3911 | 9.3 | Samsung iPOLiS Device Manager before 1.8.7 allow remote attackers to execute arbitrary code via unspecified values to the (1) Start, (2) ChangeControlLocalName, (3) DeleteDeviceProfile, (4) FrameAdvanceReader, or other unknown method in the XNSSDKDEV | 2014-06-12 16:24:00 | 2014-06-11 14:55:00 |
| CVE-2014-3850 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Member Approval plugin 131109 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings to their default and disable registrati | 2014-06-12 16:10:00 | 2014-06-11 14:55:00 |
| CVE-2014-3782 | 6.0 | Multiple incomplete blacklist vulnerabilities in the filemanager::isFileExclude method in the Media Manager in Dotclear before 2.6.3 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) double extension or (2) | 2014-06-12 16:04:00 | 2014-06-11 14:55:00 |
| CVE-2014-3781 | 5.8 | The dcXmlRpc::setUser method in nc/core/class.dc.xmlrpc.php in Dotclear before 2.6.3 allows remote attackers to bypass authentication via an empty password in an XML-RPC request. | 2014-06-12 15:51:00 | 2014-06-11 14:55:00 |
| CVE-2011-3625 | 9.3 | Stack-based buffer overflow in the sub_read_line_sami function in subreader.c in MPlayer, as used in SMPlayer 0.6.9, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a SAMI subtitle | 2014-06-12 13:27:00 | 2014-06-11 14:55:00 |
| CVE-2010-5300 | 6.8 | Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name in a zip archive. | 2014-06-12 13:08:00 | 2014-06-11 14:55:00 |
| CVE-2014-3986 | 3.3 | include/tests_webservers in Lynis before 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name. | 2014-06-09 17:23:00 | 2014-06-08 18:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: