CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-3350 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de Todo Filter-module vóór 6.x-1.1 en 7.x-1.x vóór 7.x-1.1 voor Drupal stelt externe aanvallers in staat om de authenticatie… Todo Filter Project
- CVE-2015-3349 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Htaccess module before 7.x-2.3 for Drupal allow remote attackers to hijack the authentication of administrators for requests… Htaccess Project
- CVE-2015-3348 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Cloudwords for Multilingual Drupal module before 7.x-2.3 for Drupal allows remote authenticated users to inject arbitrary web script or… Cloudwords
- CVE-2015-3347 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Cloudwords for Multilingual Drupal module before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of unspecified… Cloudwords
- CVE-2015-3346 HIGH · 7.5 SQL injection vulnerability in the WikiWiki module before 6.x-1.2 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Wikiwiki Project
- CVE-2015-3345 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in de PHPlist-integratiemodule vóór 6.x-1.7 voor Drupal stelt externe beheerders in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren, gerelateerd aan de… Phplist Integration Project
- CVE-2015-3344 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Course module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbitrary web… Dlc Solutions
- CVE-2015-3343 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the OPAC module before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of unspecified victims for requests… Opac Project
- CVE-2015-3342 MEDIUM · 5.8 Open redirect vulnerability in the Ubercart Currency Conversion module before 6.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct… Ubercart Currency Conversion Project
- CVE-2015-0135 HIGH · 10.0 IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of… Ibm
- CVE-2014-9718 MEDIUM · 4.9 The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value,… Debian Qemu
- CVE-2015-2825 HIGH · 7.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in sam-ajax-admin.php in de plug-in Simple Ads Manager vóór 2.5.96 voor WordPress stelt externe aanvallers in staat om… Simple Ads Manager Project
- CVE-2014-5370 HIGH · 7.5 Directory traversal vulnerability in the CFChart servlet (com.naryx.tagfusion.cfm.cfchartServlet) in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via… New Atlanta
- CVE-2014-5361 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that… Landesk
- CVE-2015-2042 MEDIUM · 4.6 net/rds/sysctl.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information… Linux
- CVE-2015-2041 MEDIUM · 4.6 net/llc/sysctl_net_llc.c in the Linux kernel before 3.19 uses an incorrect data type in a sysctl table, which allows local users to obtain potentially sensitive information… Suse Linux Debian
- CVE-2015-0703 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de administratieve webinterface in Cisco Unified MeetingPlace 8.6(1.9) stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Cisco
- CVE-2015-0702 HIGH · 9.0 Unrestricted file upload vulnerability in the Custom Prompts upload implementation in Cisco Unified MeetingPlace 8.6(1.9) allows remote authenticated users to execute arbitrary code by using… Cisco
- CVE-2015-3336 MEDIUM · 4.3 Google Chrome before 42.0.2311.90 does not always ask the user before proceeding with CONTENT_SETTINGS_TYPE_FULLSCREEN and CONTENT_SETTINGS_TYPE_MOUSELOCK changes, which allows user-assisted remote attackers to cause a… Google Debian Opensuse
- CVE-2015-3335 HIGH · 7.5 De NaClSandbox:: InitializeLayerTwoSandbox-functie in componenten/nacl/loader/sandbox_linux/nacl_sandbox_linux.cc in Google Chrome vóór 42.0.2311.90 heeft geen RLIMIT_AS- en RLIMIT_data-limieten voor Native Client (aka NaCl) -processen, wat het voor aanvallers… Google Opensuse
- CVE-2015-3334 MEDIUM · 4.3 browser/ui/website_settings/website_settings.cc in Google Chrome vóór 42.0.2311.90 wordt niet altijd "Media: door u toegestaan" weergegeven in een Machtigingstabel nadat de gebruiker cameratoestemming heeft verleend aan een… Google Debian Opensuse
- CVE-2015-3333 HIGH · 7.5 Meerdere niet-gespecificeerde kwetsbaarheden in Google V8 vóór versie 4.2.77.14, zoals gebruikt in Google Chrome vóór versie 42.0.2311.90, stellen aanvallers in staat een denial-of-service-aanval uit te… Google Debian Canonical
- CVE-2015-1249 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.90 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Debian Canonical Google
- CVE-2015-1248 MEDIUM · 4.3 The FileSystem API in Google Chrome before 40.0.2214.91 allows remote attackers to bypass the SafeBrowsing for Executable Files protection mechanism by creating a .exe file… Debian Google
- CVE-2015-1247 MEDIUM · 5.0 The SearchEngineTabHelper::OnPageHasOSDD function in browser/ui/search_engines/search_engine_tab_helper.cc in Google Chrome before 42.0.2311.90 does not prevent use of a file: URL for an OpenSearch descriptor XML document, which… Google Debian
- CVE-2015-1246 MEDIUM · 5.0 Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors. Debian Google
- CVE-2015-1245 MEDIUM · 6.8 Use-after-free kwetsbaarheid in de OpenPDFInReaderView::Update-functie in browser/ui/views/location_bar/open_pdf_in_reader_view.cc in Google Chrome vóór 41.0.2272.76 kan door de gebruiker ondersteunde externe aanvallers toestaan om een denial of service… Google Debian
- CVE-2015-1244 MEDIUM · 5.0 The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is… Canonical Debian Google
- CVE-2015-1242 HIGH · 7.5 The ReduceTransitionElementsKind function in hydrogen-check-elimination.cc in Google V8 before 4.2.77.8, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of… Canonical Google Debian
- CVE-2015-1241 MEDIUM · 4.3 Google Chrome before 42.0.2311.90 does not properly consider the interaction of page navigation with the handling of touch events and gesture events, which allows remote… Google Debian Canonical Opensuse
- CVE-2015-1240 MEDIUM · 5.0 gpu/blink/webgraphicscontext3d_impl.cc in de WebGL-implementatie in Google Chrome vóór 42.0.2311.90 stelt externe aanvallers in staat om een denial of service (buiten het bereik lezen) te veroorzaken… Debian Google Canonical
- CVE-2015-1238 HIGH · 7.5 Skia, as used in Google Chrome before 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact… Google Canonical Debian
- CVE-2015-1237 HIGH · 7.5 Use-after-free vulnerability in the RenderFrameImpl::OnMessageReceived function in content/renderer/render_frame_impl.cc in Google Chrome before 42.0.2311.90 allows remote attackers to cause a denial of service or possibly have… Canonical Google Debian
- CVE-2015-1236 MEDIUM · 4.3 The MediaElementAudioSourceNode::process function in modules/webaudio/MediaElementAudioSourceNode.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass… Google Canonical Debian
- CVE-2015-1235 MEDIUM · 5.0 The ContainerNode::parserRemoveChild function in core/dom/ContainerNode.cpp in the HTML parser in Blink, as used in Google Chrome before 42.0.2311.90, allows remote attackers to bypass the Same… Canonical Google Debian
- CVE-2015-0970 HIGH · 8.8 Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentication of arbitrary users. Searchblox
- CVE-2015-0969 MEDIUM · 5.0 SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI. Searchblox
- CVE-2015-0968 HIGH · 7.5 Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 8.2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension… Searchblox
- CVE-2015-0967 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in SearchBlox vóór 8.2 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via (1) het zoekveld… Searchblox
- CVE-2015-1856 MEDIUM · 5.5 Met OpenStack Object Storage (Swift) vóór 2.3.0, wanneer allow_version is geconfigureerd, kunnen op afstand geverifieerde gebruikers de nieuwste versie van een object verwijderen door gebruik… Openstack Canonical
- CVE-2015-1852 MEDIUM · 4.3 The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configuration… Openstack Canonical
- CVE-2015-1318 HIGH · 7.2 The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace… Apport Project
- CVE-2015-0845 HIGH · 7.5 Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remote attackers to execute… Sixapart
- CVE-2015-0938 MEDIUM · 5.0 search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intended access restrictions, and list or read arbitrary… Blue Coat
- CVE-2015-0937 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to inject arbitrary web script… Blue Coat
- CVE-2015-0700 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote… Cisco
- CVE-2015-0695 HIGH · 7.8 Cisco IOS XR 4.3.4 tot en met 5.3.0 op ASR 9000-apparaten, wanneer uRPF, PBR, QoS of een ACL is geconfigureerd, verwerkt niet correct bridge-group virtual… Cisco
- CVE-2015-0691 HIGH · 9.3 A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted… Cisco
- CVE-2015-0530 HIGH · 7.2 Buffer overflow in an unspecified function in nsr_render_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 allows local users to gain… Emc
- CVE-2015-3324 MEDIUM · 4.3 De ThinkServer System Manager (TSM) Baseboard Management Controller vóór firmware 1.27.73476 voor ThinkServer RD350, RD450, RD550, RD650 en TD350 valideert servercertificaten niet tijdens een "versleutelde… Lenovo