CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-2219 HIGH · 7.2 Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token… Lenovo
- CVE-2015-2170 MEDIUM · 5.0 The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file. Canonical Clamav
- CVE-2015-1880 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject arbitrary web script or HTML… Fortinet
- CVE-2015-1860 MEDIUM · 6.8 Multiple buffer overflows in gui/image/qgifhandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of… Fedoraproject Digia Qt
- CVE-2015-1859 MEDIUM · 6.8 Multiple buffer overflows in plugins/imageformats/ico/qicohandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of… Fedoraproject Digia Qt
- CVE-2015-1858 MEDIUM · 6.8 Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers to cause a denial of… Digia Qt Fedoraproject
- CVE-2014-9326 MEDIUM · 4.3 The automatic signature update functionality in the (1) Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 through… F5
- CVE-2014-8619 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the autolearn configuration page in Fortinet FortiWeb 5.1.2 through 5.3.4 allows remote attackers to inject arbitrary web script or HTML… Fortinet
- CVE-2014-8618 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the theme login page in Fortinet FortiADC D models before 4.2 allows remote attackers to inject arbitrary web script or… Fortinet
- CVE-2014-8616 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Fortinet FortiOS 5.2.x vóór 5.2.3 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Fortinet
- CVE-2015-3294 MEDIUM · 6.4 De tcp_request-functie in Dnsmasq vóór 2.73 rc4 verwerkt de retourwaarde van de setup_reply-functie niet correct, waardoor externe aanvallers het procesgeheugen kunnen lezen en een denial… Thekelleys Oracle
- CVE-2015-3013 MEDIUM · 6.0 ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via… Owncloud
- CVE-2015-3012 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in WebODF vóór 0.5.5, zoals gebruikt in ownCloud, stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Debian Kogmbh Owncloud
- CVE-2015-3011 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote… Owncloud Debian
- CVE-2015-2347 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Huawei SEQ Analyst vóór V200R002C03LG0001CP0022 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via het opdracht… Huawei
- CVE-2014-9716 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in WebODF before 0.5.4 allows remote attackers to inject arbitrary web script or HTML via a file name. Kogmbh
- CVE-2015-1907 MEDIUM · 4.0 The Administration and Reporting Tool in IBM Rational License Key Server (RLKS) 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors. Ibm
- CVE-2014-0919 MEDIUM · 4.0 IBM DB2 9.5 through 10.5 on Linux, UNIX, and Windows stores passwords during the processing of certain SQL statements by the monitoring and audit facilities,… Ibm
- CVE-2015-1156 MEDIUM · 4.3 The page-loading implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, does not properly handle the rel… Apple
- CVE-2015-1155 MEDIUM · 4.3 The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to bypass the… Apple
- CVE-2015-1154 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple Safari vóór 6.2.6, 7.x vóór 7.1.6 en 8.x vóór 8.0.6, stelt externe aanvallers in staat om willekeurige code uit te… Apple
- CVE-2015-1153 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple Safari vóór 6.2.6, 7.x vóór 7.1.6 en 8.x vóór 8.0.6, stelt externe aanvallers in staat om willekeurige code uit te… Apple
- CVE-2015-1152 MEDIUM · 6.8 WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers to execute arbitrary code or cause a… Apple
- CVE-2015-3610 MEDIUM · 5.4 The Siemens HomeControl for Room Automation application before 2.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Siemens
- CVE-2015-0716 MEDIUM · 6.8 Cross-site request forgery (CSRF) kwetsbaarheid in de CUCReports pagina in Cisco Unity Connection 11.0(0.98000.225) en 11.0(0.98000.332) stelt externe aanvallers in staat om de authenticatie van… Cisco
- CVE-2015-0715 MEDIUM · 6.5 SQL injection vulnerability in the administrative web interface in Cisco Unified Communications Manager 11.0(0.98000.225) allows remote authenticated users to execute arbitrary SQL commands via unspecified… Cisco
- CVE-2015-0701 HIGH · 10.0 Cisco UCS Central Software before 1.3(1a) allows remote attackers to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCut46961. Cisco
- CVE-2015-0538 HIGH · 9.3 ftagent.exe in EMC AutoStart 5.4.x and 5.5.x before 5.5.0.508 HF4 allows remote attackers to execute arbitrary commands via crafted packets. Emc
- CVE-2015-0531 MEDIUM · 5.0 EMC SourceOne Email Management before 7.2 does not have a lockout mechanism for invalid login attempts, which makes it easier for remote attackers to obtain… Emc
- CVE-2015-0714 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse Server 10.0(1), 10.5(1), 10.6(1), and 11.0(1) allow remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2015-3633 MEDIUM · 5.0 Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memory corruption and crash) via vectors related to… Foxitsoftware
- CVE-2015-3632 MEDIUM · 4.3 Foxit Reader, Enterprise Reader en PhantomPDF vóór 7.1.5 stellen externe aanvallers in staat om een denial of service (geheugenbeschadiging en crash) te veroorzaken via een… Foxitsoftware
- CVE-2015-3446 HIGH · 9.3 Met de Framework Daemon in AlienVault Unified Security Management vóór 4.15 kunnen externe aanvallers willekeurige Python-code uitvoeren via een vervaardigd plug-inconfiguratiebestand (.cfg). Alienvault
- CVE-2015-3435 HIGH · 10.0 Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2) MOVE… Samsung
- CVE-2015-3337 MEDIUM · 4.3 Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via… Elasticsearch
- CVE-2015-3153 MEDIUM · 5.0 The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy… Oracle Haxx Canonical Apple
- CVE-2015-2248 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv… Sonicwall
- CVE-2015-0257 LOW · 2.1 Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared by the ovirt-engine-dwhd service and a plugin during service startup,… Redhat
- CVE-2015-0237 MEDIUM · 6.8 Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation during live storage migration between domains, which allows remote authenticated… Redhat
- CVE-2014-3598 MEDIUM · 5.0 De Jpeg2KImagePlugin-plug-in in Pillow voor 2.5.3 stelt externe aanvallers in staat om een denial of service te veroorzaken via een bewerkte afbeelding. Opensuse Python
- CVE-2015-1250 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Canonical Google Redhat Debian
- CVE-2015-1243 HIGH · 7.5 Use-after-free kwetsbaarheid in de MutationObserver:: disconnect-functie in core/dom/MutationObserver.cpp in de DOM-implementatie in Blink, zoals gebruikt in Google Chrome vóór 42.0.2311.135, stelt externe aanvallers in staat… Google Debian Canonical Redhat
- CVE-2015-0914 MEDIUM · 5.0 EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request. Kozos
- CVE-2015-0913 LOW · 3.5 Cross-site scripting (XSS) vulnerability in EasyCTF before 1.4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Kozos
- CVE-2015-0912 MEDIUM · 6.5 Met EasyCTF voor 1.4 kunnen op afstand geverifieerde gebruikers uitvoerbare inhoud naar bestanden schrijven via niet-gespecificeerde vectoren. Kozos
- CVE-2015-0712 MEDIUM · 5.0 De sessiebeheerdienst in Cisco StarOS 12.0, 12.2(300), 14.0 en 14.0(600) op ASR 5000-apparaten stelt externe aanvallers in staat om een denial of service (service reload… Cisco
- CVE-2015-0532 HIGH · 7.5 EMC RSA Identity Management and Governance (IMG) 6.9 vóór P04 en 6.9.1 vóór P01 beperkt wachtwoordresets niet correct, waardoor externe aanvallers toegang kunnen krijgen via… Emc
- CVE-2015-3459 HIGH · 10.0 The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to… Hospira
- CVE-2015-3458 MEDIUM · 6.5 The fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 does not restrict the stream wrapper used… Magento
- CVE-2015-3457 MEDIUM · 5.0 Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forwarded parameter. Magento