CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-4159 HIGH · 7.5 SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892. Sap
- CVE-2015-4158 MEDIUM · 5.0 SAP ABAP & Java Server stelt externe aanvallers in staat om een denial of service (beëindiging van de service) te veroorzaken via niet-gespecificeerde vectoren, ook… Sap
- CVE-2015-4157 MEDIUM · 5.0 SAP Content Server allows remote attackers to cause a denial of service (service termination) via unspecified vectors, aka SAP Security Note 2127995. Sap
- CVE-2015-4156 LOW · 3.6 GNU Parallel before 20150522 (Nepal), bij gebruik van (1) --cat of (2) --fifo met --sshlogin, stelt lokale gebruikers in staat om naar willekeurige bestanden te… Opensuse Gnu
- CVE-2015-4155 LOW · 3.6 GNU Parallel voor 20150422, bij gebruik van (1) --pipe, (2) --tmux, (3) --cat, (4) --fifo of (5) --compress, kunnen lokale gebruikers naar willekeurige bestanden schrijven… Gnu
- CVE-2015-4094 MEDIUM · 5.8 De Thycotic Password Manager Secret Server-applicatie via 2.3 voor iOS verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen… Thycotic
- CVE-2015-4050 MEDIUM · 4.3 FragmentListener in the HttpKernel component in Symfony 2.3.19 through 2.3.28, 2.4.9 through 2.4.10, 2.5.4 through 2.5.11, and 2.6.0 through 2.6.7, when ESI or SSI support… Sensiolabs
- CVE-2015-3982 MEDIUM · 5.0 The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user… Djangoproject
- CVE-2015-2944 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Apache Sling API vóór 2.2.2 en Apache Sling Servlets Post vóór 2.1.2 stellen externe aanvallers in staat om willekeurig… Apache
- CVE-2015-2282 HIGH · 7.5 Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server… Sap
- CVE-2015-2278 MEDIUM · 5.0 De LZH-decompressie-implementatie (CsObjectInt:: BuildHufTree-functie in vpa108csulzh.cpp) in SAP MaxDB 7.5 en 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC… Sap
- CVE-2015-1945 MEDIUM · 6.5 Unspecified vulnerability in the Reference Data Management component in IBM InfoSphere Master Data Management 10.1, 11.0, 11.3 before FP3, and 11.4 allows remote authenticated users… Ibm
- CVE-2015-0850 HIGH · 10.0 The Git plugin for FusionForge before 6.0rc4 allows remote attackers to execute arbitrary code via an unspecified parameter when creating a secondary Git repository. Fusionforge
- CVE-2015-0759 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users. Cisco
- CVE-2014-8391 MEDIUM · 4.0 The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions… Sendio
- CVE-2014-0999 MEDIUM · 5.0 Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by reading the… Sendio
- CVE-2015-3181 MEDIUM · 4.0 files/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 does not consider the moodle/user:manageownfiles capability before approving a private-file… Moodle
- CVE-2015-3180 MEDIUM · 4.0 lib/navigationlib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to obtain sensitive course-structure information by… Moodle
- CVE-2015-3179 LOW · 3.5 login/confirm.php in Moodle via 2.5.9, 2.6.x vóór 2.6.11, 2.7.x vóór 2.7.8 en 2.8.x vóór 2.8.6 stelt op afstand geverifieerde gebruikers in staat om de beoogde… Moodle
- CVE-2015-3178 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the external_format_text function in lib/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows… Moodle
- CVE-2015-3177 LOW · 3.5 Moodle 2.8.x before 2.8.6 does not consider the tool/monitor:subscribe capability before entering subscriptions to site-wide event-monitor rules, which allows remote authenticated users to obtain sensitive… Moodle
- CVE-2015-3176 MEDIUM · 4.3 Met de accountbevestigingsfunctie in login/confirm.php in Moodle via 2.5.9, 2.6.x vóór 2.6.11, 2.7.x vóór 2.7.8 en 2.8.x vóór 2.8.6 kunnen externe aanvallers gevoelige volledige naaminformatie… Moodle
- CVE-2015-3175 MEDIUM · 5.8 Multiple open redirect vulnerabilities in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allow remote attackers to redirect users to… Moodle
- CVE-2015-3174 LOW · 3.5 mod/quiz/db/access.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 does not set the RISK_XSS bit for graders, which allows… Moodle
- CVE-2015-2273 LOW · 3.5 Cross-site scripting (XSS) vulnerability in mod/quiz/report/statistics/statistics_question_table.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to… Moodle
- CVE-2015-2272 MEDIUM · 4.0 login/token.php in Moodle via 2.5.9, 2.6.x vóór 2.6.9, 2.7.x vóór 2.7.6 en 2.8.x vóór 2.8.4 stelt op afstand geverifieerde gebruikers in staat om een vereiste… Moodle
- CVE-2015-2271 MEDIUM · 4.0 tag/user.php in Moodle via 2.5.9, 2.6.x vóór 2.6.9, 2.7.x vóór 2.7.6 en 2.8.x vóór 2.8.4 beschouwt de moodle/tag: flag-mogelijkheid niet voordat een vlag ongepaste actie… Moodle
- CVE-2015-2270 MEDIUM · 4.3 lib/moodlelib.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4, when the theme uses the blocks-regions feature, establishes the course… Moodle
- CVE-2015-2269 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allow remote authenticated users… Moodle
- CVE-2015-2268 MEDIUM · 6.8 filter/urltolink/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to cause a denial of service… Moodle
- CVE-2015-2267 MEDIUM · 4.0 mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and… Moodle
- CVE-2015-2266 MEDIUM · 4.0 message/index.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/site:readallmessages capability before accessing arbitrary conversations,… Moodle
- CVE-2015-1493 MEDIUM · 6.8 Directory traversal vulnerability in the min_get_slash_argument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote… Moodle
- CVE-2015-0218 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in auth/shibboleth/logout.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote attackers to… Moodle
- CVE-2015-0217 MEDIUM · 6.8 filter/mediaplugin/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to cause a denial of service… Moodle
- CVE-2015-0216 LOW · 3.5 access.php in the Lesson module in Moodle 2.8.x before 2.8.2 does not set the RISK_XSS bit for graders, which allows remote authenticated users to conduct… Moodle
- CVE-2015-0215 MEDIUM · 4.0 calendar/externallib.php in Moodle via 2.5.9, 2.6.x vóór 2.6.7, 2.7.x vóór 2.7.4 en 2.8.x vóór 2.8.2 stelt op afstand geverifieerde gebruikers in staat om gevoelige informatie… Moodle
- CVE-2015-0214 MEDIUM · 4.0 message/externallib.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to bypass a messaging-disabled setting via… Moodle
- CVE-2015-0213 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in (1) editcategories.html and (2) editcategories.php in the Glossary module in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before… Moodle
- CVE-2015-0212 LOW · 3.5 Cross-site scripting (XSS) vulnerability in course/pending.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 allows remote authenticated users to… Moodle
- CVE-2015-0211 MEDIUM · 4.0 mod/lti/ajax.php in Moodle through 2.5.9, 2.6.x before 2.6.7, 2.7.x before 2.7.4, and 2.8.x before 2.8.2 does not consider the moodle/course:manageactivities and mod/lti:addinstance capabilities before proceeding… Moodle
- CVE-2015-3939 MEDIUM · 6.8 Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors… Ids
- CVE-2015-3292 HIGH · 10.0 The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) service, which allows remote… Netapp
- CVE-2015-2949 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ZenPhoto20 1.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Zenphoto
- CVE-2015-2948 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in de beeldprocessor van Zenphoto vóór versie 1.4.8 stelt externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via… Zenphoto
- CVE-2015-1010 MEDIUM · 4.9 Rockwell Automation RSView32 7.60.00 (ook bekend als CPR9 SR4) en eerder versleutelt inloggegevens niet goed, waardoor lokale gebruikers gevoelige informatie kunnen verkrijgen door een bestand… Rockwellautomation
- CVE-2015-4138 MEDIUM · 4.3 The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not include the HTTPOnly flag… Blue Coat
- CVE-2015-2855 MEDIUM · 4.3 The WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4 does not set the secure flag… Blue Coat
- CVE-2015-2854 MEDIUM · 4.3 De WebUI-component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800 en SV3800 3.6.x tot en met 3.8.x vóór 3.8.4 verzendt geen beperkende X-Frame-Options HTTP-header,… Blue Coat
- CVE-2015-2853 MEDIUM · 6.8 De kwetsbaarheid voor sessiefixatie in de WebUI-component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800 en SV3800 3.6.x tot 3.8.x vóór 3.8.4 stelt externe… Blue Coat