| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-6401 | 5.0 | Jansson, possibly 2.4 and earlier, does not restrict the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted JSON document. | 2014-05-23 04:03:00 | 2014-03-21 01:04:00 |
| CVE-2014-3807 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in BarracudaDrive 6.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) blog, (2) bloggeruser, or (3) bloggerpasswd parameter to private/manage/. | 2014-05-22 15:16:00 | 2014-05-21 14:55:00 |
| CVE-2014-3792 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Beetel 450TC2 Router with firmware TX6-0Q-005_retail allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the uiViewTools_Pas | 2014-05-21 23:37:00 | 2014-05-20 14:55:00 |
| CVE-2014-3791 | 10.0 | Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 6.8 allows remote attackers to execute arbitrary code via a long string in a cookie UserID parameter to vfolder.ghp. | 2014-05-21 22:35:00 | 2014-05-20 14:55:00 |
| CVE-2014-3739 | 5.8 | Open redirect vulnerability in zport/acl_users/cookieAuthHelper/login_form in Zenoss 4.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the came_from parameter. | 2014-05-21 22:07:00 | 2014-05-20 14:55:00 |
| CVE-2014-3412 | 10.0 | Unspecified vulnerability in Juniper Junos Space before 13.3R1.8, when the firewall in disabled, allows remote attackers to execute arbitrary commands via unspecified vectors. | 2014-05-21 20:40:00 | 2014-05-20 14:55:00 |
| CVE-2013-7383 | 9.0 | x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks. | 2014-05-21 18:47:00 | 2014-05-20 14:55:00 |
| CVE-2013-4380 | 2.1 | Cross-site scripting (XSS) vulnerability in the MediaFront module 6.x-1.x before 6.x-1.6, 7.x-1.x before 7.x-1.6, and 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer mediafront" permission to inject arbitrary | 2014-05-21 18:44:00 | 2014-05-20 14:55:00 |
| CVE-2013-4321 | 6.5 | The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.8 and 6.1.x before 6.1.4 allows remote authenticated editors to execute arbitrary PHP code via unspecified characters in the file extension when renaming a file. NOTE: this vulnerability exi | 2014-05-21 17:39:00 | 2014-05-20 14:55:00 |
| CVE-2013-4320 | 5.5 | The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to create or read arbitrary files via a crafted URL. | 2014-05-21 13:08:00 | 2014-05-20 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: