Rezultati pretraživanja za 'Proizvođač: debian'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-3168 | 8.5 | The System module in Drupal 6.x before 6.38 and 7.x before 7.43 might allow remote attackers to hijack the authentication of site administrators for requests that download and run files with arbitrary JSON-encoded content, aka a "reflected file downl | 2016-04-14 14:33:00 | 2016-04-12 15:59:00 |
| CVE-2012-6700 | 5.0 | The decode_search function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response. | 2016-04-13 15:49:00 | 2016-04-11 15:59:00 |
| CVE-2012-6699 | 5.0 | The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds read) via a crafted response. | 2016-04-13 15:48:00 | 2016-04-11 15:59:00 |
| CVE-2012-6698 | 5.0 | The decode_search function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service (out-of-bounds write) via a crafted response. | 2016-04-13 15:07:00 | 2016-04-11 15:59:00 |
| CVE-2016-3164 | 5.8 | Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging (1) custom code or (2) a form shown on a 404 error page, related to path manipulation. | 2016-04-13 00:55:00 | 2016-04-12 15:59:00 |
| CVE-2016-3166 | 4.3 | CRLF injection vulnerability in the drupal_set_header function in Drupal 6.x before 6.38, when used with PHP before 5.1.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks by leveraging a module tha | 2016-04-13 00:44:00 | 2016-04-12 15:59:00 |
| CVE-2016-3169 | 6.8 | The User module in Drupal 6.x before 6.38 and 7.x before 7.43 allows remote attackers to gain privileges by leveraging contributed or custom code that calls the user_save function with an explicit category and loads all roles into the array. | 2016-04-13 00:22:00 | 2016-04-12 15:59:00 |
| CVE-2015-3332 | 4.9 | A certain backport in the TCP Fast Open implementation for the Linux kernel before 3.18 does not properly maintain a count value, which allow local users to cause a denial of service (system crash) via the Fast Open feature, as demonstrated by visiti | 2016-04-11 18:54:00 | 2015-05-27 10:59:00 |
| CVE-2013-6422 | 4.0 | The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to | 2016-04-07 20:55:00 | 2013-12-23 22:55:00 |
| CVE-2014-9036 | 4.3 | Cross-site scripting (XSS) vulnerability in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted Cascading Style Sheets (CSS) token sequence | 2016-04-04 13:17:00 | 2014-11-25 23:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/939
Zapisa po stranici: