Archive
29 April 2014
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Unscored —CVE-2013-1804 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion before 7.02.06 allow remote attackers to inject arbit…
-
High —
ClassLoader manipulation in Apache Struts
CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted reque…
-
Unscored —
Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS…
-
High —
ClassLoader manipulation in Apache Struts
ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code via a crafted request. NOTE: this vulnerability exists beca…
-
Unscored —
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attack…
-
Unscored —
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attack…
-
Unscored —
Directory traversal vulnerability in the web interface in Titan FTP Server before 10.40 build 1829 allows remote attack…