| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2976 | 5.0 | Directory traversal vulnerability in Sixnet SixView Manager 2.4.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 18081. | 2014-05-16 04:26:00 | 2014-04-23 15:55:00 |
| CVE-2014-0512 | 10.0 | Adobe Reader 11.0.06 allows attackers to bypass a PDF sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. | 2014-05-16 04:24:00 | 2014-03-27 10:55:00 |
| CVE-2014-0511 | 10.0 | Heap-based buffer overflow in Adobe Reader 11.0.06 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014. | 2014-05-16 04:24:00 | 2014-03-27 10:55:00 |
| CVE-2011-4970 | 7.5 | Multiple SQL injection vulnerabilities in LCG Disk Pool Manager (DPM) before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands via the (1) r_token variable in the dpm_get_pending_req_by_token, (2) dpm_get_cpr_by_full | 2014-05-16 03:58:00 | 2014-05-13 14:55:00 |
| CVE-2011-3598 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in phpPgAdmin before 5.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) a web page title, related to classes/Misc.php; or the (2) return_url or (3) return_desc parameter to | 2014-05-16 03:56:00 | 2011-10-08 02:52:00 |
| CVE-2014-3441 | 4.3 | codec\libpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by a png in a .wave file. | 2014-05-15 18:58:00 | 2014-05-14 19:55:00 |
| CVE-2014-3443 | 4.3 | JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file. | 2014-05-15 18:55:00 | 2014-05-14 19:55:00 |
| CVE-2013-7376 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.10, possibly before revision 82710, allow remote attackers to hijack the authentication of administrators, as demonstrated by requests that conduct directory traversal attacks vi | 2014-05-15 15:00:00 | 2014-05-14 19:55:00 |
| CVE-2013-5939 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the (1) list or (2) introduce parameter to index.php. | 2014-05-15 14:43:00 | 2014-05-14 19:55:00 |
| CVE-2013-5655 | 6.4 | Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. (dot dot) in the default URI. | 2014-05-15 14:21:00 | 2014-05-14 19:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: