| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-7382 | 5.0 | VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier has a hardcoded password of donotedit for the (1) VDAD and (2) VDCL users, which makes it easier for remote attackers to obtain access. | 2014-05-19 15:46:00 | 2014-05-17 19:55:00 |
| CVE-2014-3742 | 5.0 | The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors. | 2014-05-19 15:22:00 | 2014-05-16 15:55:00 |
| CVE-2014-1613 | 7.5 | Dotclear before 2.6.2 allows remote attackers to execute arbitrary PHP code via a serialized object in the dc_passwd cookie to a password-protected page, which is not properly handled by (1) inc/public/lib.urlhandlers.php or (2) plugins/pages/_public | 2014-05-16 18:43:00 | 2014-05-16 15:55:00 |
| CVE-2013-7379 | 6.8 | The admin API in the tomato module before 0.0.6 for Node.js does not properly check the access key when it is set to a string, which allows remote attackers to bypass authentication via a string in the access-key header that partially matches config. | 2014-05-16 17:55:00 | 2014-05-16 15:55:00 |
| CVE-2014-3750 | 5.8 | The Bilyoner application before 2.3.1 for Android and before 4.6.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 2014-05-16 17:46:00 | 2014-05-16 11:12:00 |
| CVE-2013-1810 | 2.1 | Multiple cross-site scripting (XSS) vulnerabilities in core/summary_api.php in MantisBT 1.2.12 allow remote authenticated users with manager or administrator permissions to inject arbitrary web script or HTML via a (1) category name in the summary_pr | 2014-05-16 12:51:00 | 2014-05-15 14:55:00 |
| CVE-2013-0197 | 4.3 | Cross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core/filter_api.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML via the match_type parameter to bugs/search.ph | 2014-05-16 12:44:00 | 2014-05-15 14:55:00 |
| CVE-2014-2989 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Open Assessment Technologies TAO 2.5.6 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts via a request to Users/add. | 2014-05-16 04:26:00 | 2014-05-13 14:55:00 |
| CVE-2014-2936 | 7.5 | The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to dirmng/index.php, or an unspecified parameter to (2) PPD/index.php, (3) dirmng/docmd.ph | 2014-05-16 04:26:00 | 2014-05-08 10:55:00 |
| CVE-2014-2935 | 10.0 | costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request. | 2014-05-16 04:26:00 | 2014-05-08 10:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: