| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-6489 | 5.0 | Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an integer overflow and a buffer overflow. | 2014-03-08 05:11:00 | 2014-02-06 17:00:00 |
| CVE-2013-6419 | 5.0 | Interaction error in OpenStack Nova and Neutron before Havana 2013.2.1 and icehouse-1 does not validate the instance ID of the tenant making a request, which allows remote tenants to obtain sensitive metadata by spoofing the device ID that is bound t | 2014-03-08 05:11:00 | 2014-01-07 18:55:00 |
| CVE-2013-4112 | 5.4 | The DiagnosticsHandler in JGroup 3.0.x, 3.1.x, 3.2.x before 3.2.9, and 3.3.x before 3.3.3 allows remote attackers to obtain sensitive information (diagnostic information) and execute arbitrary code by reusing valid credentials. | 2014-03-08 05:09:00 | 2013-09-28 19:55:00 |
| CVE-2013-1921 | 1.9 | PicketBox, as used in Red Hat JBoss Enterprise Application Platform before 6.1.1, allows local users to obtain the admin encryption key by reading the Vault data file. | 2014-03-08 05:05:00 | 2013-09-28 19:55:00 |
| CVE-2013-0244 | 2.6 | Cross-site scripting (XSS) vulnerability in Drupal 6.x before 6.28 and 7.x before 7.19, when running with older versions of jQuery that are vulnerable to CVE-2011-4969, allows remote attackers to inject arbitrary web script or HTML via vectors involv | 2014-03-08 05:02:00 | 2014-01-19 17:16:00 |
| CVE-2012-6612 | 7.5 | The (1) UpdateRequestHandler for XSLT or (2) XPathEntityProcessor in Apache Solr before 4.1 allows remote attackers to have an unspecified impact via XML data containing an external entity declaration in conjunction with an entity reference, related | 2014-03-08 05:02:00 | 2013-12-07 21:55:00 |
| CVE-2012-0826 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the Aggregator module in Drupal 6.x before 6.23 and 7.x before 7.11 allows remote attackers to hijack the authentication of unspecified victims for requests that update feeds and possibly cause a den | 2014-03-08 04:54:00 | 2013-10-28 22:55:00 |
| CVE-2012-0825 | 6.8 | Drupal 6.x before 6.23 and 7.x before 7.11 does not verify that Attribute Exchange (AX) information is signed, which allows remote attackers to modify potentially sensitive AX information without detection via a man-in-the-middle (MITM) attack. | 2014-03-08 04:54:00 | 2013-10-28 22:55:00 |
| CVE-2011-4105 | 1.9 | LightDM before 1.0.6 allows local users to change ownership of arbitrary files via a symlink attack on ~/.Xauthority. | 2014-03-08 04:51:00 | 2012-02-17 23:55:00 |
| CVE-2011-1837 | 3.6 | The lock-counter implementation in utils/mount.ecryptfs_private.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors. | 2014-03-08 04:47:00 | 2014-02-15 14:57:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: