| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2384 | 4.9 | vmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on Windows might allow local users to cause a denial of service (read access violation and system crash) via a crafted buffer in an IOCTL call. NOTE: the rese | 2014-04-16 14:23:00 | 2014-04-15 23:13:00 |
| CVE-2014-2866 | 10.0 | PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on client JavaScript code for access restrictions, which allows remote attackers to perform unspecified operations by modifying this code. | 2014-04-16 14:22:00 | 2014-04-15 23:13:00 |
| CVE-2014-2865 | 7.5 | PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a '\0' character, as demonstrated by using this character within a pathname on the drive containing the web root directory of a | 2014-04-16 14:20:00 | 2014-04-15 23:13:00 |
| CVE-2014-2864 | 10.0 | Multiple directory traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to have an unspecified impact via a filename parameter containing directory traversal sequences. | 2014-04-16 14:18:00 | 2014-04-15 23:13:00 |
| CVE-2014-2863 | 10.0 | Multiple absolute path traversal vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to have an unspecified impact via a full pathname in a parameter. | 2014-04-16 14:16:00 | 2014-04-15 23:13:00 |
| CVE-2014-2862 | 6.5 | PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 does not check authorization in unspecified situations, which allows remote authenticated users to perform actions via unknown vectors. | 2014-04-16 14:14:00 | 2014-04-15 23:13:00 |
| CVE-2014-2861 | 4.3 | Incomplete blacklist vulnerability in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted string, as demonstrated by bypassing a protection mechanism that removes | 2014-04-16 14:08:00 | 2014-04-15 23:13:00 |
| CVE-2014-0642 | 5.5 | EMC Documentum Content Server before 6.7 SP1 P26, 6.7 SP2 before P13, 7.0 before P13, and 7.1 before P02 allows remote authenticated users to bypass intended access restrictions and read metadata from certain folders via unspecified vectors. | 2014-04-16 14:03:00 | 2014-04-15 23:13:00 |
| CVE-2014-2860 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allow remote attackers to inject arbitrary web script or HTML via a crafted HTTP request to a (1) ColdFusion or (2) JavaScript component. | 2014-04-16 13:58:00 | 2014-04-15 23:13:00 |
| CVE-2014-2859 | 7.5 | PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 allows remote attackers to bypass intended access restrictions via a direct request. | 2014-04-16 13:58:00 | 2014-04-15 23:13:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: