CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-2759 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow… Mcafee
- CVE-2015-2758 MEDIUM · 6.5 De ePO-extensie in McAfee Data Loss Prevention Endpoint (DLPe) vóór 9.3 Patch 4 Hotfix 16 (9.3.416.4) stelt externe geverifieerde gebruikers in staat om gevoelige informatie… Mcafee
- CVE-2015-2757 MEDIUM · 4.0 De ePO-extensie in McAfee Data Loss Prevention Endpoint (DLPe) vóór 9.3 Patch 4 Hotfix 16 (9.3.416.4) stelt op afstand geverifieerde gebruikers in staat om een… Mcafee
- CVE-2015-2157 LOW · 2.1 De (1) ssh2_load_userkey en (2) ssh2_save_userkey functies in PuTTY 0.51 tot 0.63 wissen SSH-2 private keys niet goed uit het geheugen, waardoor lokale gebruikers gevoelige… Debian Fedoraproject Opensuse Putty
- CVE-2014-9712 MEDIUM · 4.0 Websense TRITON V-serie apparaten vóór 7.8.3 Hotfix 03 en 7.8.4 vóór Hotfix 01 stellen externe beheerders in staat om willekeurige bestanden te lezen en wachtwoorden… Websense
- CVE-2014-8121 MEDIUM · 5.0 DB_LOOKUP in nss_files/files-XXX.c in the Name Service Switch (NSS) in GNU C Library (aka glibc or libc6) 2.21 and earlier does not properly check if… Suse Gnu Canonical
- CVE-2014-3619 MEDIUM · 5.0 The __socket_proto_state_machine function in GlusterFS 3.5 allows remote attackers to cause a denial of service (infinite loop) via a "00000000" fragment header. Opensuse Gluster
- CVE-2013-2184 HIGH · 7.5 Movable Type before 5.2.6 does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via the comment_state parameter. Sixapart
- CVE-2015-2748 MEDIUM · 5.0 Websense TRITON AP-WEB voor 8.0.0 beperkt de toegang tot bestanden in explorer_wse/niet goed, waardoor externe aanvallers gevoelige informatie kunnen verkrijgen via een direct verzoek aan… Websense
- CVE-2015-2747 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 and V-Series 7.7 appliances allow remote attackers… Websense
- CVE-2015-2746 MEDIUM · 6.5 The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series appliances before 7.8.4 Hotfix 02 allows… Websense
- CVE-2015-2683 HIGH · 7.5 Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extensions (JMX) Servlet,… Citrix
- CVE-2015-2682 MEDIUM · 5.0 Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to conf/securitydbData.xml. Citrix
- CVE-2015-0279 MEDIUM · 6.8 JBoss RichFaces voor 4.5.4 staat externe aanvallers toe om expressietaal (EL) expressies te injecteren en willekeurige Java-code uit te voeren via de do parameter. Redhat
- CVE-2015-0673 MEDIUM · 4.0 Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) reading log files or (2) using… Cisco
- CVE-2015-0672 MEDIUM · 5.0 The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a… Cisco
- CVE-2015-0650 HIGH · 7.8 De Service Discovery Gateway (ook bekend als mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3 en 15.4 en IOS XE 3.9.xS en… Cisco
- CVE-2015-0649 HIGH · 7.8 Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP)… Cisco
- CVE-2015-0648 HIGH · 7.8 Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via crafted Common… Cisco
- CVE-2015-0647 HIGH · 7.8 Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industrial Protocol (CIP)… Cisco
- CVE-2015-0646 HIGH · 7.8 Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through… Cisco
- CVE-2015-0645 HIGH · 7.8 Met de Layer 4 Redirect (L4R) -functie in Cisco IOS XE 2.x en 3.x vóór 3.10.4S, 3.11 vóór 3.11.3S, 3.12 vóór 3.12.2S, 3.13 vóór 3.13.1S,… Cisco
- CVE-2015-0644 HIGH · 7.8 AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before… Cisco
- CVE-2015-0643 HIGH · 7.8 Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E,… Cisco
- CVE-2015-0642 HIGH · 7.8 Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3 en 15.4 en IOS XE 2.5.x, 2.6.x, 3.1.xS tot en met 3.12.xS vóór 3.12.3S, 3.2.xE tot en… Cisco
- CVE-2015-0641 HIGH · 7.8 Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15… Cisco
- CVE-2015-0640 HIGH · 7.8 De high-speed logging (HSL) -functie in Cisco IOS XE 2.x en 3.x vóór 3.10.4S, 3.11 vóór 3.11.3S, 3.12 vóór 3.12.1S, 3.13 vóór 3.13.0S, 3.14 vóór… Cisco
- CVE-2015-0639 HIGH · 7.8 The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11… Cisco
- CVE-2015-0638 HIGH · 7.1 Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interface queue… Cisco
- CVE-2015-0637 HIGH · 7.8 De implementatie van de autonome netwerkinfrastructuur (ANI) in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3 en 15.4 en IOS XE 3.10.xS tot en met 3.13.xS… Cisco
- CVE-2015-0636 HIGH · 7.8 The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows… Cisco
- CVE-2015-0635 HIGH · 9.0 De Autonomic Networking Infrastructure (ANI) -implementatie in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3 en 15.4 en IOS XE 3.10.xS tot en met 3.13.xS vóór… Cisco
- CVE-2015-2703 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Websense TRITON AP-WEB before 8.0.0 and V-Series 7.7 appliances allow remote attackers to inject arbitrary web script or HTML… Websense
- CVE-2015-2702 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in het berichtenlogboek in de e-mailbeveiligingsgateway in Websense TRITON AP-EMAIL vóór 8.0.0 en V-Series 7.7-apparaten stelt externe aanvallers in staat om… Websense
- CVE-2015-2701 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in CS-Cart 4.2.4 allows remote attackers to hijack the authentication of users for requests that change a user password via… Cs-cart
- CVE-2015-2559 LOW · 3.5 Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the… Debian Drupal
- CVE-2015-2317 MEDIUM · 4.3 The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows… Debian Fedoraproject Opensuse Djangoproject
- CVE-2015-2316 MEDIUM · 5.0 The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to… Oracle Djangoproject Canonical Fedoraproject
- CVE-2015-0295 MEDIUM · 5.0 The BMP decoder in QtGui in QT before 5.5 does not properly calculate the masks used to extract the color components, which allows remote attackers… Fedoraproject Opensuse Digia
- CVE-2014-9711 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Investigative Reports in Websense TRITON AP-WEB before 8.0.0 and Web Security and Filter, Web Security Gateway, and Web… Websense
- CVE-2015-0138 MEDIUM · 4.3 GSKit in IBM Tivoli Directory Server (ITDS) 6.0 before 6.0.0.73-ISS-ITDS-IF0073, 6.1 before 6.1.0.66-ISS-ITDS-IF0066, 6.2 before 6.2.0.42-ISS-ITDS-IF0042, and 6.3 before 6.3.0.35-ISS-ITDS-IF0035 and IBM Security Directory Server… Ibm
- CVE-2014-8925 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in ClearQuest Web in IBM Rational ClearQuest 7.1.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 allows remote attackers… Ibm
- CVE-2014-8923 LOW · 1.9 The (1) IBM Tivoli Identity Manager Active Directory adapter before 5.1.24 and (2) IBM Security Identity Manager Active Directory adapter before 6.0.14 for IBM Security… Ibm
- CVE-2014-6134 LOW · 1.2 IBM Rational ClearCase 8.0.0 vóór 8.0.0.14 en 8.0.1 vóór 8.0.1.7, wanneer Installatiebeheer vóór 1.8.2 wordt gebruikt, behoudt cleartext-serverwachtwoorden in het procesgeheugen gedurende de installatieprocedure, waardoor… Ibm
- CVE-2015-2284 HIGH · 10.0 userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to… Solarwinds
- CVE-2015-2265 HIGH · 7.5 The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model… Canonical Linuxfoundation
- CVE-2015-2155 HIGH · 7.5 The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Debian Fedoraproject Opensuse Oracle
- CVE-2015-2154 MEDIUM · 5.0 Met de functie osi_print_cksum in print-isoclns.c in de ethernetprinter in tcpdump vóór 4.7.2 kunnen externe aanvallers een denial of service (buiten het bereik lezen en… Tcpdump
- CVE-2015-2153 MEDIUM · 5.0 The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (out-of-bounds read or… Tcpdump
- CVE-2015-1388 HIGH · 7.2 The "RAP console" feature in ArubaOS 5.x through 6.2.x, 6.3.x before 6.3.1.15, and 6.4.x before 6.4.2.4 on Aruba access points in Remote Access Point (AP)… Arubanetworks