| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-4467 | 6.5 | Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1) remote attackers to execute arbitrary SQL commands via the campaign variable in SCRIPT_mult | 2014-05-20 04:06:00 | 2014-03-11 19:37:00 |
| CVE-2013-1407 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) scope parameter to index. | 2014-05-20 04:00:00 | 2014-05-13 14:55:00 |
| CVE-2013-7384 | 5.0 | UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerabilit | 2014-05-19 19:23:00 | 2014-05-19 14:55:00 |
| CVE-2013-6994 | 6.4 | OpenText Exceed OnDemand (EoD) 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network. | 2014-05-19 19:21:00 | 2014-05-19 14:55:00 |
| CVE-2013-6807 | 6.8 | The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses. | 2014-05-19 19:16:00 | 2014-05-19 14:55:00 |
| CVE-2013-6806 | 6.8 | OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credential | 2014-05-19 19:15:00 | 2014-05-19 14:55:00 |
| CVE-2013-6805 | 5.0 | OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover credentials by reading a .eod8 file. | 2014-05-19 19:08:00 | 2014-05-19 14:55:00 |
| CVE-2013-6765 | 7.5 | OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information, which causes the state to be set to CLIENT_AUTHENT | 2014-05-19 19:03:00 | 2014-05-19 14:55:00 |
| CVE-2013-6413 | 5.0 | Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2013-7384 was | 2014-05-19 18:54:00 | 2014-05-19 14:55:00 |
| CVE-2013-4431 | 5.5 | Mahara before 1.5.12, 1.6.x before 1.6.7, and 1.7.x before 1.7.3 does not properly prevent access to blocks, which allows remote authenticated users to modify arbitrary blocks via the bock id in an edit request. | 2014-05-19 18:43:00 | 2014-05-19 14:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: