| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3974 | 4.3 | Cross-site scripting (XSS) vulnerability in filemanager.php in AuraCMS 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the viewdir parameter. | 2014-06-06 14:54:00 | 2014-06-05 17:55:00 |
| CVE-2014-3973 | 7.5 | Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.3.21 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. | 2014-06-06 13:55:00 | 2014-06-05 17:55:00 |
| CVE-2014-3912 | 9.3 | Stack-based buffer overflow in the FindConfigChildeKeyList method in the XNSSDKDEVICE.XnsSdkDeviceCtrlForIpInstaller.1 ActiveX control in Samsung iPOLiS Device Manager before 1.8.7 allows remote attackers to execute arbitrary code via a long value. | 2014-06-06 13:17:00 | 2014-06-05 17:55:00 |
| CVE-2014-1998 | 4.3 | Cross-site scripting (XSS) vulnerability in Nippon Institute of Agroinformatics SOY CMS 1.4.0c and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-06-05 18:19:00 | 2014-06-05 17:55:00 |
| CVE-2014-3963 | 4.0 | ownCloud Server before 6.0.1 does not properly check permissions, which allows remote authenticated users to access arbitrary preview pictures via unspecified vectors. | 2014-06-05 17:35:00 | 2014-06-04 14:55:00 |
| CVE-2014-3948 | 4.3 | Cross-site scripting (XSS) vulnerability in the HTML export wizard in the backend module in the powermail extension before 1.6.11 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-06-05 17:33:00 | 2014-06-04 14:55:00 |
| CVE-2014-3949 | 3.5 | Cross-site scripting (XSS) vulnerability in the layout wizard in the Grid Elements (gridelements) extension before 1.5.1 and 2.0.x before 2.0.3 for TYPO3 allows remote authenticated backend users to inject arbitrary web script or HTML via unspecified | 2014-06-05 17:32:00 | 2014-06-04 14:55:00 |
| CVE-2014-3961 | 7.5 | SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/. | 2014-06-05 14:48:00 | 2014-06-04 14:55:00 |
| CVE-2014-3960 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.12.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-06-05 13:30:00 | 2014-06-04 14:55:00 |
| CVE-2014-3127 | 7.1 | dpkg 1.15.9 on Debian squeeze introduces support for the "C-style encoded filenames" feature without recognizing that the squeeze patch program lacks this feature, which triggers an interaction error that allows remote attackers to conduct directory | 2014-06-05 04:31:00 | 2014-05-14 00:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: