| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2310 | 5.0 | The AgentX subagent in Net-SNMP before 5.4.4 allows remote attackers to cause a denial of service (hang) by sending a multi-object request with an Object ID (OID) containing more subids than previous requests, a different vulnerability than CVE-2012- | 2014-04-18 15:52:00 | 2014-04-17 14:55:00 |
| CVE-2014-0036 | 6.8 | The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors. | 2014-04-18 13:48:00 | 2014-04-17 14:55:00 |
| CVE-2014-0071 | 6.4 | PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized connections. | 2014-04-17 16:00:00 | 2014-04-17 14:55:00 |
| CVE-2014-0645 | 4.7 | EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via | 2014-04-17 15:10:00 | 2014-04-17 01:55:00 |
| CVE-2014-0644 | 7.8 | EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) i | 2014-04-17 15:06:00 | 2014-04-17 01:55:00 |
| CVE-2011-4406 | 3.6 | The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified vectors. | 2014-04-17 14:33:00 | 2014-04-16 18:37:00 |
| CVE-2013-1764 | 2.1 | The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method. | 2014-04-17 14:30:00 | 2014-04-16 18:37:00 |
| CVE-2011-4195 | 7.5 | kiwi before 4.98.05, as used in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1, allows attackers to execute arbitrary commands via shell metacharacters in an image name. | 2014-04-17 14:20:00 | 2014-04-16 18:37:00 |
| CVE-2011-4089 | 4.6 | The bzexe command in bzip2 1.0.5 and earlier generates compressed executables that do not properly handle temporary files during extraction, which allows local users to execute arbitrary code by precreating a temporary directory. | 2014-04-17 14:15:00 | 2014-04-16 18:37:00 |
| CVE-2011-4193 | 4.3 | Cross-site scripting (XSS) vulnerability in the overlay files tab in SUSE Studio Onsite 1.2 before 1.2.1 and SUSE Studio Extension for System z 1.2 before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted application, | 2014-04-17 14:04:00 | 2014-04-16 18:37:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: