Lucene search
+L

31 matches found

NVD
NVD
added 2017/01/16 6:59 a.m.26 views

CVE-2016-7904

Cross-site request forgery CSRF vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request...

8CVSS8.2AI score0.01008EPSS
SaveExploits0References3
CVE
CVE
added 2017/01/16 6:00 a.m.55 views

CVE-2016-7904

CMS Made Simple CVE-2016-7904 is a CSRF in admin/adduser.php that lets an attacker hijack admin authentication to create accounts on versions before 2.1.6. Impact includes unauthorized admin account creation; remediation is to upgrade to 2.1.6 or newer.

8CVSS8.1AI score0.01008EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2017/01/16 6:00 a.m.32 views

CVE-2016-7904

Cross-site request forgery CSRF vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request...

8.2AI score0.01008EPSS
SaveExploits0References3
CVE
CVE
added 2015/10/28 10:00 a.m.63 views

CVE-2015-7904

CVE-2015-7904 affects Mango Automation by Infinite Automation Systems. An authenticated remote user can trigger arbitrary JSP code execution due to improper verification of uploaded image files, allowing unrestricted file upload in Mango Automation 2.5.x and 2.6.x prior to 2.6.0 build 430. Public...

6.5CVSS7.3AI score0.02783EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2015/10/28 10:00 a.m.36 views

CVE-2015-7904

Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file...

7.1AI score0.02783EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2014/12/13 12:00 a.m.32 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2014:1626-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS8.3AI score0.0826EPSS
SaveExploits14References1
Mageia
Mageia
added 2014/11/25 9:21 a.m.51 views

Updated chromium-browser-stable fixes multiple security vulnerabilities

Updated chromium-browser-stable packages fix security vulnerabilities: Buffer overflow in Skia, as used in Google Chrome before 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors CVE-2014-7904. Use-after-free...

7.5CVSS7.3AI score0.07653EPSS
SaveExploits14References4
Tenable Nessus
Tenable Nessus
added 2014/11/25 12:00 a.m.37 views

RHEL 6 : chromium-browser (RHSA-2014:1894)

Updated chromium-browser packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

7.5CVSS8.3AI score0.07653EPSS
SaveExploits14References16
Debian CVE
Debian CVE
added 2014/11/19 11:00 a.m.54 views

CVE-2014-7904

Removed by vendor...

7.5CVSS8.8AI score0.01632EPSS
SaveExploits0
CVE
CVE
added 2014/11/19 11:00 a.m.87 views

CVE-2014-7904

CVE-2014-7904 affects Chromium-derived components (Skia) used in Google Chrome prior to 39.0.2171.65. The issue is a buffer overflow in Skia that can allow a remote attacker to cause a denial of service or potentially other impact via unknown vectors; the description does not specify exploit deta...

7.5CVSS7.3AI score0.01632EPSS
SaveExploits0References8Affected Software1
Microsoft Security Update
Microsoft Security Update
added 1976/01/01 12:00 a.m.1 views

MS:3A29ACC9-7904-4349-996F-B64C5CA342C2

...

7AI score
SaveExploits0
Rows per page
Query Builder