| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2720 | 6.8 | IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote attackers to conduct file-extension spoofing attac | 2014-05-29 23:21:00 | 2014-05-27 11:15:00 |
| CVE-2013-2225 | 6.4 | inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php. | 2014-05-28 17:07:00 | 2014-05-27 14:55:00 |
| CVE-2013-2111 | 5.0 | The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters. | 2014-05-28 16:25:00 | 2014-05-27 14:55:00 |
| CVE-2014-3870 | 4.3 | Cross-site scripting (XSS) vulnerability in the bib2html plugin 0.9.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the styleShortName parameter in an adminStyleAdd action to OSBiB/create/index.php. | 2014-05-28 14:02:00 | 2014-05-27 13:55:00 |
| CVE-2014-2201 | 7.8 | The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a large volume of cra | 2014-05-27 16:31:00 | 2014-05-26 00:25:00 |
| CVE-2014-2200 | 7.1 | Cisco NX-OS 5.0 before 5.0(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via an SSH session to a management interface, aka Bug ID CSCti | 2014-05-27 16:09:00 | 2014-05-26 00:25:00 |
| CVE-2013-1191 | 7.1 | Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management int | 2014-05-27 16:05:00 | 2014-05-26 00:25:00 |
| CVE-2014-3849 | 4.3 | The iMember360 plugin 3.8.012 through 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to delete arbitrary users via a request containing a user name in the Email parameter and the API key in the i4w_clearuser pa | 2014-05-27 14:36:00 | 2014-05-23 14:55:00 |
| CVE-2014-3848 | 5.0 | The iMember360 plugin before 3.9.001 for WordPress does not properly restrict access, which allows remote attackers to obtain database credentials via the i4w_dbinfo parameter. | 2014-05-27 14:34:00 | 2014-05-23 14:55:00 |
| CVE-2014-3220 | 9.0 | F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter in a request to the user's page in mgmt/shared/authz/users/. | 2014-05-23 04:08:00 | 2014-05-05 17:06:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: