CVE-2015-7364

CVE-2015-7364 affects Revive Adserver up to and including version 3.2.1, where the HTML_Quickform library allows bypassing CSRF protection by sending an empty token in POST data. This enables potential unauthorized actions such as modifying banners, zones, and settings. The entry is mitigated by ...

CVE-2015-7364

The HTMLQuickform library, as used in Revive Adserver before 3.2.2, allows remote attackers to bypass the CSRF protection mechanism via an empty token...

Revive Adserver 3.2.1 Multiple Vulnerabilities

Revive Adserver versions 3.2.1 and below suffer from improper access controls, cross site request forgery, cross site scripting, local file inclusion, and various other vulnerabilities. ========================================================================...

CVE-2014-7364

CVE-2014-7364 concerns the Android app “Promotional Items” (com.wPromotionalItems) version 0.1. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. ...

CVE-2013-7364

SAP NetWeaver’s J2EE Engine contains an unspecified J2EE core service that does not properly restrict access. This allows remote attackers to read and write to arbitrary files via unknown vectors. Affected component: J2EE Engine (SAP NetWeaver). Root cause: inadequate access restrictions in a cor...