| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-2824 | 7.8 | Schneider Electric StruxureWare SCADA Expert Vijeo Citect 7.40, Vijeo Citect 7.20 through 7.30SP1, CitectSCADA 7.20 through 7.30SP1, StruxureWare PowerSCADA Expert 7.30 through 7.30SR1, and PowerLogic SCADA 7.20 through 7.20SR1 do not properly handle | 2014-02-26 16:58:00 | 2014-02-26 14:55:00 |
| CVE-2013-6945 | 7.5 | The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to perform doctor-only actions and read or modify patient records via unspecified vectors related to a "logic flaw." | 2014-02-25 18:18:00 | 2013-12-04 22:55:00 |
| CVE-2013-6000 | 5.0 | Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to read arbitrary files via a .. (dot dot) in a request. | 2014-02-25 18:16:00 | 2013-12-05 12:55:00 |
| CVE-2013-6881 | 10.0 | CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the forensic imaging task. | 2014-02-25 18:11:00 | 2014-01-07 17:04:00 |
| CVE-2013-4564 | 5.0 | Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet. | 2014-02-25 18:02:00 | 2014-01-07 17:04:00 |
| CVE-2013-7288 | 4.3 | Cross-site scripting (XSS) vulnerability in the mycode_parse_video function in inc/class_parser.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs. | 2014-02-25 14:47:00 | 2014-01-10 16:47:00 |
| CVE-2013-6953 | 5.0 | BlogEngine.NET 2.8.0.0 and earlier allows remote attackers to read usernames and password hashes via a request for the sioc.axd file. | 2014-02-25 14:38:00 | 2014-01-03 18:55:00 |
| CVE-2011-1936 | 4.6 | Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified | 2014-02-25 14:10:00 | 2014-01-07 19:55:00 |
| CVE-2013-7097 | 5.0 | Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the showmask parameter to installer/overview.php. | 2014-02-25 14:05:00 | 2014-01-08 15:29:00 |
| CVE-2013-7275 | 4.3 | Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie list popup. | 2014-02-25 14:03:00 | 2014-01-08 15:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: