| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2013-7292 | 3.5 | VASCO IDENTIKEY Authentication Server (IAS) 3.4.x allows remote authenticated users to bypass Active Directory (AD) authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a mult | 2014-01-14 15:01:00 | 2014-01-13 15:37:00 |
| CVE-2014-0805 | 5.8 | Directory traversal vulnerability in the NeoFiler application 5.4.3 and earlier, NeoFiler Free application 5.4.3 and earlier, and NeoFiler Lite application 2.4.2 and earlier for Android allows attackers to overwrite or create arbitrary files via unsp | 2014-01-14 04:49:00 | 2014-01-12 18:34:00 |
| CVE-2013-7081 | 4.9 | The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary HMAC signatures and bypass intended access restricti | 2014-01-14 04:29:00 | 2013-12-23 23:55:00 |
| CVE-2013-7080 | 5.8 | The creating record functionality in Extension table administration library (feuser_adminLib.inc) in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, and 6.0.0 through 6.0.11 allows remote attackers to write to arbitrary fields in the configuration | 2014-01-14 04:29:00 | 2013-12-23 23:55:00 |
| CVE-2013-7075 | 6.5 | The Content Editing Wizards component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated backend users to unserialize arbitrary PHP objects, delete arbitrary files, and possi | 2014-01-14 04:29:00 | 2013-12-23 23:55:00 |
| CVE-2013-6883 | 6.8 | Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via u | 2014-01-14 04:29:00 | 2013-12-17 16:08:00 |
| CVE-2013-6882 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote attackers to inject arbitrary web script or HTML via the username parameter in a login or (2) remote authenti | 2014-01-14 04:29:00 | 2013-12-17 16:08:00 |
| CVE-2013-6386 | 6.8 | Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers, which uses predictable seeds and allows remote attackers to predict security strings and bypass intended restrictions via a brute force attack. | 2014-01-14 04:28:00 | 2013-12-07 21:55:00 |
| CVE-2013-6385 | 5.1 | The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs form validation even when CSRF validation has failed, which might allow remote attackers to trigger application-specific impacts such | 2014-01-14 04:28:00 | 2013-12-07 21:55:00 |
| CVE-2013-4325 | 6.9 | The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leverag | 2014-01-14 04:27:00 | 2013-09-23 10:18:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: