| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2012-5192 | 5.0 | Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files via "''%2F" (dot dot encoded slash) sequences in the overlay_type parameter. | 2014-02-21 19:49:00 | 2014-01-28 00:55:00 |
| CVE-2013-2747 | 6.5 | The password reset feature in Courion Access Risk Management Suite Version 8 Update 9 allows remote authenticated users to bypass intended Internet Explorer usage restrictions and execute arbitrary commands by using keyboard shortcuts to navigate the | 2014-02-21 19:48:00 | 2014-01-29 18:55:00 |
| CVE-2013-6930 | 6.5 | SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to ex | 2014-02-21 19:45:00 | 2014-01-29 05:37:00 |
| CVE-2013-6931 | 6.5 | SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929. | 2014-02-21 19:44:00 | 2014-01-29 05:37:00 |
| CVE-2012-6108 | 2.1 | HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operations. | 2014-02-21 19:43:00 | 2014-02-15 14:57:00 |
| CVE-2013-4661 | 4.9 | CiviCRM 2.0.0 through 4.2.9 and 4.3.0 through 4.3.3 does not properly enforce role-based access control (RBAC) restrictions for default custom searches, which allows remote authenticated users with the "access CiviCRM" permission to bypass intended a | 2014-02-21 19:35:00 | 2014-01-29 18:55:00 |
| CVE-2013-4662 | 6.5 | The Quick Search API in CiviCRM 4.2.0 through 4.2.9 and 4.3.0 through 4.3.3 allows remote authenticated users to bypass the validation layer and conduct SQL injection attacks via a direct request to the "second layer" of the API, related to contact.g | 2014-02-21 19:29:00 | 2014-01-29 18:55:00 |
| CVE-2013-6141 | 5.0 | Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization. | 2014-02-21 19:07:00 | 2014-01-29 18:55:00 |
| CVE-2013-4898 | 6.5 | Unrestricted file upload vulnerability in the user profile page feature in the Timeline Plugin 4.2.5p9 for SocialEngine allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it vi | 2014-02-21 19:06:00 | 2014-01-29 18:55:00 |
| CVE-2013-1376 | 10.0 | Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-0606, CVE-2013-0612, CVE-2013-0615, C | 2014-02-21 18:46:00 | 2014-01-30 15:06:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: