CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0598 MEDIUM · 6.8 De RADIUS-IMPLEMENTATIE in Cisco IOS EN IOS XE stelt externe aanvallers in staat om een denial of service (herladen van het apparaat) te veroorzaken via… Cisco
- CVE-2014-2130 MEDIUM · 6.5 Cisco Secure Access Control Server (ACS) biedt een onbedoelde beheerwebinterface op basis van Apache Tomcat, waarmee op afstand geverifieerde gebruikers toepassingsbestanden en configuratiebestanden kunnen wijzigen… Cisco
- CVE-2015-2220 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Ninja Forms plugin before 2.8.9 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML… Ninjaforms
- CVE-2015-2218 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the wp_ajax_save_item function in wonderpluginaudio.php in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow remote attackers to… Magic Hills
- CVE-2014-9688 HIGH · 7.5 Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users. Ninjaforms
- CVE-2015-2216 HIGH · 7.5 SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prod_id parameter. Photocati Media
- CVE-2015-2215 MEDIUM · 5.8 Open redirect kwetsbaarheid in de Services single sign-on server helper (services_sso_server_helper) module voor Drupal stelt externe aanvallers in staat om gebruikers om te leiden naar… Services Single Sign-on Server Helper Project
- CVE-2015-2214 MEDIUM · 5.0 Met NetCat 5.01 en eerder kunnen externe aanvallers het installatiepad verkrijgen via de parameter redirect_url naar netshop/post.php. Netcat
- CVE-2015-0893 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Maroyaka CGI Maroyaka Relay Novel stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde vectoren. Maroyaka Relay Novel Project
- CVE-2015-0892 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Maroyaka Image Album Project
- CVE-2015-0891 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Maroyaka CGI Maroyaka Simple Board allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Maroyaka Simple Board Project
- CVE-2015-2209 MEDIUM · 5.0 DLGuard 4.5 allows remote attackers to obtain the installation path via the c parameter to index.php. Dlguard
- CVE-2014-8617 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Web Action Quarantine Release feature in the WebGUI in Fortinet FortiMail before 4.3.9, 5.0.x before 5.0.8, 5.1.x before 5.1.5,… Fortinet
- CVE-2015-0934 MEDIUM · 6.5 Common LaTeX Service Interface (CLSI) before 0.1.3, as used in ShareLaTeX before 0.1.3, allows remote authenticated users to execute arbitrary code via ` (backtick) characters… Sharelatex
- CVE-2015-0933 LOW · 3.5 Absolute path traversal vulnerability in ShareLaTeX 0.1.3 and earlier, when the paranoid openin_any setting is omitted, allows remote authenticated users to read arbitrary files via… Sharelatex
- CVE-2015-0656 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid op de inlogpagina in Cisco Network Analysis Module (NAM) stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Cisco
- CVE-2015-2199 MEDIUM · 6.5 Meerdere SQL-injectiekwetsbaarheden in de WonderPlugin Audio Player-plug-in vóór 2.1 voor WordPress stellen (1) op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren… Wonderplugin
- CVE-2015-2198 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in edit_prefs.php in Beehive Forum 1.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) homepage_url,… Beehive Forum
- CVE-2015-2197 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via… Entity Api Project
- CVE-2015-2196 HIGH · 7.5 SQL-injectiekwetsbaarheid in Spider Event Calendar 1.4.9 voor WordPress stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de cat_id-parameter in een spiderbigcalendar_month-actie… Web-dorado
- CVE-2015-2195 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the WP Media Cleaner plugin 2.2.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via… Wp Media Cleaner Project
- CVE-2015-2194 MEDIUM · 6.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in de functie fusion_options in functions.php in het Fusion-thema 3.1 voor Wordpress stelt externe geverifieerde gebruikers in staat… Digitalnature
- CVE-2015-0890 MEDIUM · 5.0 De BestWebSoft Google Captcha-plug-in (ook bekend als reCAPTCHA) vóór 1.13 voor WordPress stelt externe aanvallers in staat om het CAPTCHA-BEVEILIGINGSMECHANISME TE omzeilen en administratieve toegang… Bestwebsoft
- CVE-2014-9683 LOW · 3.6 Off-by-one error in the ecryptfs_decode_from_filename function in fs/ecryptfs/crypto.c in the eCryptfs subsystem in the Linux kernel before 3.18.2 allows local users to cause a denial… Canonical Linux
- CVE-2014-9283 MEDIUM · 5.0 The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors. Bestwebsoft
- CVE-2014-7896 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in HP XP P9000 Command View Advanced Edition Software Online Help, as used in HP Device Manager 6.x through 8.x… Hp
- CVE-2015-0239 MEDIUM · 4.4 The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER MSR initialization, allows guest OS users to gain… Linux Canonical Debian Oracle
- CVE-2014-9644 LOW · 2.1 The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG… Linux Debian Canonical Oracle
- CVE-2014-8160 MEDIUM · 5.0 net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP, GRE, and UDP-Lite… Linux Opensuse Suse Redhat
- CVE-2013-7421 LOW · 2.1 The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG… Canonical Debian Linux Oracle
- CVE-2014-8921 MEDIUM · 4.3 The IBM Notes Traveler Companion application 1.0 and 1.1 before 201411010515 for Window Phone, as distributed in IBM Notes Traveler 9.0.1, does not properly restrict… Ibm
- CVE-2015-0889 HIGH · 7.5 KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vectors involving an article. Kent-web
- CVE-2015-0888 MEDIUM · 6.4 KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors. Kent-web
- CVE-2015-0887 HIGH · 7.1 npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 through 4.70, SEIL/X2 routers 3.50 through 4.70,… Iij
- CVE-2015-0886 MEDIUM · 5.0 Integer overflow in the crypt_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to determine cleartext values of… Mindrot Fedoraproject
- CVE-2015-0885 MEDIUM · 5.0 checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username. Debian Checkpw Project
- CVE-2015-0884 MEDIUM · 6.9 Onbekende Windows-zoekpadkwetsbaarheid in Toshiba Bluetooth Stack voor Windows vóór 9.10.32 (T) en Service Station vóór 2.2.14 stelt lokale gebruikers in staat om privileges te verkrijgen… Toshiba Microsoft
- CVE-2015-0655 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager stelt externe aanvallers in staat om willekeurig webscript… Cisco
- CVE-2014-9682 HIGH · 10.0 The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API… Dns-sync Project
- CVE-2014-9676 MEDIUM · 6.8 The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial… Ffmpeg
- CVE-2015-2103 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the admin-login panel (admin/index.cgi) in Cosmoshop allows remote attackers to inject arbitrary web script or HTML via the username field… Cosmoshop
- CVE-2015-2102 HIGH · 7.5 SQL injection vulnerability in view_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execute arbitrary SQL commands via the item parameter. Clip-bucket
- CVE-2015-2101 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject… Impliedbydesign
- CVE-2015-2076 MEDIUM · 5.0 The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka SAP Note 2011395. Sap
- CVE-2015-2075 MEDIUM · 5.0 SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP Note 2011396. Sap
- CVE-2015-2072 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA Developer Edition 80 (1.00.80.00.391861) allow remote attackers to inject arbitrary web script or… Sap
- CVE-2015-1414 HIGH · 7.8 Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. 10.0 before p18, and 10.1 before p6 allows remote attackers to cause a denial… Netgate Debian Freebsd
- CVE-2015-0977 HIGH · 10.0 Met Network Vision IntraVue voor 2.3.0a14 op Windows kunnen aanvallers op afstand willekeurige OS-commando's uitvoeren via niet-gespecificeerde vectoren. Network Vision
- CVE-2015-0883 MEDIUM · 6.8 SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows remote attackers to… Synck Graphica
- CVE-2015-0882 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja through 1.5.1 ja allow remote… Zen-cart