| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-1442 | 4.0 | Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command. | 2014-05-02 15:19:00 | 2014-05-02 01:59:00 |
| CVE-2014-1441 | 4.3 | Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the enter key twice. | 2014-05-02 15:11:00 | 2014-05-02 01:59:00 |
| CVE-2013-7110 | 4.3 | Transifex command-line client before 0.10 does not validate X.509 certificates for data transfer connections, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. NOTE: this vulnerability exists because | 2014-05-02 14:52:00 | 2014-05-02 01:59:00 |
| CVE-2013-2073 | 4.3 | Transifex command-line client before 0.9 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof a Transifex server via an arbitrary certificate. | 2014-05-02 14:49:00 | 2014-05-02 01:59:00 |
| CVE-2014-0646 | 6.9 | The runtime WS component in the server in EMC RSA Access Manager 6.1.3 before 6.1.3.39, 6.1.4 before 6.1.4.22, 6.2.0 before 6.2.0.11, and 6.2.1 before 6.2.1.03, when INFO logging is enabled, allows local users to discover cleartext passwords by readi | 2014-05-02 13:49:00 | 2014-05-01 17:29:00 |
| CVE-2014-2545 | 5.0 | TIBCO Managed File Transfer Internet Server before 7.2.2, Managed File Transfer Command Center before 7.2.2, Slingshot before 1.9.1, and Vault before 1.0.1 allow remote attackers to obtain sensitive information via a crafted HTTP request. | 2014-05-01 19:15:00 | 2014-04-30 10:49:00 |
| CVE-2014-2260 | 3.5 | Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via the command field in the Cron functionality. | 2014-05-01 15:42:00 | 2014-04-30 23:58:00 |
| CVE-2013-1807 | 5.0 | PHP-Fusion before 7.02.06 stores backup files with predictable filenames in an unrestricted directory under the web document root, which might allow remote attackers to obtain sensitive information via a direct request to the backup file in administr | 2014-05-01 15:35:00 | 2014-04-30 23:58:00 |
| CVE-2013-1806 | 6.5 | Multiple directory traversal vulnerabilities in PHP-Fusion before 7.02.06 allow remote authenticated users to include and execute arbitrary files via a .. (dot dot) in the (1) user_theme parameter to maincore.php; or remote authenticated administrato | 2014-05-01 15:27:00 | 2014-04-30 23:58:00 |
| CVE-2014-2565 | 6.5 | The commandline interface in Blue Coat Content Analysis System (CAS) 1.1 before 1.1.4.2 allows remote administrators to execute arbitrary commands via unspecified vectors, related to "command injection." | 2014-05-01 13:49:00 | 2014-04-30 14:22:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: