| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2011-3601 | 7.5 | Buffer overflow in the process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative value in a label_len value. | 2014-02-21 02:19:00 | 2014-02-17 16:55:00 |
| CVE-2013-1069 | 2.1 | Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file. | 2014-02-21 02:14:00 | 2014-02-17 16:55:00 |
| CVE-2014-1861 | 9.3 | The client in Jetro COCKPIT Secure Browsing (JCSB) 4.3.1 and 4.3.3 does not validate the FileName element in an RDP_FILE_TRANSFER document, which allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension. | 2014-02-21 02:04:00 | 2014-02-18 11:55:00 |
| CVE-2013-6396 | 5.8 | The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certifi | 2014-02-21 00:40:00 | 2014-02-18 19:55:00 |
| CVE-2014-0732 | 5.0 | The Real Time Monitoring Tool (RTMT) web application in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct | 2014-02-21 00:26:00 | 2014-02-20 05:18:00 |
| CVE-2014-0733 | 5.0 | The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote attackers to read ELM files via a direct request to a U | 2014-02-20 23:52:00 | 2014-02-20 15:27:00 |
| CVE-2013-4420 | 5.8 | Multiple directory traversal vulnerabilities in the (1) tar_extract_glob and (2) tar_extract_all functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. (dot dot) in a crafted tar file. | 2014-02-20 23:51:00 | 2014-02-20 16:55:00 |
| CVE-2011-4083 | 4.3 | The sosreport utility in the Red Hat sos package before 1.7-9 and 2.x before 2.2-17 includes (1) Certificate-based Red Hat Network private entitlement keys and the (2) private key for the entitlement in an archive of debugging information, which migh | 2014-02-19 00:40:00 | 2014-02-17 16:55:00 |
| CVE-2012-0270 | 7.5 | Multiple stack-based buffer overflows in Csound before 5.16.6 allow remote attackers to execute arbitrary code via a crafted (1) hetro file to the getnum function in util/heti_main.c or (2) PVOC file to the getnum function in util/pv_import.c. | 2014-02-18 19:49:00 | 2014-02-17 16:55:00 |
| CVE-2013-4737 | 9.3 | The CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly consider certain memory sections, which makes it easier for | 2014-02-18 19:35:00 | 2014-02-15 14:57:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: