| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-1978 | 4.3 | The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to | 2014-03-20 16:02:00 | 2014-03-19 14:17:00 |
| CVE-2013-3938 | 9.3 | Integer overflow in xnview.exe in XnView 2.13 allows remote attackers to execute arbitrary code via a large NUM_ELEMENTS field in an IFD_ENTRY structure in a JXR file, which triggers a heap-based buffer overflow. | 2014-03-19 13:59:00 | 2014-03-18 17:02:00 |
| CVE-2013-2643 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Sophos Web Appliance before 3.7.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) xss parameter in an allow action to rss.php, (2) msg parameter to end-user/errdoc.php | 2014-03-19 13:55:00 | 2014-03-18 17:02:00 |
| CVE-2013-2642 | 9.3 | Sophos Web Appliance before 3.7.8.2 allows (1) remote attackers to execute arbitrary commands via shell metacharacters in the client-ip parameter to the Block page, when using the user_workstation variable in a customized template, and remote authent | 2014-03-19 13:54:00 | 2014-03-18 17:02:00 |
| CVE-2013-2641 | 5.0 | Directory traversal vulnerability in patience.cgi in Sophos Web Appliance before 3.7.8.2 allows remote attackers to read arbitrary files via the id parameter. | 2014-03-19 13:48:00 | 2014-03-18 17:02:00 |
| CVE-2014-1976 | 5.8 | The Demaecan application 2.1.0 and earlier for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 2014-03-18 16:05:00 | 2014-03-18 05:18:00 |
| CVE-2014-2292 | 7.2 | Unspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS before 7.1r18, 7.3 before 7.3r10, 7.4 before 7.4r8, and 8.0 before 8.0r1 allows local users to gain privileges via un | 2014-03-17 13:57:00 | 2014-03-14 15:55:00 |
| CVE-2013-6476 | 4.4 | The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file. | 2014-03-17 13:10:00 | 2014-03-14 15:55:00 |
| CVE-2014-0020 | 5.0 | The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message. | 2014-03-16 04:43:00 | 2014-02-06 16:10:00 |
| CVE-2013-6493 | 2.1 | The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a temporary socket file with a predictable name in /tmp. | 2014-03-16 04:42:00 | 2014-03-03 16:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: