查看最近更新的CVE列表 (90883)

CVE-2011-3438(发布:2017-04-24 15:59:00)NM
CVSSN/A

[原文]WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process crash) or arbitrary code execution.

CVE-2016-3691(发布:2017-04-24 14:59:00)NM
CVSSN/A

[原文]Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.

CVE-2015-7568(发布:2017-04-24 14:59:00)NM
CVSSN/A

[原文]SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials of known users via the "userEmail" parameter.

CVE-2015-7569(发布:2017-04-24 14:59:00)NM
CVSSN/A

[原文]SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary SQL commands via the "pagedir_orderby" parameter.

CVE-2015-7570(发布:2017-04-24 14:59:00)NM
CVSSN/A

[原文]Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports via the dbhost parameter to libs/org/adodb_lite/tests/test_adodb_lite.php, libs/org/adodb_lite/tests/test_datadictionary.php, or libs/org/adodb_lite/tests/test_adodb_lite_sessions.php.

CVE-2015-7572(发布:2017-04-24 14:59:00)NM
CVSSN/A

[原文]** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-0237. Reason: This candidate is a duplicate of CVE-2013-0237. Notes: All CVE users should reference CVE-2013-0237 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

首页上一页56789101112下一页尾页 第7页 / 共15148页

关于SCAP中文社区

SCAP中文社区是国内第一个以SCAP为主题的中文开放社区。了解更多信息,请查阅[关于本站]

版权声明

CVE/CWE/OVAL均为MITRE公司的注册商标,它们的官方数据源均保存在MITRE公司的相关网站