Rezultati pretraživanja za 'Proizvođač: debian'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2014-9035 | 4.3 | Cross-site scripting (XSS) vulnerability in Press This in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 2016-04-04 13:16:00 | 2014-11-25 23:59:00 |
| CVE-2013-7448 | 5.0 | Directory traversal vulnerability in wiki.c in didiwiki allows remote attackers to read arbitrary files via the page parameter to api/page/get. | 2016-03-10 19:05:00 | 2016-02-23 19:59:00 |
| CVE-2016-1233 | 7.2 | An unspecified udev rule in the Debian fuse package in jessie before 2.9.3-15+deb8u2, in stretch before 2.9.5-1, and in sid before 2.9.5-1 sets world-writable permissions for the /dev/cuse character device, which allows local users to gain privileges | 2016-02-01 01:16:00 | 2016-01-26 19:59:00 |
| CVE-2014-4911 | 5.0 | The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensi | 2015-12-04 16:21:00 | 2014-07-22 14:55:00 |
| CVE-2015-0859 | 7.5 | The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokeping_cgi, which allows remote attackers to execute arbitra | 2015-12-04 15:15:00 | 2015-12-03 20:59:00 |
| CVE-2014-5266 | 5.0 | The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service (CPU consumption | 2015-11-25 20:39:00 | 2014-08-18 11:15:00 |
| CVE-2014-5265 | 5.0 | The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, permits entity declarations without considering recursion during entity expansion, which allows remote attackers to cause a denial of | 2015-11-25 20:38:00 | 2014-08-18 11:15:00 |
| CVE-2014-5240 | 2.1 | Cross-site scripting (XSS) vulnerability in wp-includes/pluggable.php in WordPress before 3.9.2, when Multisite is enabled, allows remote authenticated administrators to inject arbitrary web script or HTML, and obtain Super Admin privileges, via a cr | 2015-11-25 20:22:00 | 2014-08-18 11:15:00 |
| CVE-2014-5204 | 6.8 | wp-includes/pluggable.php in WordPress before 3.9.2 rejects invalid CSRF nonces with a different timing depending on which characters in the nonce are incorrect, which makes it easier for remote attackers to bypass a CSRF protection mechanism via a b | 2015-11-25 20:21:00 | 2014-08-18 11:15:00 |
| CVE-2014-9057 | 7.5 | SQL injection vulnerability in the XML-RPC interface in Movable Type before 5.18, 5.2.x before 5.2.11, and 6.x before 6.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 2015-11-17 04:12:00 | 2014-12-16 18:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/939
Zapisa po stranici: