| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2655 | 6.5 | SQL injection vulnerability in the gen_show_status function in functions.inc.php in Postfix Admin (aka postfixadmin) before 2.3.7 allows remote authenticated users to execute arbitrary SQL commands via a new alias. | 2014-06-05 04:31:00 | 2014-04-02 16:06:00 |
| CVE-2014-3946 | 4.0 | The query caching functionality in the Extbase Framework component in TYPO3 6.2.0 before 6.2.3 does not properly validate group permissions, which allows remote authenticated users to read arbitrary queries via unspecified vectors. | 2014-06-04 15:26:00 | 2014-06-03 14:55:00 |
| CVE-2014-3945 | 4.0 | The Authentication component in TYPO3 before 6.2, when salting for password hashing is disabled, does not require knowledge of the cleartext password if the password hash is known, which allows remote attackers to bypass authentication and gain acces | 2014-06-04 15:24:00 | 2014-06-03 14:55:00 |
| CVE-2014-3944 | 5.8 | The Authentication component in TYPO3 6.2.0 before 6.2.3 does not properly invalidate timed out user sessions, which allows remote attackers to bypass authentication via unspecified vectors. | 2014-06-04 15:15:00 | 2014-06-03 14:55:00 |
| CVE-2014-2939 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Alfresco Enterprise before 4.1.6.13 allow remote attackers to inject arbitrary web script or HTML via (1) an XHTML document, (2) a <% tag, or (3) the taskId parameter to share/page/task-edit. | 2014-06-03 15:30:00 | 2014-06-02 19:55:00 |
| CVE-2014-3937 | 7.5 | SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 2014-06-03 15:09:00 | 2014-06-02 15:55:00 |
| CVE-2013-6470 | 5.0 | The default configuration in the standalone controller quickstack manifest in openstack-foreman-installer, as used in Red Hat Enterprise Linux OpenStack Platform 4.0, disables authentication for Qpid, which allows remote attackers to gain access by c | 2014-06-03 15:00:00 | 2014-06-02 15:55:00 |
| CVE-2013-4596 | 5.8 | The Node Access Keys module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote attackers to bypass access restrictions via a node listing. | 2014-06-03 14:49:00 | 2014-06-02 15:55:00 |
| CVE-2013-7387 | 6.8 | Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie. | 2014-06-03 13:10:00 | 2014-06-02 15:55:00 |
| CVE-2013-1412 | 7.5 | DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier. | 2014-06-03 12:27:00 | 2014-06-02 15:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: