| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-4191 | 5.8 | zip.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly enforce access restrictions when including content in a zip archive, which allows remote attackers to obtain sensitive information by reading a generated | 2014-03-12 01:10:00 | 2014-03-11 19:37:00 |
| CVE-2013-4190 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in (1) spamProtect.py, (2) pts.py, and (3) request.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspeci | 2014-03-12 01:06:00 | 2014-03-11 19:37:00 |
| CVE-2013-4189 | 6.5 | Multiple unspecified vulnerabilities in (1) dataitems.py, (2) get.py, and (3) traverseName.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users with administrator access to a subtree to access nod | 2014-03-12 01:02:00 | 2014-03-11 19:37:00 |
| CVE-2013-4188 | 4.3 | traverser.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote attackers with administrator privileges to cause a denial of service (infinite loop and resource consumption) via unspecified vectors related to "retrie | 2014-03-12 00:59:00 | 2014-03-11 19:37:00 |
| CVE-2013-2754 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Umisoft UMI.CMS before 2.9 build 21905 allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a request to admin/users/add/user/do/. | 2014-03-12 00:47:00 | 2014-03-11 19:37:00 |
| CVE-2014-2096 | 4.6 | Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory. | 2014-03-11 16:57:00 | 2014-02-26 14:55:00 |
| CVE-2014-2093 | 4.6 | Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory. | 2014-03-11 16:57:00 | 2014-02-26 14:55:00 |
| CVE-2014-2095 | 4.6 | Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory. | 2014-03-11 16:56:00 | 2014-02-26 14:55:00 |
| CVE-2014-2094 | 4.6 | Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory. | 2014-03-11 16:55:00 | 2014-02-26 14:55:00 |
| CVE-2013-7334 | 6.8 | Cross-site request forgery (CSRF) vulnerability in ImageCMS before 4.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the q parameter, related to CVE-2012-6290. | 2014-03-11 16:30:00 | 2014-03-11 16:17:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: