| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3982 | 3.3 | include/tests_webservers in Lynis before 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.##### file. | 2014-06-09 17:14:00 | 2014-06-08 18:55:00 |
| CVE-2013-4728 | 5.0 | DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a .. (dot dot) in the "l" parameter, which reveals the installation path in an error m | 2014-06-09 14:27:00 | 2014-06-06 14:55:00 |
| CVE-2013-4727 | 5.0 | DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to obtain sensitive information via a request to Admin/top.aspx. | 2014-06-09 14:19:00 | 2014-06-06 14:55:00 |
| CVE-2013-4725 | 5.0 | DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the secure flag for an unspecified cookie in an https session, which makes it easier for remote attackers to capture this cookie by i | 2014-06-09 14:18:00 | 2014-06-06 14:55:00 |
| CVE-2013-4724 | 5.0 | DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which makes it easier for remote attackers to obtain potentia | 2014-06-09 14:07:00 | 2014-06-06 14:55:00 |
| CVE-2013-2602 | 9.3 | Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remote attackers to execute arbitrary code via the (1) seTokensArray, or (2) seTokensValuesArray parameter to the AddTokens method; (3) | 2014-06-09 14:04:00 | 2014-06-06 14:55:00 |
| CVE-2013-0250 | 5.0 | The init_nss_hash function in exec/totemcrypto.c in Corosync 2.0 before 2.3 does not properly initialize the HMAC key, which allows remote attackers to cause a denial of service (crash) via a crafted packet. | 2014-06-09 13:34:00 | 2014-06-06 14:55:00 |
| CVE-2012-5390 | 10.0 | The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job. | 2014-06-09 13:18:00 | 2014-06-06 14:55:00 |
| CVE-2013-3739 | 5.0 | Directory traversal vulnerability in editor.php in Network Weathermap 0.97c and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the mapname parameter in a show_config action. | 2014-06-06 16:08:00 | 2014-06-05 20:55:00 |
| CVE-2014-3975 | 5.0 | Absolute path traversal vulnerability in filemanager.php in AuraCMS 3.0 allows remote attackers to list a directory via a full pathname in the viewdir parameter. | 2014-06-06 14:56:00 | 2014-06-05 17:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: