| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3416 | 6.5 | uPortal before 4.0.13.1 does not properly check the MANAGE permissions, which allows remote authenticated users to manage arbitrary portlets by leveraging the SUBSCRIBE permission for the portlet-admin portlet. | 2014-05-30 16:35:00 | 2014-05-29 14:19:00 |
| CVE-2014-0246 | 4.3 | SOSreport stores the md5 hash of the GRUB bootloader password in an archive, which allows local users to obtain sensitive information by reading the archive. | 2014-05-30 13:59:00 | 2014-05-29 14:19:00 |
| CVE-2013-4178 | 5.0 | The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to obtain access by replaying the username, password, and one-time password (OTP). | 2014-05-30 13:35:00 | 2014-05-29 14:19:00 |
| CVE-2013-4177 | 5.0 | The Google Authenticator login module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal does not properly identify user account names, which might allow remote attackers to bypass the two-factor authentication requirement via unspecified v | 2014-05-30 13:34:00 | 2014-05-29 14:19:00 |
| CVE-2013-2107 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change the "List of alternative recipients" via the mailo | 2014-05-30 00:32:00 | 2014-05-23 00:55:00 |
| CVE-2012-0943 | 2.1 | debian/guest-account in Light Display Manager (lightdm) 1.0.x before 1.0.6 and 1.1.x before 1.1.7, as used in Ubuntu Linux 11.10, allows local users to delete arbitrary files via a space in the name of a file in /tmp. NOTE: this identifier was SPLIT | 2014-05-30 00:19:00 | 2014-05-22 23:55:00 |
| CVE-2012-5649 | 6.8 | Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callback, related to Adobe Flash. | 2014-05-30 00:16:00 | 2014-05-23 14:55:00 |
| CVE-2013-2713 | 6.8 | Cross-site request forgery (CSRF) vulnerability in users_maint.html in KrisonAV CMS before 3.0.2 allows remote attackers to hijack the authentication of administrators for requests that create user accounts via a crafted request. | 2014-05-29 23:44:00 | 2014-05-23 14:55:00 |
| CVE-2013-2712 | 4.3 | Cross-site scripting (XSS) vulnerability in services/get_article.php in KrisonAV CMS before 3.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter. | 2014-05-29 23:44:00 | 2014-05-23 14:55:00 |
| CVE-2014-3866 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in user_settings.php in Usercake 2.0.2 and earlier allow remote attackers to hijack the authentication of administrators for requests that change the (1) administrative password via the passw | 2014-05-29 23:22:00 | 2014-05-26 19:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: