CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0084 LOW · 2.1 The Task Scheduler in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows… Microsoft
- CVE-2015-0081 HIGH · 9.3 Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8,… Microsoft
- CVE-2015-0080 MEDIUM · 4.3 Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Microsoft
- CVE-2015-0079 HIGH · 7.8 The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers… Microsoft
- CVE-2015-0078 HIGH · 7.2 win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not… Microsoft
- CVE-2015-0077 LOW · 2.1 The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2015-0076 MEDIUM · 4.3 De foto-decoderimplementatie in Microsoft Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold… Microsoft
- CVE-2015-0075 HIGH · 7.2 The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly… Microsoft
- CVE-2015-0074 MEDIUM · 4.3 Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2015-0073 HIGH · 7.2 The Windows Registry Virtualization feature in the kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,… Microsoft
- CVE-2015-0056 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2015-0032 HIGH · 9.3 vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execute arbitrary code… Microsoft
- CVE-2015-0005 MEDIUM · 4.3 De NETLOGON-SERVICE in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 en R2 SP1 en Windows Server 2012 Gold en R2, wanneer een domeincontroller… Microsoft
- CVE-2015-1067 MEDIUM · 4.3 Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitions, which… Apple
- CVE-2015-2217 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Ultimate PHP Board (aka myUPB) before 2.2.8 allow remote attackers to inject arbitrary web script or HTML via the… Myupb
- CVE-2015-2184 MEDIUM · 5.0 ZeusCart 4 allows remote attackers to obtain configuration information via a getphpinfo action to admin/, which calls the phpinfo function. Ajsquare
- CVE-2015-2183 HIGH · 7.5 Meerdere SQL-injectiekwetsbaarheden in de administratieve backend in ZeusCart 4 stellen externe beheerders in staat om willekeurige SQL-opdrachten uit te voeren via de id-parameter in een… Zeuscart
- CVE-2015-0271 MEDIUM · 4.0 The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard (horizon) allows remote attackers to read arbitrary files via a crafted path. Redhat
- CVE-2015-0201 MEDIUM · 5.0 The Java SockJS client in Pivotal Spring Framework 4.1.x before 4.1.5 generates predictable session ids, which allows remote attackers to send messages to other sessions… Pivotal Software Vmware
- CVE-2014-9566 HIGH · 7.5 Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor… Solarwinds
- CVE-2014-8112 MEDIUM · 4.0 389 Directory Server 1.3.1.x, 1.3.2.x before 1.3.2.27, and 1.3.3.x before 1.3.3.9 stores "unhashed" passwords even when the nsslapd-unhashed-pw-switch option is set to off, which allows… Fedoraproject
- CVE-2014-8105 MEDIUM · 5.0 389 Directory Server before 1.3.2.27 and 1.3.3.x before 1.3.3.9 does not properly restrict access to the "cn=changelog" LDAP sub-tree, which allows remote attackers to obtain… Fedoraproject
- CVE-2015-2244 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Webshop hun 1.062S stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) param,… Webshophun
- CVE-2015-2243 HIGH · 7.5 Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php. Webshophun
- CVE-2015-2242 HIGH · 7.5 Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the (1) termid or (2) nyelv_id parameter to… Webshophun
- CVE-2015-2206 MEDIUM · 5.0 libraries/select_lang.lib.php in phpMyAdmin 4.0.x vóór 4.0.10.9, 4.2.x vóór 4.2.13.2 en 4.3.x vóór 4.3.11.1 bevat ongeldige taalwaarden in onbekende taal foutreacties die een CSRF-token bevatten en… Fedoraproject Phpmyadmin
- CVE-2014-7898 HIGH · 10.0 Met de Ole Point of Sale (OPOS) -stuurprogramma's vóór 1.13.003 op HP Point of Sale Windows-pc's kunnen externe aanvallers willekeurige code uitvoeren via niet-gespecificeerde vectoren. Hp Microsoft
- CVE-2014-7897 HIGH · 10.0 Met de Ole Point of Sale (OPOS) -stuurprogramma's vóór 1.13.003 op HP Point of Sale Windows-pc's kunnen externe aanvallers willekeurige code uitvoeren via vectoren met… Hp
- CVE-2014-7895 HIGH · 10.0 The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors… Hp
- CVE-2014-7894 HIGH · 10.0 Met de Ole Point of Sale (OPOS) -stuurprogramma's vóór 1.13.003 op HP Point of Sale Windows-pc's kunnen externe aanvallers willekeurige code uitvoeren via vectoren met… Hp
- CVE-2014-7893 HIGH · 10.0 The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors… Hp
- CVE-2014-7892 HIGH · 10.0 The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors… Hp
- CVE-2014-7891 HIGH · 10.0 The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors… Hp
- CVE-2014-7890 HIGH · 10.0 The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors… Hp
- CVE-2014-7889 HIGH · 10.0 Met de Ole Point of Sale (OPOS) -stuurprogramma's vóór 1.13.003 op HP Point of Sale Windows-pc's kunnen externe aanvallers willekeurige code uitvoeren via vectoren met… Hp
- CVE-2014-7888 HIGH · 10.0 Met de Ole Point of Sale (OPOS) -stuurprogramma's vóór 1.13.003 op HP Point of Sale Windows-pc's kunnen externe aanvallers willekeurige code uitvoeren via vectoren met… Hp
- CVE-2015-1874 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Contact Form DB (aka CFDB and contact-form-7-to-database-extension) plugin before 2.8.32 for WordPress allows remote attackers to hijack the… Cfdbplugin
- CVE-2015-2097 HIGH · 7.5 Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or… Webgate
- CVE-2015-2096 MEDIUM · 6.8 Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid… Webgateinc
- CVE-2015-2095 MEDIUM · 6.8 Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted… Webgateinc
- CVE-2015-2094 HIGH · 7.5 Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary code via unspecified vectors to the (1) PrintSiteImage, (2)… Webgateinc
- CVE-2015-2093 MEDIUM · 6.8 Stack-based buffer overflow in the Connect function in the WebGate WebEyeAudio ActiveX control allows remote attackers to execute arbitrary code via a crafted value. Webgateinc
- CVE-2015-2092 HIGH · 7.5 Met het ActiveX-besturingselement AnnotationX.AnnList.1 in Agilent Technologies Feature Extraction kunnen aanvallers op afstand willekeurige code uitvoeren via een vervaardigde objectparameter in de functie Insert, gerelateerd… Agilent Technologies
- CVE-2015-2063 MEDIUM · 4.3 Integer overflow in unace 1.2b allows remote attackers to cause a denial of service (crash) via a small file header in an ace archive, which… Winace
- CVE-2015-2061 HIGH · 7.5 Heap-based buffer overflow in the browser plugin for PTC Creo View allows remote attackers to execute arbitrary code via vectors involving setting a large buffer… Ptc
- CVE-2015-1464 MEDIUM · 6.4 RT (aka Request Tracker) before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to hijack sessions via an RSS feed URL. Fedoraproject Bestpractical
- CVE-2015-1165 MEDIUM · 5.0 RT (ook bekend als Request Tracker) 3.8.8 tot 4.x vóór 4.0.23 en 4.2.x vóór 4.2.10 stelt externe aanvallers in staat om gevoelige RSS-feed-URL's en ticketgegevens… Debian Fedoraproject Bestpractical
- CVE-2015-0254 HIGH · 7.5 Apache Standard Taglibs voor 1.2.3 stelt externe aanvallers in staat om willekeurige code uit te voeren of externe XML-entiteit (XXE) aanvallen uit te voeren via… Apache Canonical
- CVE-2014-9472 HIGH · 7.1 De e-mailgateway in RT (ook bekend als Request Tracker) 3.0.0 tot en met 4.x vóór 4.0.23 en 4.2.x vóór 4.2.10 stelt externe aanvallers in staat… Debian Fedoraproject Bestpractical
- CVE-2014-3691 HIGH · 7.5 Smart Proxy (aka Smart-Proxy and foreman-proxy) in Foreman before 1.5.4 and 1.6.x before 1.6.2 does not validate SSL certificates, which allows remote attackers to bypass… Redhat Theforeman