CVE-database
126.876 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0545 HIGH · 10.0 EMC Unisphere for VMAX 8.x before 8.0.3.4 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote attackers to execute arbitrary code via… Emc
- CVE-2015-0196 MEDIUM · 5.0 CRLF-injectiekwetsbaarheid in IBM WebSphere Commerce 6.0 tot en met 6.0.0.11 en 7.0 vóór 7.0.0.8 Cumulatieve iFix 2 stelt externe aanvallers in staat om willekeurige HTTP-headers… Ibm
- CVE-2015-0131 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and… Ibm
- CVE-2015-0127 LOW · 3.5 IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not… Ibm
- CVE-2015-0126 MEDIUM · 6.5 IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 allows remote… Ibm
- CVE-2015-0118 MEDIUM · 4.3 IBM WebSphere Message Broker Toolkit 7 before 7007 IF2 and 8 before 8005 IF1 and Integration Toolkit 9 before 9003 IF1 are distributed with MQ… Ibm
- CVE-2015-0116 LOW · 3.5 IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not… Ibm
- CVE-2015-0115 MEDIUM · 6.0 Cross-site request forgery (CSRF) -kwetsbaarheid in IBM Leads 7.x, 8.1.0 vóór 8.1.0.14, 8.2, 8.5.0 vóór 8.5.0.7.3, 8.6.0 vóór 8.6.0.8.1, 9.0.0 tot en met 9.0.0.4, 9.1.0… Ibm
- CVE-2014-4768 LOW · 2.1 IBM Unified Extensible Firmware Interface (UEFI) op Flex System x880 X6-, System x3850 X6- en System x3950 X6-apparaten stelt op afstand geverifieerde gebruikers in staat… Ibm
- CVE-2015-2965 MEDIUM · 4.0 Directory traversal vulnerability in osCommerce Japanese 2.2ms1j-R8 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors. Oscommerce
- CVE-2015-1485 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to… Symantec
- CVE-2015-0550 HIGH · 8.5 Directory traversal vulnerability in EMC Documentum Thumbnail Server 6.7SP1 before P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P01 allows… Emc
- CVE-2015-0549 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in EMC Documentum D2 vóór 4.5 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via… Emc
- CVE-2014-9230 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the administration console in the Enforce Server in Symantec Data Loss Prevention (DLP) before 12.5.2 allows remote attackers to inject… Symantec
- CVE-2015-2019 LOW · 2.1 IBM Tivoli Security Directory Server 6.0 vóór iFix 75, 6.1 vóór iFix 68, 6.2 vóór iFix 44, 6.3 vóór iFix 37, 6.3.1 vóór iFix 11… Ibm
- CVE-2015-1978 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in IBM Tivoli Security Directory Server 6.0 vóór iFix 75, 6.1 vóór iFix 68, 6.2 vóór iFix 44, 6.3 vóór iFix… Ibm
- CVE-2015-1974 MEDIUM · 6.5 The web administration tool in IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix… Ibm
- CVE-2015-1972 MEDIUM · 4.3 IBM Tivoli Security Directory Server 6.0 before iFix 75, 6.1 before iFix 68, 6.2 before iFix 44, 6.3 before iFix 37, 6.3.1 before iFix 11,… Ibm
- CVE-2015-1959 MEDIUM · 4.6 IBM Tivoli Security Directory Server 6.0 vóór iFix 75, 6.1 vóór iFix 68, 6.2 vóór iFix 44, 6.3 vóór iFix 37, 6.3.1 vóór iFix 11… Ibm
- CVE-2015-5078 MEDIUM · 6.5 SQL injection vulnerability in the insert function in application/controllers/admin/dataentry.php in LimeSurvey 2.06+ allows remote authenticated users to execute arbitrary SQL commands via the closedate parameter. Limesurvey
- CVE-2015-1981 LOW · 2.1 Cross-site scripting (XSS) vulnerability in the web server in IBM Domino 8.5.x before 8.5.3 FP6 IF8 and 9.x before 9.0.1 FP4, when Webmail is enabled,… Ibm
- CVE-2015-1901 LOW · 1.9 Het installatieprogramma in IBM InfoSphere Information Server 8.5 tot en met 11.3 vóór 11.3.1.2 stelt lokale gebruikers in staat om gevoelige informatie te verkrijgen via… Ibm
- CVE-2015-1884 MEDIUM · 4.0 Directory traversal kwetsbaarheid in IBM Business Process Manager (BPM) 7.5.x t/m 7.5.1.2, 8.0.x t/m 8.0.1.3, 8.5.0 t/m 8.5.0.1 en 8.5.5 t/m 8.5.5.0 en WebSphere Lombardi… Ibm
- CVE-2015-0173 MEDIUM · 4.3 The HTTP connection-management functionality in Internet Pass-Thru (IPT) before 2.1.0.2 in IBM WebSphere MQ, when HTTPS is disabled, does not properly generate MQIPT Session IDs,… Ibm
- CVE-2015-4174 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the integrated web server on the Siemens Climatix BACnet/IP communication module with firmware before 10.34 allows remote attackers to inject… Siemens
- CVE-2015-0989 MEDIUM · 4.3 PACTware 4.1 SP3 allows remote attackers to cause a denial of service (application crash) via a crafted file that triggers an internal error. Icsgmbh
- CVE-2014-6198 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in IBM Security Network Protection 5.3 before 5.3.1 allows remote attackers to hijack the authentication of arbitrary users. Ibm
- CVE-2015-4225 MEDIUM · 4.0 Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users… Cisco
- CVE-2015-4199 HIGH · 7.1 Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause… Cisco
- CVE-2015-1269 MEDIUM · 4.3 De DecodeHSTSPreloadRaw-functie in net/http/transport_security_state.cc in Google Chrome vóór 43.0.2357.130 canoniseert DNS-hostnamen niet goed voordat vergelijkingen worden gemaakt met HSTS- of HPKP-preload-items, waardoor externe aanvallers beoogde… Google
- CVE-2015-1268 MEDIUM · 5.0 bindings/scripts/v8_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a return value's DOM wrapper, which allows… Google
- CVE-2015-1267 MEDIUM · 5.0 Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, which allows remote attackers… Google
- CVE-2015-1266 MEDIUM · 5.0 content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows… Google
- CVE-2015-4224 HIGH · 7.2 Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged context via crafted CLI commands,… Cisco
- CVE-2015-4222 MEDIUM · 6.5 SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors,… Cisco
- CVE-2015-4221 MEDIUM · 4.0 Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows remote attackers to determine cleartext passwords,… Cisco
- CVE-2015-4217 MEDIUM · 4.3 The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses… Cisco
- CVE-2015-4216 MEDIUM · 5.0 The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses… Cisco
- CVE-2015-1159 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de cgi_puts-functie in cgi-bin/template.c in de template-engine in CUPS vóór 2.0.3 stelt externe aanvallers in staat om willekeurig webscript of… Cups
- CVE-2015-1158 HIGH · 10.0 The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-host-name attributes, which allows remote attackers to trigger… Cups
- CVE-2015-4223 MEDIUM · 5.0 Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via crafted MPLS Label Distribution Protocol (LDP) packets, aka Bug… Cisco
- CVE-2015-4220 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Cisco Unified Presence Server 9.1(1) stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via een niet-gespecificeerde… Cisco
- CVE-2015-1851 MEDIUM · 6.8 OpenStack Cinder before 2014.1.5 (icehouse), 2014.2.x before 2014.2.4 (juno), and 2015.1.x before 2015.1.1 (kilo) allows remote authenticated users to read arbitrary files via a crafted… Canonical Openstack
- CVE-2013-7398 MEDIUM · 4.3 main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (ook bekend als AHC of async-http-client) vóór 1.9.0 vereist geen hostnaammatch tijdens de verificatie van X.509-certificaten, waardoor man-in-the-middle-aanvallers HTTPS-servers kunnen… Async-http-client Project Redhat
- CVE-2013-7397 MEDIUM · 4.3 Async Http Client (ook bekend als AHC of async-http-client) vóór 1.9.0 slaat X.509-certificaatverificatie over, tenzij zowel een keyStore-locatie als een trustStore-locatie expliciet zijn ingesteld, waardoor… Redhat Async-http-client Project
- CVE-2015-5068 HIGH · 7.5 XML external entity (XXE) vulnerability in SAP Mobile Platform 3 allows remote attackers to read arbitrary files or possibly have other unspecified impact via a… Sap
- CVE-2015-5067 HIGH · 7.5 De (1) Cross-System Tools en (2) Data Transfer Workbench in SAP NetWeaver hebben hardgecodeerde referenties, waarmee externe aanvallers toegang kunnen krijgen via niet-gespecificeerde vectoren, ook… Sap
- CVE-2015-5066 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) content or… Metalgenix
- CVE-2015-5065 MEDIUM · 5.0 Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugin before 1.4 for WordPress allows… Intelligent-it
- CVE-2015-5064 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in MySql Lite Administrator (mysql-lite-administrator) beta-1 allow remote attackers to inject arbitrary web script or HTML via the table_name parameter… Mysql-lite-administrator Project