| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-1777 | 10.0 | The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI classloader, which allows remote attackers to exec | 2014-04-01 06:19:00 | 2013-07-11 22:55:00 |
| CVE-2009-5138 | 5.8 | GnuTLS before 2.7.6, when the GNUTLS_VERIFY_ALLOW_X509_V1_CA_CRT flag is not enabled, treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging a X.509 V1 certificate from a t | 2014-04-01 05:44:00 | 2014-03-07 00:10:00 |
| CVE-2013-6775 | 10.0 | The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell metacharacters in the -c option to /system/xbin/su. | 2014-03-31 19:08:00 | 2014-03-31 14:58:00 |
| CVE-2013-6769 | 10.0 | The CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android allows attackers to gain privileges via shell metacharacters in the -c option to /system/xbin/su. | 2014-03-31 19:01:00 | 2014-03-31 14:58:00 |
| CVE-2013-6768 | 5.0 | Untrusted search path vulnerability in the CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier allows attackers to trigger the launch of a Trojan horse app_process program via a crafted PATH environment variable for | 2014-03-31 18:59:00 | 2014-03-31 14:58:00 |
| CVE-2013-7347 | 3.7 | Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-201 | 2014-03-31 18:23:00 | 2014-03-31 14:58:00 |
| CVE-2014-1982 | 10.0 | The administrative interface in Allied Telesis AT-RG634A ADSL Broadband router 3.3+, iMG624A firmware 3.5, iMG616LH firmware 2.4, and iMG646BD firmware 3.5 allows remote attackers to gain privileges and execute arbitrary commands via a direct request | 2014-03-31 17:57:00 | 2014-03-31 14:58:00 |
| CVE-2014-1516 | 5.0 | The saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0.1 on Android relies on Android's weak approach to seeding the Math.random function, which makes it easier for attackers to bypass a profile-randomizatio | 2014-03-31 17:33:00 | 2014-03-29 20:55:00 |
| CVE-2014-1644 | 7.5 | The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by providing the e-mail address associated with a user account | 2014-03-31 16:40:00 | 2014-03-29 01:55:00 |
| CVE-2014-1645 | 7.5 | SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 2014-03-31 16:27:00 | 2014-03-29 01:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: