| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-3132 | 4.0 | SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1. | 2014-05-10 04:06:00 | 2014-04-30 14:22:00 |
| CVE-2014-3131 | 4.0 | SAP Profile Maintenance does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1. | 2014-05-10 04:06:00 | 2014-04-30 14:22:00 |
| CVE-2014-3130 | 4.6 | The ABAP Help documentation and translation tools (BC-DOC-HLP) in Basis in SAP Netweaver ABAP Application Server does not properly restrict access, which allows local users to gain privileges and execute ABAP instructions via crafted help messages. | 2014-05-10 04:06:00 | 2014-04-30 14:22:00 |
| CVE-2014-3129 | 5.0 | The Java Server Pages in the Software Lifecycle Manager (SLM) in SAP NetWeaver allows remote attackers to obtain sensitive information via a crafted request, related to SAP Solution Manager 7.1. | 2014-05-10 04:06:00 | 2014-04-30 14:22:00 |
| CVE-2014-2888 | 7.5 | lib/sfpagent/bsig.rb in the sfpagent gem before 0.4.15 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the module name in a JSON request. | 2014-05-10 04:06:00 | 2014-04-23 15:55:00 |
| CVE-2014-0357 | 5.0 | Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application. | 2014-05-10 04:02:00 | 2014-04-15 10:55:00 |
| CVE-2013-5572 | 3.5 | Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap_bind_password value in the HTML source code. | 2014-05-10 03:58:00 | 2013-10-01 03:48:00 |
| CVE-2013-1803 | 7.5 | Multiple SQL injection vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to execute arbitrary SQL commands via the (1) orderby parameter to downloads.php; or remote authenticated users with certain permissions to execute arbitrary S | 2014-05-10 03:52:00 | 2014-05-05 17:06:00 |
| CVE-2012-0219 | 6.2 | Heap-based buffer overflow in the xioscan_readline function in xio-readline.c in socat 1.4.0.0 through 1.7.2.0 and 2.0.0-b1 through 2.0.0-b4 allows local users to execute arbitrary code via the READLINE address. | 2014-05-10 03:39:00 | 2012-06-21 15:55:00 |
| CVE-2014-1991 | 5.8 | Open redirect vulnerability in WebPlatform / AppFramework 6.0 through 7.2 in NTT DATA INTRAMART intra-mart allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. | 2014-05-09 18:27:00 | 2014-05-09 10:50:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: