CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-2810 HIGH · 7.5 Integer overflow in the HwpApp::CHncSDS_Manager function in Hancom Office HanWord processor, as used in Hwp 2014 VP before 9.1.0.2342, HanWord Viewer 2007 and Viewer 2010… Hancom
- CVE-2015-3989 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages… Concrete5
- CVE-2015-3325 HIGH · 7.5 SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the show… Wpsymposium
- CVE-2015-2250 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via the (1) banned_word[] parameter to… Concrete5
- CVE-2015-0734 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden op de Cisco Email Security Appliance (ESA) 8.5.6-106 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Cisco
- CVE-2015-0728 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Cisco Access Control Server (ACS) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL,… Cisco
- CVE-2015-0727 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the HTTP module in Cisco Security Manager (CSM) 4.7(0)SP1(1) allows remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2015-0724 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in dncs 7.0.0.12 in Cisco Headend Digital Broadband Delivery System stellen externe aanvallers in staat om willekeurig webscript of HTML… Cisco
- CVE-2015-0634 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de administratieve interface in Cisco WebEx Meetings Server 2.5 en 2.5.0.997 stelt externe aanvallers in staat om willekeurig webscript of… Cisco
- CVE-2015-3987 HIGH · 7.2 Meerdere niet-geciteerde Windows-zoekpadkwetsbaarheden in de (1) Client Management en (2) Gateway in McAfee ePO Deep Command 2.1 en 2.2 vóór HF 1058831 stellen lokale gebruikers… Mcafee
- CVE-2015-3986 MEDIUM · 4.3 Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers… Thecartpress
- CVE-2015-3983 MEDIUM · 4.3 The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote… Fedora
- CVE-2015-3427 HIGH · 7.5 Quassel voor 0.12.2 herinitialiseert de databasesessie niet goed wanneer de PostgreSQL-database opnieuw wordt opgestart, waardoor externe aanvallers SQL-injectieaanvallen kunnen uitvoeren via een (backslash) in een… Quassel-irc Debian
- CVE-2015-3301 MEDIUM · 4.0 Directory traversal vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote administrators to read… Thecartpress
- CVE-2015-3300 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allow remote attackers… Thecartpress
- CVE-2015-1848 MEDIUM · 6.8 De PCS-daemon (PCS-daemon) in PCS 0.9.137 en eerder stelt niet de beveiligde vlag in voor een cookie in een https-sessie, wat het voor externe aanvallers… Fedora Redhat
- CVE-2015-0971 MEDIUM · 5.0 The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates. Debian Openinfosecfoundation
- CVE-2014-8162 HIGH · 7.5 XML external entity (XXE) in the RPC interface in Spacewalk and Red Hat Network (RHN) Satellite 5.7 and earlier allows remote attackers to read arbitrary… Redhat Suse
- CVE-2012-5849 HIGH · 7.5 Multiple SQL injection vulnerabilities in ClipBucket 2.6 Revision 738 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) uid parameter in… Clip-bucket
- CVE-2015-2720 MEDIUM · 4.4 The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe corresponds to the application directory, which might… Mozilla
- CVE-2015-2718 MEDIUM · 4.3 Met de module WebChannel.jsm in Mozilla Firefox vóór 38.0 kunnen externe aanvallers het Same Origin-beleid omzeilen en gevoelige webchannel-responsgegevens verkrijgen via een vervaardigde website met… Opensuse Mozilla
- CVE-2015-2717 MEDIUM · 6.8 Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow… Mozilla Opensuse
- CVE-2015-2716 HIGH · 7.5 Bufferoverloop in de XML-parser in Mozilla Firefox vóór 38.0, Firefox ESR 31.x vóór 31.7 en Thunderbird vóór 31.7 stelt externe aanvallers in staat om willekeurige… Mozilla Novell Opensuse Oracle
- CVE-2015-2715 MEDIUM · 6.8 Race condition in the nsThreadManager::RegisterCurrentThread function in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free… Mozilla Opensuse
- CVE-2015-2714 LOW · 2.1 Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information… Mozilla Google
- CVE-2015-2713 MEDIUM · 6.8 Use-after-free vulnerability in the SetBreaks function in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute… Novell Opensuse Mozilla
- CVE-2015-2712 HIGH · 7.5 The asm.js implementation in Mozilla Firefox before 38.0 does not properly determine heap lengths during identification of cases in which bounds checking may be safely… Mozilla Opensuse
- CVE-2015-2711 MEDIUM · 4.3 Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of context-menu navigation and middle-click navigation, which… Opensuse Mozilla
- CVE-2015-2710 MEDIUM · 6.8 Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to… Mozilla Novell Opensuse
- CVE-2015-2709 HIGH · 7.5 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application… Mozilla Novell Opensuse
- CVE-2015-2708 HIGH · 7.5 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to… Novell Opensuse Mozilla
- CVE-2015-0797 MEDIUM · 6.8 GStreamer vóór 1.4.5, zoals gebruikt in Mozilla Firefox vóór 38.0, Firefox ESR 31.x vóór 31.7 en Thunderbird vóór 31.7 op Linux, stelt externe aanvallers in… Gstreamer Mozilla Linux Suse
- CVE-2015-3644 MEDIUM · 5.8 Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote… Stunnel
- CVE-2015-3397 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays,… Yiiframework
- CVE-2015-3326 MEDIUM · 5.0 Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the… Trend Micro
- CVE-2014-1902 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03… Y-cam
- CVE-2014-1901 MEDIUM · 6.8 Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5;… Y-cam
- CVE-2014-1900 MEDIUM · 5.0 Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCBL03 and YCBLB3; Bullet HD 720 YCBLHD5;… Y-cam
- CVE-2015-3456 HIGH · 7.7 The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of… Qemu Redhat Xen
- CVE-2015-3093 HIGH · 10.0 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,… Adobe Linux Apple Microsoft
- CVE-2015-3092 MEDIUM · 5.0 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,… Adobe Apple Microsoft Linux
- CVE-2015-3091 MEDIUM · 5.0 Adobe Flash Player vóór 13.0.0.289 en 14.x tot en met 17.x vóór 17.0.0.188 op Windows en OS X en vóór 11.2.202.460 op Linux, Adobe AIR… Adobe Linux Apple Microsoft
- CVE-2015-3090 HIGH · 10.0 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,… Adobe Apple Microsoft Linux
- CVE-2015-3089 HIGH · 10.0 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,… Adobe Apple Microsoft Linux
- CVE-2015-3088 HIGH · 10.0 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux,… Adobe Linux Apple Microsoft
- CVE-2015-3087 HIGH · 10.0 Integer overflow in Adobe Flash Player vóór 13.0.0.289 en 14.x tot en met 17.x vóór 17.0.0.188 op Windows en OS X en vóór 11.2.202.460 op… Adobe Linux Apple Microsoft
- CVE-2015-3086 HIGH · 10.0 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,… Adobe Apple Microsoft Linux
- CVE-2015-3085 MEDIUM · 6.4 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,… Adobe Apple Microsoft Linux
- CVE-2015-3084 HIGH · 10.0 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,… Adobe Linux Apple Microsoft
- CVE-2015-3083 MEDIUM · 6.4 Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR before 17.0.0.172,… Adobe Linux Apple Microsoft