| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-4285 | 2.1 | A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory. | 2014-04-29 11:09:00 | 2014-04-28 14:09:00 |
| CVE-2013-0296 | 4.4 | Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a file before setting that file's permissions to match those of the original file, which might allow local users to bypass intended access permissions while | 2014-04-28 19:28:00 | 2014-04-27 21:55:00 |
| CVE-2011-3603 | 4.4 | The router advertisement daemon (radvd) before 1.8.2 does not properly handle errors in the privsep_init function, which causes the radvd daemon to run as root and has an unspecified impact. | 2014-04-28 19:12:00 | 2014-04-27 21:55:00 |
| CVE-2014-3007 | 10.0 | Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py. | 2014-04-28 17:51:00 | 2014-04-27 20:55:00 |
| CVE-2014-2994 | 10.0 | Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (src attribute). | 2014-04-28 16:06:00 | 2014-04-27 04:32:00 |
| CVE-2013-5660 | 9.3 | Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file. | 2014-04-25 18:44:00 | 2014-04-25 17:12:00 |
| CVE-2013-4726 | 6.8 | Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors | 2014-04-25 18:38:00 | 2014-04-25 17:12:00 |
| CVE-2013-4723 | 5.8 | Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the l par | 2014-04-25 18:38:00 | 2014-04-25 17:12:00 |
| CVE-2013-4722 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via | 2014-04-25 18:34:00 | 2014-04-25 17:12:00 |
| CVE-2013-3069 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the (1) UserName or (2) Password to the NAS User Setup page, (3) deviceName to | 2014-04-25 18:07:00 | 2014-04-25 17:12:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: