CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0156 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in IBM Business Process Manager (BPM) 7.5.x tot en met 7.5.1.2, 8.0.x tot en met 8.0.1.3 en 8.5.x tot en met… Ibm
- CVE-2015-0140 MEDIUM · 6.8 An unspecified ActiveX control in IBM SPSS Statistics 22.0 through FP1 on 32-bit platforms allows remote attackers to execute arbitrary code via a crafted HTML… Ibm
- CVE-2015-0120 HIGH · 7.5 Bufferoverloop in het FastBackMount-proces in IBM Tivoli Storage Manager FastBack 6.1 vóór 6.1.11.1 heeft niet-gespecificeerde impact en externe aanvalsvectoren. Ibm
- CVE-2014-8927 MEDIUM · 5.0 Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset… Ibm
- CVE-2014-8926 MEDIUM · 5.0 Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Tivoli Asset… Ibm
- CVE-2014-6192 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5 iFix10, 6.0.5 before 6.0.5.6, and 6.0.5.5a before 6.0.5.8… Ibm
- CVE-2014-6190 MEDIUM · 5.0 Met de logboekviewer in IBM Workload Deployer 3.1 vóór 3.1.0.7 kunnen externe aanvallers gevoelige informatie verkrijgen via een directe aanvraag voor de URL van een… Ibm
- CVE-2014-4778 MEDIUM · 4.3 IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in… Ibm
- CVE-2014-4774 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid op de inlogpagina in IBM License Metric Tool 9 vóór 9.1.0.2 en Endpoint Manager for Software Use Analysis 9 vóór… Ibm
- CVE-2015-1921 MEDIUM · 6.4 Open omleidingskwetsbaarheid in IBM WebSphere Portal 8.0.0 vóór 8.0.0.1 CF17 en 8.5.0 vóór CF06 stelt externe aanvallers in staat om gebruikers om te leiden naar… Ibm
- CVE-2015-1915 MEDIUM · 4.3 De component Endpoint Manager for Remote Control in IBM Tivoli Endpoint Manager for Lifecycle Management 9.0.1 vóór IF6 en 9.1.0 vóór IF6 stelt niet de… Ibm
- CVE-2015-1911 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Sterling Order Management 8.5 vóór HF113, Sterling Selling and Fulfillment Foundation 9.0.0 vóór FP92 en Sterling Field Sales (SFS) 9.0… Ibm
- CVE-2015-1910 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before… Ibm
- CVE-2015-1909 MEDIUM · 5.0 The XML parser in the Reference Data Management component in the server in IBM InfoSphere Master Data Management (MDM) 10.1 before IF1, 11.0 before FP3,… Ibm
- CVE-2015-1899 HIGH · 7.8 IBM WebSphere Portal 8.5 tot en met CF05 stelt externe aanvallers in staat om een denial of service (CPU-verbruik) te veroorzaken via niet-gespecificeerde vectoren. Ibm
- CVE-2015-1896 HIGH · 10.0 Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows remote attackers to execute arbitrary code via unspecified… Ibm
- CVE-2015-1895 MEDIUM · 5.0 IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by… Ibm
- CVE-2015-1894 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for… Ibm
- CVE-2015-0722 HIGH · 7.8 The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service… Cisco
- CVE-2015-0713 HIGH · 9.0 The web framework in Cisco TelePresence Advanced Media Gateway Series Software before 1.1(1.40), Cisco TelePresence IP Gateway Series Software, Cisco TelePresence IP VCR Series Software… Cisco
- CVE-2014-2174 HIGH · 8.3 Cisco TelePresence T, TelePresence TE, and TelePresence TC before 7.1 do not properly implement access control, which allows remote attackers to obtain root privileges by… Cisco
- CVE-2015-0750 MEDIUM · 6.5 De administratieve webinterface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) en eerder stelt op afstand geverifieerde gebruikers in staat om willekeurige opdrachten uit te voeren… Cisco
- CVE-2015-0916 MEDIUM · 6.5 SQL injection vulnerability in graph.php in Cacti before 0.8.6f allows remote authenticated users to execute arbitrary SQL commands via the local_graph_id parameter, a different vulnerability… Cacti
- CVE-2015-0915 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted attachment filename. Rakus
- CVE-2015-0746 MEDIUM · 5.0 De REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) stelt externe aanvallers in staat om een denial of service (API-uitval) te veroorzaken door veel… Cisco
- CVE-2015-4018 MEDIUM · 6.5 SQL injection vulnerability in feedwordpresssyndicationpage.class.php in the FeedWordPress plugin before 2015.0514 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the link_ids[]… Feedwordpress Project
- CVE-2015-3647 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus (aka WPPA) plugin before 6.1.3 for WordPress allow remote attackers to inject… Wppa.opajaap
- CVE-2012-1978 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that… Simple Php Agenda Project
- CVE-2015-3912 MEDIUM · 5.0 Huawei E355s Mobile WiFi met firmware vóór 22.158.45.02.625 en WEBUI vóór 13.100.04.01.625 stelt externe aanvallers in staat om gevoelige configuratie-informatie te verkrijgen door het netwerk… Huawei
- CVE-2015-3911 HIGH · 9.0 Huawei E587 Mobile WiFi met firmware vóór 11.203.30.00.00 stelt externe aanvallers in staat om authenticatie te omzeilen, configuraties te wijzigen, berichten te verzenden en een… Huawei
- CVE-2015-0742 MEDIUM · 5.0 De Protocol Independent Multicast (Pim) -toepassing in Cisco Adaptive Security Appliance (ASA) -software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9) en 100.14… Cisco
- CVE-2015-0741 MEDIUM · 6.8 Meerdere CSRF-kwetsbaarheden (cross-site request forgery) in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) en eerdere versies stellen externe aanvallers in staat de authenticatie… Cisco
- CVE-2015-3036 HIGH · 10.0 Stack-gebaseerde bufferoverloop in de run_init_sbus-functie in de KCodes NetUSB-module voor de Linux-kernel, zoals gebruikt in bepaalde NETGEAR-PRODUCTEN, TP-Link-producten en andere producten, stelt externe aanvallers in… Kcodes
- CVE-2015-4000 LOW · 3.7 The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a… Openssl Canonical Hp Ibm
- CVE-2015-3141 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies Xeams 4.5 Build 5755 and earlier allow remote attackers to hijack the authentication of administrators for… Synametrics
- CVE-2012-4902 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Template CMS 2.1.1 en eerder stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor… Template Cms Project
- CVE-2012-4901 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themes_editor parameter in… Template Cms Project
- CVE-2015-4016 MEDIUM · 5.0 Het clientdetectieprotocol in Valve Steam stelt externe aanvallers in staat om een denial of service (procescrash) te veroorzaken via een vervaardigde reactie op een broadcast-pakket. Valvesoftware
- CVE-2015-3999 LOW · 2.1 Piriform CCleaner 3.26.0.1988 tot en met 5.02.5101 schrijft de bestandsnamen naar de schijf bij het overschrijven van bestanden, waardoor lokale gebruikers gevoelige informatie kunnen verkrijgen… Piriform
- CVE-2015-3990 HIGH · 9.0 The GMS ViewPoint (GMSVP) web application in Dell Sonicwall GMS, Analyzer, and UMA EM5000 before 7.2 SP4 allows remote authenticated users to execute arbitrary commands… Sonicwall
- CVE-2015-1188 HIGH · 7.5 The certificate verification functions in the HNDS service in Swisscom Centro Grande (ADB) DSL routers with firmware before 6.14.00 allows remote attackers to access the… Swisscom
- CVE-2012-6691 MEDIUM · 6.8 Meerdere CSRF-kwetsbaarheden (cross-site request forgery) in het beheerderspaneel van osCMax vóór versie 2.5.1 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen… Oscmax
- CVE-2012-3243 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the SEOgento plugin for Magento allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE:… Seogento
- CVE-2012-1665 HIGH · 7.5 Multiple SQL injection vulnerabilities in the admin panel in osCMax before 2.5.1 allow (1) remote attackers to execute arbitrary SQL commands via the username parameter… Oscmax
- CVE-2012-1664 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the admin panel in osCMax before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the… Oscmax
- CVE-2015-3910 HIGH · 7.5 Multiple unspecified vulnerabilities in Google V8 before 4.3.61.21, as used in Google Chrome before 43.0.2357.65, allow attackers to cause a denial of service or possibly… Google
- CVE-2015-1903 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in IBM Domino 8.5 vóór 8.5.3 FP6 IF7 en 9.0 vóór 9.0.1 FP3 IF3 stelt externe aanvallers in staat om willekeurige… Ibm
- CVE-2015-1902 HIGH · 10.0 Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via… Ibm
- CVE-2015-1265 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 43.0.2357.65 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Debian Google
- CVE-2015-1264 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Google Chrome before 43.0.2357.65 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted data that is… Google Debian