| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-2245 | 6.0 | SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the sortby parameter to admin/moduleinterface.php. NOT | 2014-03-07 19:43:00 | 2014-03-05 16:37:00 |
| CVE-2014-0336 | 6.8 | Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the user_new_master parameter to the adminconsol | 2014-03-07 19:19:00 | 2014-03-06 11:55:00 |
| CVE-2014-0335 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the web client in Serena Dimensions CM 12.2 build 7.199.0 allow remote attackers to inject arbitrary web script or HTML via the (1) DB_CONN, (2) DB_NAME, (3) DM_HOST, (4) MAN_DB_NAME, (5) framecm | 2014-03-07 19:19:00 | 2014-03-06 11:55:00 |
| CVE-2014-0624 | 2.7 | EMC RSA Data Loss Prevention (DLP) 9.x before 9.6-SP2 does not properly manage sessions, which allows remote authenticated users to gain privileges and bypass intended content-reading restrictions via unspecified vectors. | 2014-03-07 19:17:00 | 2014-03-06 11:55:00 |
| CVE-2014-0629 | 8.5 | EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 does not properly handle the interaction between the dm_world group and the dm_superusers_dynamic group, which allows remote authenticated users to obtain sensitive information an | 2014-03-07 19:16:00 | 2014-03-06 11:55:00 |
| CVE-2014-0630 | 4.0 | EMC Documentum TaskSpace (TSP) 6.7SP1 before P25 and 6.7SP2 before P11 allows remote authenticated users to read arbitrary files via a modified imaging-service URL. | 2014-03-07 19:14:00 | 2014-03-06 11:55:00 |
| CVE-2014-0704 | 7.1 | The IGMP implementation on Cisco Wireless LAN Controller (WLC) devices 4.x, 5.x, 6.x, 7.0 before 7.0.250.0, 7.1, 7.2, and 7.3, when IGMPv3 Snooping is enabled, allows remote attackers to cause a denial of service (memory over-read and device restart) | 2014-03-07 19:12:00 | 2014-03-06 11:55:00 |
| CVE-2014-0703 | 10.0 | Cisco Wireless LAN Controller (WLC) devices 7.4 before 7.4.110.0 distribute Aironet IOS software with a race condition in the status of the administrative HTTP server, which allows remote attackers to bypass intended access restrictions by connecting | 2014-03-07 19:12:00 | 2014-03-06 11:55:00 |
| CVE-2014-0705 | 7.1 | The multicast listener discovery (MLD) service on Cisco Wireless LAN Controller (WLC) devices 7.2, 7.3, 7.4 before 7.4.121.0, and 7.5, when MLDv2 Snooping is enabled, allows remote attackers to cause a denial of service (device restart) via a malform | 2014-03-07 19:08:00 | 2014-03-06 11:55:00 |
| CVE-2011-3153 | 1.9 | dmrc.c in Light Display Manager (aka LightDM) before 1.1.1 allows local users to read arbitrary files via a symlink attack on ~/.dmrc. | 2014-03-07 19:07:00 | 2014-03-06 15:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: