CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-2831 HIGH · 7.2 Buffer overflow in das_watchdog 0.9.0 allows local users to execute arbitrary code with root privileges via a large string in the XAUTHORITY environment variable. Das Watchdog Project
- CVE-2015-2788 HIGH · 10.0 Multiple stack-based buffer overflows in the ib_fill_isqlda function in dbdimp.c in DBD-Firebird before 1.19 allow remote attackers to have unspecified impact via unknown vectors that… Debian
- CVE-2015-0844 MEDIUM · 5.0 The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1)… Wesnoth Fedoraproject
- CVE-2014-9488 HIGH · 10.0 De is_utf8_well_formed functie in GNU less before 475 staat externe aanvallers toe om niet-gespecificeerde impact te hebben via misvormde UTF-8-tekens, wat een out-of-bounds lezen activeert. Opensuse Gnu
- CVE-2014-8360 HIGH · 7.5 Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .._ (dot dot underscore)… Glpi-project
- CVE-2014-5032 MEDIUM · 5.0 GLPI voor 0.84.7 beperkt de toegang tot kosteninformatie niet goed, waardoor aanvallers op afstand gevoelige informatie kunnen verkrijgen via de kostencriteria in de zoekbalk. Glpi-project
- CVE-2015-2926 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Php/stats/statsRecent.inc.php in phpTrafficA 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent… Zoneo-soft
- CVE-2015-2781 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx Billing Manager 73 allows remote attackers to inject arbitrary web script or HTML via the… Hotspot Express
- CVE-2015-2223 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the web-based console management interface in Palo Alto Networks Traps (formerly Cyvera Endpoint Protection) 3.1.2.1546 allow remote attackers to… Palo Alto Networks
- CVE-2014-9311 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in admin.php in de Shareaholic-plug-in vóór 7.6.1.0 voor WordPress stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML… Shareaholic
- CVE-2014-9146 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to inject arbitrary web script or HTML via the (1) view, (2) id,… Fiyo
- CVE-2014-9145 HIGH · 7.5 Multiple SQL injection vulnerabilities in Fiyo CMS 2.0.1.8 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an edit action… Fiyo
- CVE-2015-2942 HIGH · 7.1 MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to cause a denial of service (CPU and memory… Mediawiki
- CVE-2015-2941 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to inject arbitrary web… Mediawiki
- CVE-2015-2940 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authentication of certain users for requests that retrieve… Mediawiki
- CVE-2015-2939 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or HTML via a function name, which… Mediawiki
- CVE-2015-2938 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML… Mediawiki
- CVE-2015-2937 HIGH · 7.1 MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP, allows remote attackers to cause a denial of service… Mediawiki
- CVE-2015-2936 HIGH · 7.1 MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumption) via a long password. Mediawiki
- CVE-2015-2935 MEDIUM · 5.0 MediaWiki vóór 1.19.24, 1.2x vóór 1.23.9 en 1.24.x vóór 1.24.2 stelt externe aanvallers in staat om de SVG-filtering te omzeilen en gevoelige gebruikersinformatie te verkrijgen… Mediawiki
- CVE-2015-2934 MEDIUM · 4.3 MediaWiki vóór 1.19.24, 1.2x vóór 1.23.9 en 1.24.x vóór 1.24.2 wordt niet correct behandeld wanneer de Zend-interpreter xml_parse-functie entiteiten niet uitbreidt, waardoor externe aanvallers willekeurig… Mediawiki
- CVE-2015-2933 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary… Mediawiki
- CVE-2015-2932 MEDIUM · 4.3 Incomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inject arbitrary web script or HTML via… Mediawiki
- CVE-2015-2931 MEDIUM · 4.3 Onvolledige blacklist-kwetsbaarheid in includes/upload/UploadBase.php in MediaWiki vóór 1.19.24, 1.2x vóór 1.23.9 en 1.24.x vóór 1.24.2 stelt externe aanvallers in staat om willekeurig webscript of HTML… Mediawiki
- CVE-2015-2846 HIGH · 9.3 BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link. Bittorrent
- CVE-2015-2775 HIGH · 7.6 Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. (dot… Canonical Debian Redhat Gnu
- CVE-2015-0840 MEDIUM · 4.3 Met het commando dpkg-source in Debian dpkg vóór 1.16.16 en 1.17.x vóór 1.17.25 kunnen externe aanvallers handtekeningverificatie omzeilen via een vervaardigd Debian bronbesturingsbestand (.dsc). Debian Canonical
- CVE-2014-9714 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de WddxPacket:: recursiveAddVar-functie in HHVM (ook bekend als de HipHop Virtual Machine) vóór 3.5.0 stelt externe aanvallers in staat om… Facebook
- CVE-2015-0677 HIGH · 7.8 The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 before 9.1(6), 9.2 before 9.2(3.4),… Cisco
- CVE-2015-0676 HIGH · 7.1 The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), 8.4 before 8.4(7.28), 8.5 before 8.5(1.24),… Cisco
- CVE-2015-0675 HIGH · 8.3 The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before 9.3(3) does not properly validate… Cisco
- CVE-2015-0694 MEDIUM · 5.0 Cisco ASR 9000-apparaten met software 5.3.0.BASE erkennen niet dat bepaalde ACL-vermeldingen een beperking voor één host hebben, waardoor externe aanvallers de beoogde toegangsbeperkingen voor netwerkbronnen… Cisco
- CVE-2015-0692 HIGH · 7.2 Cisco Web Security Appliance (WSA) devices with software 8.5.0-ise-147 do not properly restrict use of the pickle Python module during certain tunnel-status checks, which allows… Cisco
- CVE-2015-0678 HIGH · 7.8 The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to… Cisco
- CVE-2015-2247 HIGH · 8.3 Unspecified vulnerability in Boosted Boards skateboards allows physically proximate attackers to modify skateboard movement, cause human injury, or cause physical damage via vectors related to… Boosted
- CVE-2015-3027 MEDIUM · 5.0 Clang in LLVM, as used in Apple Xcode before 6.3, performs incorrect register allocation in a way that triggers stack storage for stack cookie pointers,… Apple
- CVE-2015-3008 MEDIUM · 4.3 Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk 1.8.28 before 1.8.28-cert5, 11.6 before 11.6-cert11,… Digium
- CVE-2015-3005 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Dynamic VPN in Juniper Junos 12.1X44 vóór 12.1X44-D45, 12.1X46 vóór 12.1X46-D30, 12.1X47 vóór 12.1X47-D20 en 12.3X48 vóór 12.3X48-D10 op… Juniper
- CVE-2015-3004 MEDIUM · 4.3 J-Web in Juniper Junos 11.4 before 11.4R12, 12.1X44 before 12.1X44-D35, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D10, 12.3X48 before 12.3X48-D10, 12.2 before 12.2R9, 12.3 before 12.3R7,… Juniper
- CVE-2015-3003 HIGH · 7.2 Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D20, 12.3 before 12.3R9, 12.3X48 before 12.3X48-D10, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before… Juniper
- CVE-2015-3002 MEDIUM · 6.9 Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, and 12.3X48 before 12.3X48-D10 on SRX series devices does not properly enforce the log-out-on-disconnect… Juniper
- CVE-2015-2806 HIGH · 10.0 Op stapels gebaseerde bufferoverloop in asn1_der_decoding in libtasn1 vóór 4.4 stelt externe aanvallers in staat om niet-gespecificeerde impact te hebben via onbekende vectoren. Canonical Debian Fedoraproject Gnu
- CVE-2015-2779 MEDIUM · 5.0 Stack consumption vulnerability in the message splitting functionality in Quassel before 0.12-rc1 allows remote attackers to cause a denial of service (uncontrolled recursion) via a… Quassel-irc
- CVE-2015-2778 MEDIUM · 5.0 Quassel gebruikt vóór versie 0.12-rc1 een onjuiste gegevenstypegrootte bij het splitsen van een bericht, waardoor externe aanvallers een denial-of-service-aanval (crash) kunnen veroorzaken via een lange… Quassel-irc
- CVE-2015-2295 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in system_firmware_restorefullbackup.php in the WebGUI in pfSense before 2.2.1 allows remote attackers to hijack the authentication of administrators for requests… Netgate
- CVE-2015-1842 HIGH · 10.0 The puppet manifests in the Red Hat openstack-puppet-modules package before 2014.2.13-2 uses a default password of CHANGEME for the pcsd daemon, which allows remote attackers… Redhat
- CVE-2015-1415 LOW · 2.1 The bsdinstall installer in FreeBSD 10.x before 10.1 p9, when configuring full disk encrypted ZFS, uses world-readable permissions for the GELI keyfile (/boot/encryption.key), which allows… Freebsd
- CVE-2015-1149 HIGH · 7.5 Integer overflow in the simulator in Swift in Apple Xcode before 6.3 allows context-dependent attackers to cause a denial of service or possibly have unspecified… Apple
- CVE-2015-1148 MEDIUM · 5.0 Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain… Apple
- CVE-2015-1147 MEDIUM · 5.0 Open Directory Client in Apple OS X before 10.10.3 sends unencrypted password-change requests in certain circumstances involving missing certificates, which allows remote attackers to obtain… Apple