CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-1399 MEDIUM · 6.5 PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows… Magento
- CVE-2015-1398 MEDIUM · 6.5 Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote authenticated users to include and execute certain PHP… Magento
- CVE-2015-1397 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in de getCsvFile-functie in de klasse Mage_Adminhtml_Block_Widget_Grid in Magento Community Edition (CE) 1.9.1.0 en Enterprise Edition (EE) 1.14.1.0 stelt externe beheerders in staat om… Magento
- CVE-2015-3448 LOW · 2.1 REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information by reading the log. Rest-client Project
- CVE-2015-3447 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers to inject arbitrary web script or HTML via… Sonicwall
- CVE-2015-3026 MEDIUM · 5.0 Icecast vóór 2.4.2, wanneer een stream_auth-handler is gedefinieerd voor URL-authenticatie, stelt externe aanvallers in staat om een denial of service (NULL pointer dereference en crash)… Xiph Debian Opensuse
- CVE-2015-1322 MEDIUM · 4.6 Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before 0.9.8.8-0ubuntu28.1, and Ubuntu 14.04 LTS before 0.9.8.8-0ubuntu7.1 allows local… Canonical Ubuntu
- CVE-2015-1321 MEDIUM · 6.8 Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary… Canonical Oxide Project
- CVE-2015-0711 MEDIUM · 5.0 The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to cause a denial… Cisco
- CVE-2015-0710 MEDIUM · 6.1 The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device reload) via a series… Cisco
- CVE-2015-0709 MEDIUM · 6.8 Cisco IOS 15.5S en IOS XE stellen op afstand geverifieerde gebruikers in staat om een denial of service (apparaatcrash) te veroorzaken door gebruik te maken… Cisco
- CVE-2015-0708 MEDIUM · 6.1 Met Cisco IOS 15.4S, 15.4SN en 15.5S en IOS XE 3.13S en 3.14S kunnen externe aanvallers een denial of service (apparaatcrash) veroorzaken door een IA_NA-optie… Cisco
- CVE-2015-1151 MEDIUM · 5.0 Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecting from an… Apple
- CVE-2015-1150 MEDIUM · 5.0 The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to bypass network-access restrictions… Apple
- CVE-2015-3340 LOW · 2.9 Xen 4.2.x tot en met 4.5.x initialiseert bepaalde velden niet, waardoor bepaalde externe servicedomeinen gevoelige informatie uit het geheugen kunnen verkrijgen via een (1) XEN_DOMCTL_gettscinfo… Xen Suse Fedoraproject Debian
- CVE-2015-1863 MEDIUM · 5.8 Heap-based buffer overflow in wpa_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or possibly execute arbitrary code… Canonical W1.fi Redhat Debian
- CVE-2015-1774 MEDIUM · 6.8 The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service… Canonical Debian Apache Fedoraproject
- CVE-2015-2115 LOW · 2.7 Niet-gespecificeerde kwetsbaarheid in HP Capture and Route Software (HPCR) 1.3 vóór patch 7, 1.3 FP1 vóór patch 1 en 1.4 vóór patch 1 stelt op… Hp
- CVE-2015-2117 HIGH · 7.5 HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS) before 4.1 patch 3 and 4.2 before patch 1 do not require… Hp
- CVE-2015-2116 HIGH · 9.0 Unspecified vulnerability in HP Storage Data Protector 7.x before 7.03 build 107 allows remote authenticated users to execute arbitrary code or cause a denial of… Hp
- CVE-2015-1885 HIGH · 9.3 WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when… Ibm
- CVE-2015-1882 HIGH · 8.5 Multiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gain privileges by leveraging thread conflicts… Ibm
- CVE-2015-0175 MEDIUM · 5.5 IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 does not properly implement authData elements, which allows remote authenticated users to gain privileges via… Ibm
- CVE-2015-0174 MEDIUM · 4.0 The SNMP implementation in IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.5 does not properly handle configuration data, which allows remote authenticated users to obtain… Ibm
- CVE-2015-2706 MEDIUM · 6.8 Raceconditie in de AsyncPaintWaitEvent:: AsyncPaintWaitEvent-functie in Mozilla Firefox vóór 37.0.2 stelt externe aanvallers in staat om willekeurige code uit te voeren of een denial of… Mozilla
- CVE-2015-1908 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and… Ibm
- CVE-2015-1886 HIGH · 7.8 Met de Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 tot en met 6.1.0.6 CF27, 6.1.5 tot en met 6.1.5.3 CF27, 7.0.0 tot… Ibm
- CVE-2015-0176 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in MQ XR WebSockets Listener in WMQ Telemetry in IBM WebSphere MQ 8.0 before 8.0.0.2 allows remote attackers to inject arbitrary… Ibm
- CVE-2015-0113 MEDIUM · 5.0 The Jazz help system in IBM Rational Collaborative Lifecycle Management 4.0 through 5.0.2, Rational Quality Manager 4.0 through 4.0.7 and 5.0 through 5.0.2, Rational Team… Ibm
- CVE-2014-6092 MEDIUM · 5.0 IBM Curam Social Program Management (SPM) 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.6 requires failed-login handling for… Ibm
- CVE-2014-6090 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) DataMappingEditorCommands, (2) DatastoreEditorCommands, and (3) IEGEditorCommands servlets in IBM Curam Social Program Management (SPM) 5.2 SP6… Ibm
- CVE-2015-3417 MEDIUM · 6.8 Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified… Ffmpeg Debian
- CVE-2015-3416 HIGH · 7.5 De sqlite3VXPrintf-functie in printf.c in SQLite vóór 3.8.9 verwerkt de precisie- en breedtewaarden niet goed tijdens floating-point conversies, waardoor contextafhankelijke aanvallers een denial of service… Canonical Sqlite Debian Apple
- CVE-2015-3415 HIGH · 7.5 The sqlite3VdbeExec function in vdbe.c in SQLite before 3.8.9 does not properly implement comparison operators, which allows context-dependent attackers to cause a denial of service… Apple Debian Canonical Sqlite
- CVE-2015-3414 HIGH · 7.5 SQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which allows context-dependent attackers to cause a denial of service (uninitialized memory access… Sqlite Apple Debian Canonical
- CVE-2015-3310 MEDIUM · 4.3 Een bufferoverloop in de rc_mksid-functie in plugins/radius/util.c in Paul's PPP Package (ppp) 2.4.6 en eerder, wanneer de PID voor pppd groter is dan 65535, stelt… Canonical Debian Point-to-point Protocol Project
- CVE-2015-3148 MEDIUM · 5.0 cURL and libcurl 7.10.6 through 7.41.0 do not properly re-use authenticated Negotiate connections, which allows remote attackers to connect as other users via a request. Fedoraproject Canonical Debian Apple
- CVE-2015-3145 HIGH · 7.5 The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of… Fedoraproject Canonical Debian Haxx
- CVE-2015-3144 HIGH · 9.0 The fix_hostname function in cURL and libcurl 7.37.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of… Oracle Haxx Canonical Debian
- CVE-2015-3143 MEDIUM · 5.0 cURL en libcurl 7.10.6 tot en met 7.41.0 hergebruiken NTLM-verbindingen niet correct, waardoor externe aanvallers verbinding kunnen maken als andere gebruikers via een niet-geverifieerd verzoek,… Haxx Canonical Debian Hp
- CVE-2015-0846 MEDIUM · 5.0 django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors. Django-markupfield Project
- CVE-2015-0297 HIGH · 9.0 Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the… Redhat
- CVE-2012-5451 MEDIUM · 5.0 Multiple stack-based buffer overflows in HttpUtils.dll in TVMOBiLi before 2.1.0.3974 allow remote attackers to cause a denial of service (tvMobiliService service crash) via a long… Tvmobili
- CVE-2012-2932 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to inject arbitrary web script or HTML via the selitems[] parameter in… Tinywebgallery
- CVE-2012-2930 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in TinyWebGallery (TWG) before 1.8.8 allow remote attackers to hijack the authentication of administrators for requests that (1) add… Tinywebgallery
- CVE-2011-4403 MEDIUM · 5.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Zen Cart 1.3.9h stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken die… Zen-cart
- CVE-2015-0911 MEDIUM · 5.0 Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling. Dounokouno
- CVE-2015-0910 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to inject arbitrary web script or HTML via a crafted filename. Dounokouno
- CVE-2015-0707 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in Cisco FireSIGHT-systeemsoftware 5.3.1.1 en 6.0.0 in FireSIGHT Management Center stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of… Cisco
- CVE-2015-0706 MEDIUM · 5.8 Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web… Cisco