| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-0149 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name. | 2014-05-06 19:07:00 | 2014-05-05 17:06:00 |
| CVE-2013-0350 | 6.3 | tmp_smtp.c in pktstat 1.8.5 allows local users to overwrite arbitrary files via a symlink attack on /tmp/smtp.log. | 2014-05-05 17:27:00 | 2014-05-05 17:06:00 |
| CVE-2010-5109 | 4.3 | Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer overflow. | 2014-05-05 17:19:00 | 2014-05-05 17:06:00 |
| CVE-2014-1406 | 4.3 | CRLF injection vulnerability in goform/formWlSiteSurvey on the Conceptronic C54APM access point with runtime code 1.26 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the submit-url parameter i | 2014-05-05 15:29:00 | 2014-01-10 16:47:00 |
| CVE-2014-1408 | 7.8 | The Conceptronic C54APM access point with runtime code 1.26 has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via an HTTP request, as demonstrated by stored XSS attacks. | 2014-05-05 15:28:00 | 2014-01-10 16:47:00 |
| CVE-2014-0621 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hijack the authentication of administrators for requests that (1) perform a factory reset via a request to goform | 2014-05-05 15:23:00 | 2014-01-08 15:30:00 |
| CVE-2014-3001 | 5.8 | The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process. | 2014-05-05 14:54:00 | 2014-05-02 14:55:00 |
| CVE-2014-2322 | 7.5 | lib/string_utf_support.rb in the Arabic Prawn 0.0.1 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) downloaded_file or (2) url variable. | 2014-05-05 13:47:00 | 2014-05-02 14:55:00 |
| CVE-2014-3139 | 7.5 | recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string. | 2014-05-05 12:57:00 | 2014-05-02 10:55:00 |
| CVE-2014-2992 | 6.4 | The Misli.com application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 2014-05-05 05:34:00 | 2014-04-26 01:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: