| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2012-0434 | 10.0 | The server in Crowbar, as used in SUSE Cloud 1.0, uses weak permissions for the production.log file, which has unspecified impact and attack vectors. | 2014-03-04 18:56:00 | 2013-12-02 04:36:00 |
| CVE-2012-0414 | 4.3 | Cross-site scripting (XSS) vulnerability in the Spacewalk service in SUSE Manager 1.2 for SUSE Linux Enterprise (SLE) 11 SP1 allows remote attackers to inject arbitrary web script or HTML via an image name. | 2014-03-04 18:56:00 | 2013-12-02 04:36:00 |
| CVE-2013-6695 | 4.0 | The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by ob | 2014-03-04 18:54:00 | 2013-12-02 22:55:00 |
| CVE-2013-6834 | 4.9 | The ql_eioctl function in sys/dev/qlxgbe/ql_ioctl.c in the kernel in FreeBSD 10 and earlier does not validate a certain size parameter, which allows local users to obtain sensitive information from kernel memory via a crafted ioctl call. | 2014-03-04 18:52:00 | 2013-11-21 04:40:00 |
| CVE-2014-1840 | 4.3 | Cross-site scripting (XSS) vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a do_search action, which is not properly handled in a forced SQL er | 2014-03-04 17:36:00 | 2014-03-03 16:55:00 |
| CVE-2013-4981 | 9.0 | Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a l | 2014-03-04 16:51:00 | 2014-03-03 16:55:00 |
| CVE-2013-4980 | 9.0 | Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device crash) and possibly execute arbitrary code via a l | 2014-03-04 16:50:00 | 2014-03-03 16:55:00 |
| CVE-2013-1409 | 4.3 | Cross-site scripting (XSS) vulnerability in the CommentLuv plugin before 2.92.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _ajax_nonce parameter to wp-admin/admin-ajax.php. | 2014-03-04 16:11:00 | 2014-03-03 16:55:00 |
| CVE-2014-2090 | 3.5 | Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tar, (2) tar_val, or (3) title parameter. | 2014-03-03 20:58:00 | 2014-03-02 17:55:00 |
| CVE-2012-6637 | 7.5 | Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier do not anchor the end of domain-name regular expressions, which allows remote attackers to bypass a whitelist protection mechanism via a domain name that contains an acceptable nam | 2014-03-03 20:42:00 | 2014-03-03 04:50:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: