| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-4468 | 6.5 | VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension parameter in an OriginateVDRelogin action to manager_send.php. | 2014-05-15 13:16:00 | 2014-05-14 19:55:00 |
| CVE-2013-4455 | 2.1 | Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by reading the file. | 2014-05-15 13:11:00 | 2014-05-14 19:55:00 |
| CVE-2013-3514 | 4.3 | Multiple directory traversal vulnerabilities in OpenX before 2.8.10 revision 82710 allow remote administrators to read arbitrary files via a .. (dot dot) in the group parameter to (1) plugin-preferences.php or (2) plugin-settings.php in www/admin, a | 2014-05-15 13:01:00 | 2014-05-14 19:55:00 |
| CVE-2013-2700 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that add or edit an ad via unspec | 2014-05-15 12:53:00 | 2014-05-14 19:55:00 |
| CVE-2013-2226 | 7.5 | Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename parameter to front/document.form.php, or (3) | 2014-05-15 12:44:00 | 2014-05-14 19:55:00 |
| CVE-2013-2087 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) movie title to modules/gallery/controllers/movies.php or (2) key variable to modules/gallery/views | 2014-05-15 12:42:00 | 2014-05-14 19:55:00 |
| CVE-2011-5249 | 4.3 | Cross-site scripting (XSS) vulnerability in the events page in the System iNtrusion Analysis and Reporting Environment (SNARE) for Linux agent before 1.7.0 allows remote attackers to inject arbitrary web script or HTML via a logged shell command. | 2014-05-15 12:21:00 | 2014-05-14 19:55:00 |
| CVE-2014-2046 | 9.7 | cgi-bin/rpcBridge in the web interface 1.1 on Broadcom Ltd PIPA C211 rev2 does not properly restrict access, which allows remote attackers to (1) obtain credentials and other sensitive information via a certain request to the config.getValuesHashExcl | 2014-05-14 18:55:00 | 2014-05-14 00:55:00 |
| CVE-2014-1849 | 10.0 | Foscam IP camera 11.37.2.49 and other versions, when using the Foscam DynDNS option, generates credentials based on predictable camera subdomain names, which allows remote attackers to spoof or hijack arbitrary cameras and conduct other attacks by mo | 2014-05-14 18:43:00 | 2014-05-14 00:55:00 |
| CVE-2014-2405 | 10.0 | Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-0462. | 2014-05-14 18:34:00 | 2014-05-14 00:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: