| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-1297 | 5.0 | WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read arbitrary files by leveraging WebProcess access. | 2014-04-02 17:07:00 | 2014-04-02 16:17:00 |
| CVE-2014-2138 | 4.3 | CRLF injection vulnerability in the web framework in Cisco Security Manager 4.2 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCun82349. | 2014-04-02 16:56:00 | 2014-04-02 03:58:00 |
| CVE-2014-2137 | 4.3 | CRLF injection vulnerability in the web framework in Cisco Web Security Appliance (WSA) 7.7 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct redirection attacks via a crafted URL, aka Bug ID CSCuj61002. | 2014-04-02 16:28:00 | 2014-04-02 03:58:00 |
| CVE-2014-1942 | 4.3 | Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-04-02 16:05:00 | 2014-04-02 03:58:00 |
| CVE-2013-3588 | 7.8 | The web management interface on Zyxel P660 devices allows remote attackers to cause a denial of service (reboot) via a flood of TCP SYN packets. | 2014-04-02 15:29:00 | 2014-04-02 03:58:00 |
| CVE-2014-2212 | 5.0 | The remember me feature in portal/scr_authentif.php in POSH (aka Posh portal or Portaneo) 3.0, 3.2.1, 3.3.0, and earlier stores the username and MD5 digest of the password in cleartext in a cookie, which allows attackers to obtain sensitive informati | 2014-04-02 15:03:00 | 2014-04-01 17:55:00 |
| CVE-2014-1691 | 7.5 | The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted serialized object in the _formvars form. | 2014-04-02 14:50:00 | 2014-04-01 15:55:00 |
| CVE-2013-7350 | 10.0 | Multiple unspecified vulnerabilities in Check Point Security Gateway 80 R71.x before R71.45 (730159141) and R75.20.x before R75.20.4 and 600 and 1100 appliances R75.20.x before R75.20.42 have unknown impact and attack vectors related to "important se | 2014-04-01 15:19:00 | 2014-04-01 06:35:00 |
| CVE-2012-0032 | 3.7 | Red Hat JBoss Operations Network (JON) before 3.0.1 uses 0777 permissions for the root directory when installing a remote client, which allows local users to read or modify subdirectories and files within the root directory, as demonstrated by obtain | 2014-04-01 14:40:00 | 2014-04-01 06:35:00 |
| CVE-2011-4573 | 3.5 | Red Hat JBoss Operations Network (JON) before 2.4.2 does not properly enforce "modify resource" permissions for remote authenticated users when deleting a plug-in configuration update from the group connection properties history, which prevents such | 2014-04-01 14:38:00 | 2014-04-01 06:35:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: