| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2001-1593 | 2.1 | The tempname_ensure function in lib/routines.h in a2ps 4.14 and earlier, as used by the spy_user function and possibly other functions, allows local users to modify arbitrary files via a symlink attack on a temporary file. | 2014-05-01 01:20:00 | 2014-04-05 21:55:00 |
| CVE-2013-7372 | 5.0 | The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNG_SecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptogr | 2014-04-30 14:23:00 | 2014-04-29 20:55:00 |
| CVE-2013-7302 | 6.8 | Session fixation vulnerability in the Ubercart module 6.x-2.x before 6.x-2.13 and 7.x-3.x before 7.x-3.6 for Drupal, when the "Log in new customers after checkout" option is enabled, allows remote attackers to hijack web sessions by leveraging knowle | 2014-04-30 14:04:00 | 2014-04-29 14:38:00 |
| CVE-2013-7284 | 6.8 | The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized. | 2014-04-30 13:56:00 | 2014-04-29 14:38:00 |
| CVE-2013-7273 | 2.1 | GNOME Display Manager (gdm) 3.4.1 and earlier, when disable-user-list is set to true, allows local users to cause a denial of service (unable to login) by pressing the cancel button after entering a user name. | 2014-04-30 13:32:00 | 2014-04-29 14:38:00 |
| CVE-2013-7373 | 7.5 | Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications. | 2014-04-30 12:57:00 | 2014-04-29 20:55:00 |
| CVE-2013-7236 | 7.5 | Simple Machines Forum (SMF) 2.0.6, 1.1.19, and earlier allows remote attackers to impersonate arbitrary users via a Unicode homoglyph character in a username. | 2014-04-30 11:21:00 | 2014-04-29 14:38:00 |
| CVE-2013-7221 | 4.6 | The automatic screen lock functionality in GNOME Shell (aka gnome-shell) before 3.10 does not prevent access to the "Enter a Command" dialog, which allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workst | 2014-04-29 19:03:00 | 2014-04-29 14:38:00 |
| CVE-2013-7220 | 4.6 | js/ui/screenShield.js in GNOME Shell (aka gnome-shell) before 3.8 allows physically proximate attackers to execute arbitrary commands by leveraging an unattended workstation with the keyboard focus on the Activities search. | 2014-04-29 18:53:00 | 2014-04-29 14:38:00 |
| CVE-2013-7134 | 7.5 | Juvia uses the same secret key for all installations, which allows remote attackers to have unspecified impact by leveraging the secret key in app/config/initializers/secret_token.rb, related to cookies. | 2014-04-29 18:13:00 | 2014-04-29 14:38:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: