| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-0792 | 7.5 | Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors related to unmarshalling of unintended Object types. | 2014-01-21 14:14:00 | 2014-01-17 20:55:00 |
| CVE-2012-6630 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Media Library Categories plugin 1.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) bulk parameter to media-library-categories/add.php or (2) q param | 2014-01-17 19:16:00 | 2014-01-16 21:55:00 |
| CVE-2012-6629 | 6.8 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change an email address or (2) con | 2014-01-17 18:51:00 | 2014-01-16 21:55:00 |
| CVE-2012-6628 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the Newsletter Manager plugin before 1.0.2 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) xyz_em_campName to admin/create_campaign.php or (2) admin/edit_c | 2014-01-17 18:50:00 | 2014-01-16 21:55:00 |
| CVE-2012-6627 | 4.3 | Cross-site scripting (XSS) vulnerability in admin/test_mail.php in the Newsletter Manager plugin 1.0.2 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. | 2014-01-17 18:35:00 | 2014-01-16 21:55:00 |
| CVE-2013-6687 | 4.0 | The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the cleartext administrative password by reading HTML source code, aka Bug ID CSCul33876. | 2014-01-17 15:12:00 | 2014-01-16 19:55:00 |
| CVE-2013-7113 | 5.0 | epan/dissectors/packet-bssgp.c in the BSSGP dissector in Wireshark 1.10.x before 1.10.4 incorrectly relies on a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet. | 2014-01-17 05:20:00 | 2013-12-19 22:55:00 |
| CVE-2013-4672 | 7.2 | The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 has an incorrect sudoers file, which allows local users to bypass intended access restrictions via a command. | 2014-01-17 05:17:00 | 2013-08-01 13:32:00 |
| CVE-2013-4671 | 6.0 | Cross-site request forgery (CSRF) vulnerability in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. | 2014-01-17 05:17:00 | 2013-08-01 13:32:00 |
| CVE-2013-4670 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2014-01-17 05:17:00 | 2013-08-01 13:32:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: