CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-3404 MEDIUM · 4.0 The Certify module before 6.x-2.3 for Drupal does not properly perform node access checks, which allows remote authenticated users to bypass intended access restrictions and… Certify Project
- CVE-2015-1889 MEDIUM · 6.5 The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via (1) a crafted… Ibm
- CVE-2015-1484 MEDIUM · 6.9 Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe… Symantec
- CVE-2015-0705 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack the… Cisco
- CVE-2015-0704 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users, aka… Cisco
- CVE-2015-3393 MEDIUM · 5.8 Open redirect vulnerability in the Commerce WeDeal module before 7.x-1.3 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing… Fibonacciorange
- CVE-2015-3392 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Ajax Timeline module before 7.x-1.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via… Ajax Timeline Project
- CVE-2015-3391 MEDIUM · 5.0 The Path Breadcrumbs module before 7.x-3.2 for Drupal allows remote attackers to bypass intended access restrictions and obtain sensitive node titles by reading a 403… Path Breadcrumbs Project
- CVE-2015-3390 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Facebook Album Fetcher module for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary… Facebook Album Fetcher Project
- CVE-2015-3389 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de Download counts rapportpagina in de Public Download Count module (pubdlcnt) 7.x-1.x-dev en eerder voor Drupal stelt op afstand geverifieerde… Public Download Count Project
- CVE-2015-3388 MEDIUM · 5.8 Cross-site request forgery (CSRF) vulnerability in the Commerce Balanced Payments module for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests… Balanced
- CVE-2015-3387 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy Tools module before 7.x-1.4 for Drupal allow remote authenticated users to inject arbitrary web script or HTML… Taxonomy Tools Project
- CVE-2015-3386 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Node Access Product module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a… Node Access Product Project
- CVE-2015-3385 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de Taxonomy Path-module vóór 7.x-1.2 voor Drupal stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te… Taxonomy Path Project
- CVE-2015-3384 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de vermeldingspagina van de bankrekening in de Commerce Balanced Payments-module voor Drupal stelt op afstand geverifieerde gebruikers in staat om… Commerce Balanced Payments Project
- CVE-2015-3383 MEDIUM · 5.8 Open redirect vulnerability in the Node basket module for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via… Insite
- CVE-2015-3382 MEDIUM · 5.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Node basket module for Drupal allow remote attackers to hijack the authentication of arbitrary users for requests… Insite
- CVE-2015-3381 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Node basket module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Insite
- CVE-2015-3380 MEDIUM · 5.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Feature Set module for Drupal allow remote attackers to hijack the authentication of administrators for requests that… Funnymonkey
- CVE-2015-3379 MEDIUM · 4.0 The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configurations, which… Views Project
- CVE-2015-3378 MEDIUM · 4.9 Open redirect vulnerability in the Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal, when the Views UI submodule is enabled,… Views Project
- CVE-2014-8125 HIGH · 7.5 XML externe entiteit (XXE) kwetsbaarheid in Drools en jBPM vóór 6.2.0 stelt externe aanvallers in staat om willekeurige bestanden te lezen of mogelijk andere niet-gespecificeerde… Redhat
- CVE-2014-8111 MEDIUM · 5.0 Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via… Apache
- CVE-2014-3586 LOW · 2.1 The default configuration for the Command Line Interface in Red Hat Enterprise Application Platform before 6.4.0 and WildFly (formerly JBoss Application Server) uses weak permissions… Redhat
- CVE-2015-3376 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Quizzler module before 7-x.1.16 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a… Quizzler Project
- CVE-2015-3375 MEDIUM · 5.8 Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows remote attackers to hijack the authentication… Niif
- CVE-2015-3374 MEDIUM · 5.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in de Corner-module voor Drupal stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken… Corner Project
- CVE-2015-3373 MEDIUM · 5.0 De Amazon AWS-module voor Drupal vóór versie 7.x-1.3 gebruikt de basis-URL en de AWS-toegangssleutel om het toegangstoken te genereren. Dit maakt het voor externe aanvallers… Amazon Aws Project
- CVE-2015-3372 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via… Node Invite Project
- CVE-2015-3371 MEDIUM · 5.8 Open redirect vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing… Node Invite Project
- CVE-2015-3370 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Node Invite module before 6.x-2.5 for Drupal allows remote attackers to hijack the authentication of users with the… Node Invite Project
- CVE-2015-3369 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Taxonews module before 6.x-1.2 and 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer taxonomy" permission… Taxonews Project
- CVE-2015-3368 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the administration user interface in the Classified Ads module before 6.x-3.1 and 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated… Osinet
- CVE-2015-3367 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in de Patternsmodule vóór 7.x-2.2 voor Drupal stellen externe aanvallers in staat om de authenticatie van beheerders te kapen… Patterns
- CVE-2015-3366 MEDIUM · 5.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de Alfresco-module vóór 6.x-1.3 voor Drupal stelt externe aanvallers in staat om de authenticatie van willekeurige gebruikers te kapen… Alfresco
- CVE-2015-3365 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the nodeauthor module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a Profile2 field… Nodeauthor Project
- CVE-2015-3364 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Content Analysis-module vóór 6.x-1.7 voor Drupal stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Levelteninteractive
- CVE-2015-3363 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Contact Form Fields module before 6.x-2.3 for Drupal allows remote attackers to hijack the authentication of administrators for… Joshics
- CVE-2015-3362 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de videomodule vóór 7.x-2.11 voor Drupal, bij gebruik van de video WYSIWYG-plug-in, stelt externe geverifieerde gebruikers in staat om willekeurig… Video Project
- CVE-2015-3361 LOW · 2.1 Cross-site scripting (XSS) vulnerability in the Linkit module before 7.x-2.7 and 7.x-3.x before 7.x-3.3 for Drupal, when the node search plugin is enabled, allows remote… Linkit Project
- CVE-2015-3360 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Term Merge module before 7.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via… Term Merge Project
- CVE-2015-3359 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the Room Reservations module before 7.x-1.1 for Drupal allow remote authenticated users with the "Administer the room reservations system"… Room Reservations Project
- CVE-2015-3358 MEDIUM · 5.8 Multiple open redirect vulnerabilities in the Tadaa! module before 7.x-1.4 for Drupal allow remote attackers to redirect users to arbitrary web sites and conduct phishing…
- CVE-2015-3357 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote authenticated users with the "access wishlists" permission… Wishlist Project
- CVE-2015-3356 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in de Tadaa! -module vóór 7.x-1.4 voor Drupal stellen externe aanvallers in staat om de authenticatie van willekeurige gebruikers…
- CVE-2015-3355 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in de module Batchtaken vóór 7.x-1.2 voor Drupal stellen externe aanvallers in staat om de authenticatie van bepaalde gebruikers… Batch Jobs Project
- CVE-2015-3354 MEDIUM · 5.8 Cross-site request forgery (CSRF) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before 7.x-2.7 for Drupal allows remote attackers to hijack the authentication of… Wishlist Project
- CVE-2015-3353 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Field Display Label module before 7.x-1.3 for Drupal allows remote authenticated users to inject arbitrary web script or HTML… Field Display Label Project
- CVE-2015-3352 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Jammer module before 6.x-1.8 and 7.x-1.x before 7.x-1.4 for Drupal allow remote attackers to hijack the authentication… Jammer Project
- CVE-2015-3351 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Log Watcher module before 6.x-1.2 for Drupal allow remote attackers to hijack the authentication of administrators for… Log Watcher Project