CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-2852 MEDIUM · 4.3 Cross-site request forgery (CSRF) vulnerability in the WebUI component in Blue Coat SSL Visibility Appliance SV800, SV1800, SV2800, and SV3800 3.6.x through 3.8.x before 3.8.4… Blue Coat
- CVE-2015-2851 MEDIUM · 6.8 client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files,… Synology Apple
- CVE-2015-1937 HIGH · 7.5 IBM PowerVC 1.2.0.x through 1.2.0.4, 1.2.1.x through 1.2.1.2, and 1.2.2.x through 1.2.2.2 does not require authentication for the ceilometer NoSQL database, which allows remote attackers… Ibm
- CVE-2015-0193 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, and 8.5.x through 8.5.5.0 and WebSphere Lombardi Edition (WLE)… Ibm
- CVE-2015-0121 LOW · 3.7 IBM Rational Requirements Composer 3.0 through 3.0.1.6 and 4.0 through 4.0.7 and Rational DOORS Next Generation (RDNG) 4.0 through 4.0.7 and 5.0 through 5.0.2, when… Ibm
- CVE-2015-0758 MEDIUM · 4.0 De webgebaseerde gebruikersinterface in Cisco Unified MeetingPlace 8.6(1.9) stelt externe aanvallers in staat om willekeurige bestanden te lezen via een XML-document met een externe entiteitverklaring… Cisco
- CVE-2015-0747 MEDIUM · 4.3 Cisco Conductor for Videoscape 3.0 and Cisco Headend System Release allow remote attackers to inject arbitrary cookies via a crafted HTTP request, aka Bug ID… Cisco
- CVE-2015-0745 MEDIUM · 5.0 Cisco Headend System Release allows remote attackers to read temporary script files or archive files, and consequently obtain sensitive information, via a crafted header in… Cisco
- CVE-2015-0744 HIGH · 7.8 Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend System Release allow remote attackers to cause a denial of service (CPU and memory consumption, and… Cisco
- CVE-2015-0743 MEDIUM · 5.0 Cisco Headend System Release allows remote attackers to cause a denial of service (DHCP and TFTP outage) via a flood of crafted UDP traffic, aka… Cisco
- CVE-2015-0733 MEDIUM · 4.3 CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP… Cisco
- CVE-2015-4069 HIGH · 7.8 The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOAP request to the… Arcserve
- CVE-2015-4067 HIGH · 10.0 Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted template string specifiers in… Dell
- CVE-2015-4060 HIGH · 10.0 Heap-based buffer overflow in the TermProxy (WLTermProxyService.exe) service in Wavelink ConnectPro allows remote attackers to execute arbitrary code via a large HTTP header. Wavelink
- CVE-2015-4059 HIGH · 10.0 Heap-based buffer overflow in the License Server (LicenseServer.exe) in Wavelink Terminal Emulation (TE) allows remote attackers to execute arbitrary code via a large HTTP header. Wavelink
- CVE-2015-4047 HIGH · 7.8 racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted… Ipsec-tools Canonical Fedoraproject F5
- CVE-2015-4032 HIGH · 10.0 projectContents.jsp in the Developer tools in Visual Mining NetCharts Server allows remote attackers to rename arbitrary files, and consequently execute them, via unspecified vectors. Visual Mining
- CVE-2015-4031 HIGH · 10.0 Directory traversal vulnerability in saveFile.jsp in the development installation in Visual Mining NetChart allows remote attackers to write to arbitrary files via unspecified vectors. Visualmining
- CVE-2015-3995 MEDIUM · 4.0 SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement, aka SAP Security Note 2109565. Sap
- CVE-2015-3994 MEDIUM · 4.0 Met de grant.xsfunc-applicatie in testApps/grantAccess/ in de XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) kunnen op afstand geverifieerde gebruikers logboekvermeldingen vervalsen via een vervaardigd… Sap
- CVE-2015-1833 MEDIUM · 6.4 XML externe entiteit (XXE) kwetsbaarheid in Apache Jackrabbit vóór 2.0.6, 2.2.x vóór 2.2.14, 2.4.x vóór 2.4.6, 2.6.x vóór 2.6.6, 2.8.x vóór 2.8.1 en 2.10.x vóór… Apache
- CVE-2015-0847 HIGH · 7.8 nbd-server.c in Network Block Device (nbd-server) before 3.11 does not properly handle signals, which allows remote attackers to cause a denial of service (deadlock) via… Canonical Wouter Verhelst
- CVE-2015-0757 MEDIUM · 5.0 The web framework in Cisco Identity Services Engine (ISE) 1.2(1.901) and 1.3(0.722) does not properly implement session handlers, which allows remote attackers to obtain sensitive… Cisco
- CVE-2015-0756 MEDIUM · 6.1 Cisco Wireless LAN Controller (WLC) devices with software 7.4(1.1) allow remote attackers to cause a denial of service (wireless-networking outage) via crafted TCP traffic on… Cisco
- CVE-2015-0755 MEDIUM · 6.8 The Posture module for Cisco Identity Services Engine (ISE), as distributed in Cisco AnyConnect Secure Mobility Client 4.0(64), allows local users to gain privileges via… Cisco
- CVE-2015-0754 HIGH · 7.5 Cisco Finesse 10.5(1) stelt op afstand geverifieerde gebruikers in staat om gevoelige informatie te verkrijgen of een denial of service (CPU- en geheugenverbruik) te veroorzaken… Cisco
- CVE-2015-0753 MEDIUM · 6.8 SQL injection vulnerability in Cisco Unified Email Interaction Manager (EIM) and Unified Web Interaction Manager (WIM) 9.0(2) allows remote attackers to execute arbitrary SQL commands… Cisco
- CVE-2015-0752 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Cisco TelePresence Video Communication Server (VCS) X8.5.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Cisco
- CVE-2015-0751 HIGH · 7.8 Cisco IP Phone 7861, when firmware from Cisco Unified Communications Manager 10.3(1) is used, allows remote attackers to cause a denial of service via crafted… Cisco
- CVE-2015-0200 LOW · 2.1 IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x before 7.0.0.8 IF2 allows local users to obtain sensitive database information via unspecified vectors. Ibm
- CVE-2014-9727 HIGH · 10.0 AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm. Avm
- CVE-2013-7441 HIGH · 7.8 The modern style negotiation in Network Block Device (nbd-server) 2.9.22 through 3.3 allows remote attackers to cause a denial of service (root process termination) by… Wouter Verhelst
- CVE-2015-4137 HIGH · 7.5 SQL injection vulnerability in related.php in Milw0rm Clone Script 1.0 allows remote attackers to execute arbitrary SQL commands via the program parameter. Milw0rm Project
- CVE-2015-3904 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in roomcloud.php in the Roomcloud plugin before 1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML… Roomcloud
- CVE-2015-4135 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter. Phpwind
- CVE-2015-4134 MEDIUM · 5.8 Open redirect-kwetsbaarheid in goto.php in phpwind 8.7 stelt externe aanvallers in staat om gebruikers om te leiden naar willekeurige websites en phishing-aanvallen uit te voeren… Phpwind
- CVE-2015-4133 HIGH · 7.5 Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows remote attackers to execute arbitrary PHP code by uploading… Reflex Gallery Project
- CVE-2015-4132 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in Aruba Networks ClearPass Policy Manager (CPPM) vóór 6.4.5 stellen externe beheerders in staat om willekeurig webscript of HTML te… Arubanetworks
- CVE-2015-4127 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address… Church Admin Project
- CVE-2015-4084 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de Free Counter plugin 1.1 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Free-counter
- CVE-2015-3165 MEDIUM · 4.3 Double free vulnerability in PostgreSQL before 9.0.20, 9.1.x before 9.1.16, 9.2.x before 9.2.11, 9.3.x before 9.3.7, and 9.4.x before 9.4.2 allows remote attackers to cause… Canonical Debian Apple Postgresql
- CVE-2015-1551 MEDIUM · 4.0 Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.4 allows remote administrators to read arbitrary files via unspecified vectors. Arubanetworks
- CVE-2015-1550 HIGH · 9.0 Directory traversal kwetsbaarheid in Aruba Networks ClearPass Policy Manager (CPPM) vóór 6.4.5 stelt externe beheerders in staat om willekeurige bestanden uit te voeren via niet-gespecificeerde… Arubanetworks
- CVE-2015-1392 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors. Arubanetworks
- CVE-2015-1389 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allows remote attackers to inject arbitrary web script or HTML via the… Arubanetworks
- CVE-2014-6628 HIGH · 9.0 Aruba Networks ClearPass Policy Manager (CPPM) before 6.5.0 allows remote administrators to execute arbitrary code via unspecified vectors. Arubanetworks
- CVE-2015-1157 HIGH · 7.8 CoreText in Apple iOS 8.x through 8.3 allows remote attackers to cause a denial of service (reboot and messaging disruption) via crafted Unicode text that… Apple
- CVE-2015-4066 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the… Tri
- CVE-2015-4065 LOW · 3.5 Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web script or… Landing Pages Project
- CVE-2015-4064 MEDIUM · 6.5 SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the… Landing Pages Project