| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2012-6634 | 6.4 | wp-admin/media-upload.php in WordPress before 3.3.3 allows remote attackers to obtain sensitive information or bypass intended media-attachment restrictions via a post_id value. | 2014-02-25 01:37:00 | 2014-01-21 01:55:00 |
| CVE-2012-6633 | 4.3 | Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field. | 2014-02-25 01:36:00 | 2014-01-21 01:55:00 |
| CVE-2013-4978 | 9.3 | Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to execute arbitrary code via a crafted PDF file. | 2014-02-25 01:13:00 | 2014-02-05 15:10:00 |
| CVE-2013-2074 | 5.0 | kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and password in an error message. | 2014-02-25 00:26:00 | 2014-02-05 19:55:00 |
| CVE-2012-6493 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Rapid7 Nexpose Security Console before 5.5.4 allows remote attackers to hijack the authentication of unspecified victims for requests that delete scan data and sites via a request to data/site/delete | 2014-02-24 22:17:00 | 2014-02-04 22:55:00 |
| CVE-2013-6652 | 7.5 | Directory traversal vulnerability in sandbox/win/src/named_pipe_dispatcher.cc in Google Chrome before 33.0.1750.117 on Windows allows attackers to bypass intended named-pipe policy restrictions in the sandbox via vectors related to (1) lack of checks | 2014-02-24 19:20:00 | 2014-02-24 04:48:00 |
| CVE-2013-2817 | 9.3 | An ActiveX control in IcoLaunch.dll in Mitsubishi Electric Automation MC-WorX Suite 8.02 allows user-assisted remote attackers to execute arbitrary programs via a crafted HTML document in conjunction with a Login Client button click. | 2014-02-24 18:48:00 | 2014-02-24 04:48:00 |
| CVE-2014-0730 | 6.8 | Cisco Unified Computing System (UCS) Central Software 1.1 and earlier allows local users to gain privileges via a CLI copy command in a local-mgmt context, aka Bug ID CSCul53128. | 2014-02-24 17:53:00 | 2014-02-22 21:55:00 |
| CVE-2013-6951 | 7.1 | The Belkin WeMo Home Automation firmware before 3949 does not maintain a set of Certification Authority public keys, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary X.509 certificate. | 2014-02-24 17:19:00 | 2014-02-22 21:55:00 |
| CVE-2014-0710 | 7.1 | Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service (device reload) via certain matching traffic, aka Bug ID | 2014-02-24 16:55:00 | 2014-02-22 21:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: