| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-7111 | 5.0 | The put_call function in the API client (api/api_client.rb) in the BaseSpace Ruby SDK (aka bio-basespace-sdk) gem 0.1.7 for Ruby uses the API_KEY on the command line, which allows remote attackers to obtain sensitive information by listing the proces | 2014-04-29 17:59:00 | 2014-04-29 14:38:00 |
| CVE-2013-7068 | 4.9 | The Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users to bypass group restrictions on nodes with all groups set to optional input via an empty group field. | 2014-04-29 17:52:00 | 2014-04-29 14:38:00 |
| CVE-2013-7066 | 4.3 | The Entity reference module 7.x-1.x before 7.x-1.1-rc1 for Drupal allows remote attackers to read private nodes titles by leveraging edit permissions to a node that references a private node. | 2014-04-29 17:45:00 | 2014-04-29 14:38:00 |
| CVE-2013-7064 | 2.1 | Cross-site scripting (XSS) vulnerability in the EU Cookie Compliance module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated administrators with the "Administer EU Cookie Compliance popup" permission to inject arbitrary web script or HT | 2014-04-29 17:09:00 | 2014-04-29 14:38:00 |
| CVE-2013-7063 | 5.0 | The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views. | 2014-04-29 16:40:00 | 2014-04-29 14:38:00 |
| CVE-2014-2185 | 4.0 | The Call Detail Records (CDR) Management component in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to obtain sensitive information by reading extraneous fields in an HTML document, aka Bug ID CSCun74374. | 2014-04-29 16:08:00 | 2014-04-29 10:37:00 |
| CVE-2014-2184 | 5.0 | The IP Manager Assistant (IPMA) component in Cisco Unified Communications Manager (Unified CM) allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCun74352. | 2014-04-29 16:08:00 | 2014-04-29 10:37:00 |
| CVE-2014-2180 | 4.0 | The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133. | 2014-04-29 15:42:00 | 2014-04-29 10:37:00 |
| CVE-2014-0079 | 5.0 | The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the p | 2014-04-29 11:52:00 | 2014-04-28 14:09:00 |
| CVE-2014-0037 | 5.0 | The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointer of the username." | 2014-04-29 11:35:00 | 2014-04-28 14:09:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: