CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0651 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine… Cisco
- CVE-2015-0632 MEDIUM · 5.7 Raceconditie in de Neighbor Discovery (ND) -protocolimplementatie in Cisco IOS EN IOS XE stelt externe aanvallers in staat om een denial of service te veroorzaken… Cisco
- CVE-2015-0594 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security… Cisco
- CVE-2015-2090 HIGH · 7.5 SQL-injectiekwetsbaarheid in de ajax_survey-functie in settings.php in de WordPress Survey and Poll-plug-in 1.1.7 voor Wordpress stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te… Sympies
- CVE-2015-2089 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the CrossSlide jQuery (crossslide-jquery-plugin-for-wordpress) plugin 2.0.5 for WordPress allow remote attackers to hijack the authentication of administrators for… Crossslide Jquery Project
- CVE-2015-2088 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Term Queue module before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script… Term Queue Project
- CVE-2015-2087 MEDIUM · 6.5 Unrestricted file upload vulnerability in the Avatar Uploader module before 6.x-1.3 for Drupal allows remote authenticated users to execute arbitrary PHP code by uploading a… Avatar Uploader Project
- CVE-2015-2086 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de live preview in de Panopoly Magic-module vóór 7.x-1.17 voor Drupal stelt op afstand geverifieerde gebruikers in staat om willekeurig… Panopoly Magic Project
- CVE-2015-0633 MEDIUM · 6.8 The Integrated Management Controller (IMC) in Cisco Unified Computing System (UCS) 1.4(7h) and earlier on C-Series servers allows remote attackers to bypass intended access restrictions… Cisco
- CVE-2015-2084 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Easy Social Icons plugin before 1.2.3 for WordPress allows remote attackers to hijack the authentication of administrators for… Cybernetikz
- CVE-2015-2083 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Ilch CMS allows remote attackers to hijack the authentication of administrators for requests that add a value to a… Ilch
- CVE-2015-2082 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Login.aspx in UNIT4 Prosoft HRMS vóór 8.14.330.43 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Unit4
- CVE-2015-2043 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Visualware MyConnection Server 8.2b stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1)… Visualware
- CVE-2014-9685 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Vanilla Forums before 2.0.18.13 and 2.1.x before 2.1.1 allow remote attackers to inject arbitrary web script or HTML via… Vanillaforums
- CVE-2015-0836 HIGH · 7.5 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allow remote attackers to… Mozilla
- CVE-2015-0835 HIGH · 7.5 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 36.0 allow remote attackers to cause a denial of service (memory corruption and application… Mozilla
- CVE-2015-0834 MEDIUM · 4.3 The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes… Canonical Opensuse Mozilla
- CVE-2015-0833 MEDIUM · 6.9 Multiple untrusted search path vulnerabilities in updater.exe in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 on Windows, when the… Opensuse Mozilla Microsoft
- CVE-2015-0832 MEDIUM · 5.0 Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers… Opensuse Canonical Mozilla
- CVE-2015-0831 MEDIUM · 6.8 Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to execute… Mozilla Canonical Redhat
- CVE-2015-0830 MEDIUM · 5.0 The WebGL implementation in Mozilla Firefox before 36.0 does not properly allocate memory for copying an unspecified string to a shader's compilation log, which allows… Canonical Mozilla Opensuse
- CVE-2015-0829 MEDIUM · 6.8 Bufferoverloop in libstagefright in Mozilla Firefox vóór 36.0 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigde MP4-video die onjuist… Canonical Opensuse Mozilla Oracle
- CVE-2015-0828 MEDIUM · 6.8 Double free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before 36.0, when a nonstandard memory allocator is used, allows remote attackers to execute arbitrary… Oracle Mozilla Opensuse
- CVE-2015-0827 MEDIUM · 4.3 Heap-based buffer overflow in the mozilla::gfx::CopyRect function in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to… Mozilla
- CVE-2015-0826 MEDIUM · 6.8 The nsTransformedTextRun::SetCapitalization function in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read of heap… Mozilla Opensuse Canonical
- CVE-2015-0825 MEDIUM · 4.3 Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuffer function in Mozilla Firefox before 36.0 allows remote attackers to obtain sensitive information from process memory via a malformed… Canonical Opensuse Mozilla
- CVE-2015-0824 MEDIUM · 5.0 The mozilla::layers::BufferTextureClient::AllocateForSurface function in Mozilla Firefox before 36.0 allows remote attackers to cause a denial of service (out-of-bounds write of zero values, and application crash)… Opensuse Canonical Mozilla
- CVE-2015-0823 HIGH · 7.5 Meerdere use-after-free kwetsbaarheden in OpenType Sanitiser, zoals gebruikt in Mozilla Firefox vóór 36.0, kunnen externe aanvallers in staat stellen problematische Developer Console-informatie te activeren of… Canonical Opentype Sanitiser Project Mozilla Opensuse
- CVE-2015-0822 MEDIUM · 4.3 The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 allows remote attackers to read arbitrary files… Mozilla
- CVE-2015-0821 MEDIUM · 6.8 Mozilla Firefox before 36.0 allows user-assisted remote attackers to read arbitrary files or execute arbitrary JavaScript code with chrome privileges via a crafted web site… Mozilla Opensuse Canonical
- CVE-2015-0820 LOW · 2.6 Mozilla Firefox vóór 36.0 beperkt de overgangen van JavaScript-objecten van een niet-uitbreidbare toestand naar een uitbreidbare toestand niet correct, waardoor externe aanvallers een Caja Compiler-sandboxbeveiligingsmechanisme… Opensuse Mozilla Canonical
- CVE-2015-0819 MEDIUM · 4.3 The UITour::onPageEvent function in Mozilla Firefox before 36.0 does not ensure that an API call originates from a foreground tab, which allows remote attackers to… Mozilla Opensuse Canonical
- CVE-2015-2078 MEDIUM · 5.0 The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1, Qustodio for Windows, Atom… Komodia
- CVE-2015-2077 MEDIUM · 5.0 The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3.69.1, Qustodio for Windows, Atom… Komodia
- CVE-2014-9282 MEDIUM · 5.0 Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers… Speed Software
- CVE-2014-6115 MEDIUM · 5.0 IBM Rational Insight 1.1.1.5 stelt externe aanvallers in staat om authenticatie te omzeilen en gevoelige informatie te verkrijgen via een vervaardigd verzoek aan een Jazz… Ibm
- CVE-2014-4818 LOW · 2.1 dsmtca in de client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x vóór 6.4.3 en 7.1.x vóór 7.1.2 stelt lokale gebruikers in staat om… Ibm
- CVE-2015-2071 MEDIUM · 4.0 Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated users to read arbitrary files via a .. (dot dot) in… Etouch
- CVE-2015-2070 HIGH · 7.5 SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed. Etouch
- CVE-2015-2069 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING… Woothemes
- CVE-2015-2068 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or… Magmi Project
- CVE-2015-2067 MEDIUM · 5.0 Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remote attackers to read arbitrary files via a… Magmi Project
- CVE-2015-2066 HIGH · 7.5 SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php. Dlguard
- CVE-2015-2065 HIGH · 7.5 SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands… Apptha
- CVE-2015-2064 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) page,… Dlguard
- CVE-2015-1881 MEDIUM · 4.0 OpenStack Image Registry and Delivery Service (Glance) 2014.2 t/m 2014.2.2 verwijdert afbeeldingen niet goed, waardoor op afstand geverifieerde gebruikers een denial of service (schijfverbruik) kunnen… Openstack
- CVE-2015-1605 HIGH · 7.5 Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attackers to execute arbitrary SQL commands via… Dell
- CVE-2015-1572 MEDIUM · 4.6 Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a crafted block… E2fsprogs Project Debian Canonical
- CVE-2015-0555 MEDIUM · 6.8 Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execute arbitrary code via a long string in… Samsung
- CVE-2014-9684 MEDIUM · 4.0 OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenticated users to cause a denial of… Openstack