| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2012-1171 | 5.0 | The libxml RSHUTDOWN function in PHP 5.x allows remote attackers to bypass the open_basedir protection mechanism and read arbitrary files via vectors involving a stream_close method call during use of a custom stream wrapper. | 2014-02-18 18:57:00 | 2014-02-15 14:57:00 |
| CVE-2011-3605 | 5.0 | The process_rs function in the router advertisement daemon (radvd) before 1.8.2, when UnicastOnly is enabled, allows remote attackers to cause a denial of service (temporary service hang) via a large number of ND_ROUTER_SOLICIT requests. | 2014-02-18 18:55:00 | 2014-02-17 16:55:00 |
| CVE-2011-3604 | 7.5 | The process_ra function in the router advertisement daemon (radvd) before 1.8.2 allows remote attackers to cause a denial of service (stack-based buffer over-read and crash) via unspecified vectors. | 2014-02-18 18:54:00 | 2014-02-17 16:55:00 |
| CVE-2013-6166 | 6.8 | Google Chrome before 29 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter that | 2014-02-18 18:27:00 | 2014-02-15 14:57:00 |
| CVE-2013-6167 | 6.8 | Mozilla Firefox through 27 sends HTTP Cookie headers without first validating that they have the required character-set restrictions, which allows remote attackers to conduct the equivalent of a persistent Logout CSRF attack via a crafted parameter t | 2014-02-18 18:21:00 | 2014-02-15 14:57:00 |
| CVE-2013-6492 | 5.8 | The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request. | 2014-02-18 15:49:00 | 2014-02-14 15:55:00 |
| CVE-2013-6441 | 7.2 | The lxc-sshd template (templates/lxc-sshd.in) in LXC before 1.0.0.beta2 uses read-write permissions when mounting /sbin/init, which allows local users to gain privileges by modifying the init file. | 2014-02-18 15:43:00 | 2014-02-14 15:55:00 |
| CVE-2012-1100 | 5.8 | Red Hat JBoss Operations Network (JON) 3.0.x before 3.0.1, 2.4.2, and earlier, when LDAP authentication is enabled and the LDAP bind account credentials are invalid, allows remote attackers to login to LDAP-based accounts via an arbitrary password in | 2014-02-14 19:19:00 | 2014-02-14 15:55:00 |
| CVE-2012-0062 | 5.8 | Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 allows remote attackers to hijack agent sessions via an agent registration request without a security token. | 2014-02-14 18:46:00 | 2014-02-14 15:55:00 |
| CVE-2012-0052 | 5.8 | Red Hat JBoss Operations Network (JON) before 2.4.2 and 3.0.x before 3.0.1 does not check the JON agent key, which allows remote attackers to spoof the identity of arbitrary agents via the registered agent name. | 2014-02-14 18:44:00 | 2014-02-14 15:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: