| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-4502 | 4.0 | The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file permissions, which allows remote authenticated users to read arbitrary files by attaching a file. | 2014-05-14 18:34:00 | 2014-05-13 15:55:00 |
| CVE-2014-0462 | 10.0 | Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than CVE-2014-2405. | 2014-05-14 18:30:00 | 2014-05-14 00:55:00 |
| CVE-2013-2692 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users. | 2014-05-14 18:04:00 | 2014-05-13 14:55:00 |
| CVE-2013-4552 | 7.5 | lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authenticate as an arbitrary user via the user name (uid) in a cookie. | 2014-05-14 18:00:00 | 2014-05-13 15:55:00 |
| CVE-2011-4407 | 4.3 | ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository. | 2014-05-14 17:57:00 | 2014-05-14 00:55:00 |
| CVE-2014-3456 | 4.3 | Cross-site scripting (XSS) vulnerability in GitLab Enterprise Edition (EE) 6.6.0 before 6.6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-05-14 17:49:00 | 2014-05-13 15:55:00 |
| CVE-2013-4562 | 6.8 | The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter. | 2014-05-14 17:19:00 | 2014-05-13 15:55:00 |
| CVE-2013-4546 | 6.5 | The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL. | 2014-05-14 17:07:00 | 2014-05-13 15:55:00 |
| CVE-2013-4503 | 2.1 | Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTML via vectors related to options. | 2014-05-14 16:50:00 | 2014-05-13 15:55:00 |
| CVE-2013-4501 | 5.0 | The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensitive quiz results via unspecified vectors. | 2014-05-14 16:43:00 | 2014-05-13 15:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: