| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2854 | 4.3 | Cross-site scripting (XSS) vulnerability in the SemanticTitle extension before 1.1.0 for MediaWiki allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-05-09 17:49:00 | 2014-05-08 18:42:00 |
| CVE-2013-5916 | 4.3 | Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING. | 2014-05-09 17:42:00 | 2014-05-08 15:55:00 |
| CVE-2014-3207 | 4.3 | Cross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to pks/lookup/undefined1. | 2014-05-09 17:37:00 | 2014-05-08 14:29:00 |
| CVE-2014-3123 | 2.1 | Cross-site scripting (XSS) vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gall | 2014-05-09 17:29:00 | 2014-05-08 14:29:00 |
| CVE-2014-1685 | 5.5 | The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors. | 2014-05-09 16:46:00 | 2014-05-08 14:29:00 |
| CVE-2014-1682 | 4.0 | The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request. | 2014-05-09 16:41:00 | 2014-05-08 14:29:00 |
| CVE-2014-0135 | 1.9 | Kafo before 0.3.17 and 0.4.x before 0.5.2, as used by Foreman, uses world-readable permissions for default_values.yaml, which allows local users to obtain passwords and other sensitive information by reading the file. | 2014-05-09 16:12:00 | 2014-05-08 14:29:00 |
| CVE-2013-3571 | 2.6 | socat 1.2.0.0 before 1.7.2.2 and 2.0.0-b1 before 2.0.0-b6, when used for a listen type address and the fork option is enabled, allows remote attackers to cause a denial of service (file descriptor consumption) via multiple request that are refused ba | 2014-05-09 14:00:00 | 2014-05-08 14:29:00 |
| CVE-2014-2443 | 4.3 | Unspecified vulnerability in the PeopleSoft Enterprise PT PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to PIA Core Technology. | 2014-05-09 12:03:00 | 2014-04-16 02:55:00 |
| CVE-2013-0210 | 7.5 | The smart proxy Puppet run API in Foreman before 1.2.0 allows remote attackers to execute arbitrary commands via vectors related to escaping and Puppet commands. | 2014-05-08 15:29:00 | 2014-05-08 14:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: