CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6221 HIGH · 9.4 De MSCAPI/MSCNG-interface-implementatie in GSKit in IBM Rational ClearCase 7.1.2.x vóór 7.1.2.17, 8.0.0.x vóór 8.0.0.14 en 8.0.1.x vóór 8.0.1.7 genereert geen willekeurige getallen, waardoor het voor… Ibm
- CVE-2015-1465 HIGH · 7.8 The IPv4 implementation in the Linux kernel before 3.18.8 does not properly consider the length of the Read-Copy Update (RCU) grace period for redirecting lookups… Linux Canonical
- CVE-2015-0777 LOW · 2.1 drivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for the Linux kernel 2.6.18), as used in the Linux kernel 2.6.x and 3.x in SUSE… Xen Linux
- CVE-2015-0951 MEDIUM · 6.5 X-Cart before 5.1.11 allows remote authenticated users to read or delete address data of arbitrary accounts via a modified (1) update or (2) remove request. Qualiteam
- CVE-2015-0950 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in admin.php in X-Cart 5.1.6 through 5.1.10 allows remote attackers to inject arbitrary web script or HTML via the substring parameter. Qualiteam
- CVE-2015-0932 HIGH · 10.0 The ANTlabs InnGate firmware on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and… Antlabs
- CVE-2015-0529 MEDIUM · 5.0 EMC PowerPath Virtual Appliance (ook bekend als vApp) vóór 2.0 heeft standaard wachtwoorden voor de (1) emcupdate- en (2) svcuser-accounts, waardoor het voor aanvallers op… Emc
- CVE-2015-2111 LOW · 2.1 Unspecified vulnerability in HP Intelligent Provisioning 1.40 through 1.60 on Windows Server 2008 R2 and 2012 allows local users to obtain sensitive information via unknown… Hp Microsoft
- CVE-2015-0688 HIGH · 7.1 Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor (ESP) module, when NAT is enabled, allows remote attackers to cause… Cisco
- CVE-2015-0616 HIGH · 7.1 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration… Cisco
- CVE-2015-0615 HIGH · 7.1 The call-handling implementation in Cisco Unity Connection 8.5 before 8.5(1)SU7, 8.6 before 8.6(2a)SU4, 9.x before 9.1(2)SU2, and 10.0 before 10.0(1)SU1, when SIP trunk integration is… Cisco
- CVE-2015-0614 HIGH · 7.1 Het Connection Conversation Manager (ook bekend als CuCsMgr) -proces in Cisco Unity Connection 8.5 vóór 8.5(1)SU7, 8.6 vóór 8.6(2a)SU4, 9.x vóór 9.1(2) SU2 en 10.0… Cisco
- CVE-2015-0613 HIGH · 7.1 Het Connection Conversation Manager (ook bekend als CuCsMgr) -proces in Cisco Unity Connection 8.5 vóór 8.5(1)SU7, 8.6 vóór 8.6(2a)SU4, 9.x vóór 9.1(2) SU2 en 10.0… Cisco
- CVE-2015-0612 HIGH · 7.1 The Connection Conversation Manager (aka CuCsMgr) process in Cisco Unity Connection 8.5 before 8.5(1)SU6, 8.6 before 8.6(2a)SU4, and 9.x before 9.1(2)SU2, when SIP trunk integration… Cisco
- CVE-2015-2841 MEDIUM · 5.0 Citrix NetScaler AppFirewall, as used in NetScaler 10.5, allows remote attackers to bypass intended firewall restrictions via a crafted Content-Type header, as demonstrated by the… Citrix
- CVE-2015-2840 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in help/rt/large_search.html in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to inject arbitrary web script or HTML via the… Citrix
- CVE-2015-2839 MEDIUM · 4.3 The Nitro API in Citrix NetScaler before 10.5 build 52.3nc uses an incorrect Content-Type when returning an error message, which allows remote attackers to conduct… Citrix
- CVE-2015-2838 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Nitro API in Citrix NetScaler before 10.5 build 52.3nc allows remote attackers to hijack the authentication of administrators for… Citrix
- CVE-2015-0225 HIGH · 7.5 The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces,… Apache
- CVE-2015-0995 MEDIUM · 5.0 Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack. Inductiveautomation
- CVE-2015-0994 MEDIUM · 4.0 Inductive Automation Ignition 7.7.2 stelt op afstand geverifieerde gebruikers in staat om een beschermingsmechanisme met brute kracht te omzeilen door verschillende sessie-ID-waarden te gebruiken in… Inductiveautomation
- CVE-2015-0993 MEDIUM · 6.4 Inductive Automation Ignition 7.7.2 does not terminate a session upon a logout action, which allows remote attackers to bypass intended access restrictions by leveraging an… Inductiveautomation
- CVE-2015-0992 LOW · 2.1 Inductive Automation Ignition 7.7.2 stores cleartext OPC Server credentials, which allows local users to obtain sensitive information via unspecified vectors. Inductiveautomation
- CVE-2015-0991 MEDIUM · 5.0 Inductive Automation Ignition 7.7.2 stelt aanvallers op afstand in staat om gevoelige informatie te verkrijgen door een foutmelding te lezen over een niet-verwerkte uitzondering, zoals… Inductiveautomation
- CVE-2015-0990 MEDIUM · 4.4 Untrusted search path vulnerability in Ecava IntegraXor SCADA Server before 4.2.4488 allows local users to gain privileges via a renamed DLL in the default install… Ecava
- CVE-2015-0976 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Inductive Automation Ignition 7.7.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. Inductiveautomation
- CVE-2015-0903 HIGH · 7.5 Buffer overflow in Saitoh Kikaku Maruo Editor 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted .hmbook file. Hidemaru
- CVE-2015-0902 MEDIUM · 5.0 The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the… Semperfiwebdesign
- CVE-2015-0684 MEDIUM · 6.5 SQL injection vulnerability in the Image Management component in Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary SQL commands via… Cisco
- CVE-2015-0683 MEDIUM · 4.0 Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to obtain sensitive information via a file-inclusion attack, aka Bug ID CSCup94744. Cisco
- CVE-2015-0682 MEDIUM · 6.5 Cisco Unified Communications Domain Manager 8.1(4) allows remote authenticated users to execute arbitrary code by visiting a "deprecated page," aka Bug ID CSCup90168. Cisco
- CVE-2014-8390 MEDIUM · 4.4 Multiple buffer overflows in Schneider Electric VAMPSET before 2.2.168 allow local users to gain privileges via malformed disturbance-recording data in a (1) CFG or (2)… Schneider-electric
- CVE-2014-5405 HIGH · 9.0 Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by… Hospira
- CVE-2014-5403 MEDIUM · 6.8 Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by… Hospira
- CVE-2014-5400 MEDIUM · 6.8 The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a… Hospira
- CVE-2015-0687 MEDIUM · 6.3 De SNMP-implementatie in Cisco IOS 15.1(2)SG4 op Catalyst 4500-apparaten, wanneer het Virtual Switching System (VSS) met één schakelaar is geconfigureerd, stelt op afstand geverifieerde gebruikers… Cisco
- CVE-2015-0686 MEDIUM · 6.3 The SNMP implementation in Cisco NX-OS 6.1(2)I2(3) on Nexus 9000 devices, when a Reset High Availability (HA) policy is configured, allows remote authenticated users to… Cisco
- CVE-2015-0685 HIGH · 7.8 Cisco IOS XE voor 3.7.5S op ASR 1000-apparaten verwerkt route-adjacenties niet goed, waardoor externe aanvallers een denial of service (apparaat hangen) kunnen veroorzaken via vervaardigde… Cisco
- CVE-2015-1234 MEDIUM · 6.8 Race condition in gpu/command_buffer/service/gles2_cmd_decoder.cc in Google Chrome before 41.0.2272.118 allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other… Google Apple Linux Microsoft
- CVE-2015-1233 HIGH · 7.5 Google Chrome vóór 41.0.2272.118 behandelt de interactie van IPC, de Gamepad API en Google V8 niet correct, waardoor aanvallers op afstand willekeurige code kunnen uitvoeren… Google Apple Linux Microsoft
- CVE-2015-2821 MEDIUM · 6.5 TYPO3 Neos 1.1.x vóór 1.1.3 en 1.2.x vóór 1.2.3 geeft externe editors toegang tot inhoudsknooppunten in de werkruimte van andere editors via niet-gespecificeerde vectoren. Typo3
- CVE-2015-2820 MEDIUM · 5.0 Bufferoverloop in XcListener in SAP Afaria 7.0.6001.5 stelt externe aanvallers in staat om een denial of service (beëindiging van het proces) te veroorzaken via een… Sap
- CVE-2015-2819 MEDIUM · 5.0 SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service (crash) via a crafted request, aka SAP Security Note… Sap
- CVE-2015-2818 MEDIUM · 5.0 XML externe entiteit (XXE) kwetsbaarheid in SAP Mobile Platform 3 stelt externe aanvallers in staat om verzoeken naar intranetservers te sturen via vervaardigde XML, ook… Sap
- CVE-2015-2817 MEDIUM · 5.0 The SAP Management Console in SAP NetWeaver 7.40 allows remote attackers to obtain sensitive information via the ReadProfile parameters, aka SAP Security Note 2091768. Sap
- CVE-2015-2816 HIGH · 7.5 The XcListener in SAP Afaria 7.0.6001.5 does not properly restrict access, which allows remote attackers to have unspecified impact via a crafted request, aka SAP… Sap
- CVE-2015-2815 MEDIUM · 6.5 Buffer overflow in the C_SAPGPARAM function in the NetWeaver Dispatcher in SAP KERNEL 7.00 (7000.52.12.34966) and 7.40 (7400.12.21.30308) allows remote authenticated users to cause a… Sap
- CVE-2015-2814 MEDIUM · 6.4 SAP EMR Unwired (com.sap.mobile.healthcare.emr.v2) and Clinical Task Tracker (com.sap.mobile.healthcare.ctt) does not properly restrict access, which allows remote attackers to change the backendurl, clientid, ssourl, and… Sap
- CVE-2015-2813 MEDIUM · 5.0 XML external entity (XXE) vulnerability in SAP Mobile Platform allows remote attackers to send requests to intranet servers via crafted XML, aka SAP Security Note… Sap
- CVE-2015-2812 MEDIUM · 5.0 XML external entity (XXE) vulnerability in XMLValidationComponent in SAP NetWeaver Portal 7.31.201109172004 allows remote attackers to send requests to intranet servers via crafted XML, aka… Sap