| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2144 | 6.1 | Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service (IPv4 and IPv6 transit outage) via crafted redirect messages, aka Bug ID CSCum14266. | 2014-04-07 14:16:00 | 2014-04-05 04:01:00 |
| CVE-2013-5365 | 9.3 | Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compressed channel data in a PSD file. | 2014-04-05 03:56:00 | 2014-04-02 16:05:00 |
| CVE-2014-2143 | 5.0 | The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-association drop) via crafted Main Mode packets, aka Bug ID CSCun31021. | 2014-04-04 17:23:00 | 2014-04-04 15:10:00 |
| CVE-2014-0638 | 4.3 | Cross-site scripting (XSS) vulnerability in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote attackers to inject arbitrary web script or HTML via vectors involving FRAME elements, related to a "cross-frame scriptin | 2014-04-04 16:37:00 | 2014-04-04 15:09:00 |
| CVE-2014-0637 | 4.3 | Cross-site scripting (XSS) vulnerability in the back-office case-management application in RSA Adaptive Authentication (On-Premise) 6.x and 7.x before 7.1 SP0 P2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified | 2014-04-04 16:34:00 | 2014-04-04 15:09:00 |
| CVE-2014-0592 | 7.5 | Barclamp (aka barclamp-network) 1.7 for the Crowbar Framework, as used in SUSE Cloud 3, does not enable netfilter on bridges when creating new instances, which allows remote attackers to bypass security group restrictions via unspecified vectors, rel | 2014-04-04 16:20:00 | 2014-04-04 14:55:00 |
| CVE-2013-2287 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) notify or (2) blog parameter. | 2014-04-04 16:01:00 | 2014-04-04 14:55:00 |
| CVE-2013-6770 | 7.6 | The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.3 and 4.4 does not properly restrict the set of users who can execute /system/xbin/su with the --daemon option, which allows attackers to gain privileges by leveraging ADB she | 2014-04-03 17:09:00 | 2014-03-31 14:58:00 |
| CVE-2013-7352 | 6.8 | Cross-site request forgery (CSRF) vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the show_statuses[] parameter, r | 2014-04-03 15:36:00 | 2014-04-02 18:55:00 |
| CVE-2013-3484 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in dotCMS before 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) _loginUserName parameter to application/login/login.html, (2) my_account_login parameter to c/portal_ | 2014-04-03 15:13:00 | 2014-04-02 16:17:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: