| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-7240 | 5.0 | Directory traversal vulnerability in download-file.php in the Advanced Dewplayer plugin 1.2 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the dew_file parameter. | 2014-02-25 13:18:00 | 2014-01-03 18:54:00 |
| CVE-2014-0031 | 4.0 | The (1) ListNetworkACL and (2) listNetworkACLLists APIs in Apache CloudStack before 4.2.1 allow remote authenticated users to list network ACLS for other users via a crafted request. | 2014-02-25 12:38:00 | 2014-01-15 16:08:00 |
| CVE-2013-7106 | 6.5 | Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long string to the (1) display_nav_ | 2014-02-25 12:19:00 | 2014-01-15 16:08:00 |
| CVE-2013-1853 | 2.1 | Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database. | 2014-02-25 02:44:00 | 2014-01-24 18:55:00 |
| CVE-2013-7256 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | 2014-02-25 02:17:00 | 2014-01-03 18:54:00 |
| CVE-2013-7317 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in CS-Cart before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) settings_file or (2) data_file parameter to (a) ampie.swf, (b) amline.swf, or (c) amcolumn.swf. | 2014-02-25 02:14:00 | 2014-01-24 15:08:00 |
| CVE-2013-7289 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in register.php in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) email, or (4) username par | 2014-02-25 02:01:00 | 2014-01-10 16:47:00 |
| CVE-2013-6642 | 5.0 | Google Chrome through 32.0.1700.23 on Android allows remote attackers to spoof the address bar via unspecified vectors. | 2014-02-25 01:55:00 | 2014-01-16 12:17:00 |
| CVE-2013-6884 | 10.0 | The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges. | 2014-02-25 01:44:00 | 2014-01-07 17:04:00 |
| CVE-2012-6635 | 4.0 | wp-admin/includes/class-wp-posts-list-table.php in WordPress before 3.3.3 does not properly restrict excerpt-view access, which allows remote authenticated users to obtain sensitive information by visiting a draft. | 2014-02-25 01:38:00 | 2014-01-21 01:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: