| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-5984 | 6.4 | Directory traversal vulnerability in userfiles/modules/admin/backup/delete.php in Microweber before 0.830 allows remote attackers to delete arbitrary files via a .. (dot dot) in the file parameter. | 2014-05-13 13:21:00 | 2014-05-12 14:55:00 |
| CVE-2013-5749 | 4.3 | Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to inject arbitrary web script or HTML via the new_project parameter. | 2014-05-13 12:59:00 | 2014-05-12 14:55:00 |
| CVE-2013-5748 | 6.8 | Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects via an add_project action. | 2014-05-13 12:53:00 | 2014-05-12 14:55:00 |
| CVE-2013-5671 | 7.5 | lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors. | 2014-05-13 12:38:00 | 2014-05-12 14:55:00 |
| CVE-2013-4581 | 6.8 | GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH. | 2014-05-12 18:29:00 | 2014-05-12 14:55:00 |
| CVE-2013-4574 | 4.3 | Cross-site scripting (XSS) vulnerability in the TimeMediaHandler extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to videos. | 2014-05-12 16:38:00 | 2014-05-12 14:55:00 |
| CVE-2013-4571 | 7.5 | Buffer overflow in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 has unspecified impact and remote vectors. | 2014-05-12 16:32:00 | 2014-05-12 14:55:00 |
| CVE-2013-4570 | 5.0 | The zend_inline_hash_func function in php-luasandbox in the Scribuntu extension for MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via v | 2014-05-12 16:13:00 | 2014-05-12 14:55:00 |
| CVE-2014-3134 | 4.3 | Cross-site scripting (XSS) vulnerability in the InfoView application in SAP BusinessObjects allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-05-10 04:06:00 | 2014-04-30 14:22:00 |
| CVE-2014-3133 | 5.0 | SAP Netweaver Java Application Server does not properly restrict access, which allows remote attackers to obtain the list of SAP systems registered on an SLD via an unspecified webdynpro, related to SystemSelection. | 2014-05-10 04:06:00 | 2014-04-30 14:22:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: