| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2890 | 4.3 | Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openid_error parameter to MyID.config.php when the openid.mode parameter is set to er | 2014-04-23 13:37:00 | 2014-04-22 14:23:00 |
| CVE-2014-1615 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in Carbon Black before 4.1.0 allow remote attackers to hijack the authentication of administrators for requests that add new administrative users and have other unspecified action, as demonst | 2014-04-23 12:36:00 | 2014-04-22 14:23:00 |
| CVE-2013-4472 | 3.3 | The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names. | 2014-04-23 12:20:00 | 2014-04-22 14:23:00 |
| CVE-2014-2269 | 6.4 | modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters. | 2014-04-22 16:31:00 | 2014-04-22 13:06:00 |
| CVE-2012-5353 | 5.8 | Eduserv OpenAthens SP 2.0 for Java allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack." | 2014-04-22 16:29:00 | 2012-10-09 23:55:00 |
| CVE-2014-1216 | 7.5 | FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page. | 2014-04-22 16:24:00 | 2014-04-22 13:06:00 |
| CVE-2014-2922 | 6.4 | The getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore 1.4.9 through 2.1.0 does not properly handle an object obtained by unserializing a pathname, which allows remote attackers to conduct PHP object injectio | 2014-04-22 15:06:00 | 2014-04-21 22:55:00 |
| CVE-2014-2921 | 7.5 | The getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore 1.4.9 through 2.0.0 does not properly handle an object obtained by unserializing Lucene search data, which allows remote attackers to conduct PHP object | 2014-04-22 15:04:00 | 2014-04-21 22:55:00 |
| CVE-2014-2155 | 5.0 | The DHCPv6 server module in Cisco CNS Network Registrar 7.1 allows remote attackers to cause a denial of service (daemon reload) via a malformed DHCPv6 packet, aka Bug ID CSCuo07437. | 2014-04-21 19:59:00 | 2014-04-19 21:55:00 |
| CVE-2014-2733 | 5.0 | Siemens SINEMA Server before 12 SP1 allows remote attackers to cause a denial of service (web-interface outage) via crafted HTTP requests to port (1) 4999 or (2) 80. | 2014-04-21 19:31:00 | 2014-04-19 19:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: