| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-6922 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts via a cr | 2014-01-22 19:49:00 | 2014-01-21 16:06:00 |
| CVE-2013-3482 | 9.3 | Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in an | 2014-01-21 21:14:00 | 2014-01-19 17:16:00 |
| CVE-2013-3483 | 9.3 | Stack-based buffer overflow in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ERS file. | 2014-01-21 21:12:00 | 2014-01-19 17:16:00 |
| CVE-2013-2142 | 3.3 | userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.pem, (3) libimobiledevicerc, (4) RootCertificate.pe | 2014-01-21 20:54:00 | 2014-01-19 18:02:00 |
| CVE-2011-5270 | 4.0 | wp-admin/press-this.php in WordPress before 3.0.6 does not enforce the publish_posts capability requirement, which allows remote authenticated users to perform publish actions by leveraging the Contributor role. | 2014-01-21 17:31:00 | 2014-01-21 01:55:00 |
| CVE-2010-5297 | 2.1 | WordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site administrators can add users" option once changed, which might allow remote authenticated administrators to bypass intended access restrictions in opportunis | 2014-01-21 17:28:00 | 2014-01-21 01:55:00 |
| CVE-2010-5296 | 4.9 | wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does not require the Super Admin role for the delete_users capability, which allows remote authenticated administrators to bypass intended access restrict | 2014-01-21 17:20:00 | 2014-01-21 01:55:00 |
| CVE-2010-5295 | 4.3 | Cross-site scripting (XSS) vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is not properly handled during a Delete Plugin action. | 2014-01-21 17:19:00 | 2014-01-21 01:55:00 |
| CVE-2010-5294 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the request_filesystem_credentials function in wp-admin/includes/file.php in WordPress before 3.0.2 allow remote servers to inject arbitrary web script or HTML by providing a crafted error messag | 2014-01-21 17:18:00 | 2014-01-21 01:55:00 |
| CVE-2010-5293 | 5.8 | wp-includes/comment.php in WordPress before 3.0.2 does not properly whitelist trackbacks and pingbacks in the blogroll, which allows remote attackers to bypass intended spam restrictions via a crafted URL, as demonstrated by a URL that triggers a sub | 2014-01-21 17:16:00 | 2014-01-21 01:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: