CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-9402 HIGH · 7.8 The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled,… Gnu Canonical Opensuse
- CVE-2014-8487 MEDIUM · 4.0 Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages via the messageId parameter to… Kony
- CVE-2013-7423 MEDIUM · 5.0 The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers… Redhat Canonical Opensuse Gnu
- CVE-2015-0240 HIGH · 10.0 The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x before 4.2.0rc5 performs a… Redhat Samba Novell Canonical
- CVE-2015-2055 HIGH · 7.8 Zhone GPON 2520 met firmware R4.0.2.566b stelt externe aanvallers in staat om een denial of service te veroorzaken via een lange string in de parameter… Zhone Technologies
- CVE-2015-2054 MEDIUM · 4.3 CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows remote attackers to inject arbitrary headers… Sierra Wireless
- CVE-2015-2053 MEDIUM · 4.3 The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disabled,… Mcafee
- CVE-2015-2052 HIGH · 10.0 Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary code via a long… Dlink
- CVE-2015-2050 HIGH · 10.0 D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vectors. Dlink
- CVE-2015-2049 HIGH · 9.0 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in D-Link DCS-931L met firmware 1.04 en eerder stelt op afstand geverifieerde gebruikers in staat om willekeurige code… Dlink
- CVE-2015-2048 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown… Dlink
- CVE-2015-2047 LOW · 2.6 The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured for the frontend, allows remote… Typo3 Debian
- CVE-2015-1589 MEDIUM · 5.0 Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (dot dot) in a CHM file. Archmage Project
- CVE-2015-1426 LOW · 2.1 Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2… Puppet Puppetlabs
- CVE-2015-1315 HIGH · 7.5 Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code via a crafted string, as demonstrated… Canonical Info-zip
- CVE-2014-7922 MEDIUM · 4.3 The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corresponding _opt_ parameter in the… Google
- CVE-2014-6184 HIGH · 7.2 Stack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4 through 5.4.3.6, 5.5 through 5.5.4.3, 6.1 through 6.1.5.6, 6.2 before… Ibm Apple Linux Opengroup
- CVE-2015-0631 HIGH · 7.1 Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many… Cisco
- CVE-2015-0624 MEDIUM · 4.3 Met het webframework in Cisco AsyncOS on Email Security Appliance (ESA), Content Security Management Appliance (SMA) en Web Security Appliance (WSA) -apparaten kunnen externe aanvallers… Cisco
- CVE-2015-0618 HIGH · 7.1 Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X (CRS-X) devices allows… Cisco
- CVE-2015-0331 HIGH · 10.0 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 13.0.0.269 en 14.x tot en met 16.x vóór 16.0.0.305 op Windows en OS X en vóór 11.2.202.442 op… Adobe Apple Microsoft Linux
- CVE-2015-2040 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de Contact Form DB (aka CFDB en contact-form-7-to-database-extensie) plugin 2.8.26 voor WordPress stelt externe aanvallers in staat om willekeurig webscript… Cfdbplugin
- CVE-2015-2039 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Acobot Live Chat & Contact Form plugin 2.0 for WordPress allow remote attackers to hijack the authentication…
- CVE-2015-2035 MEDIUM · 6.5 SQL injection vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote administrators to execute arbitrary SQL commands via the user parameter in the… Piwigo
- CVE-2015-2034 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de administratieve backend in Piwigo vóór 2.7.4 stelt externe aanvallers in staat om willekeurig webscript of HTML via de paginaparameter… Piwigo
- CVE-2015-1517 MEDIUM · 6.0 SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter… Piwigo
- CVE-2015-0167 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in textAngular-sanitize.js in textAngular vóór 1.3.7 stelt externe aanvallers in staat om willekeurig webscript of HTML via niet-gespecificeerde vectoren in de… Textangular
- CVE-2014-8115 MEDIUM · 6.5 The default authorization constrains in KIE Workbench 6.0.x allows remote authenticated users to read or write to arbitrary files, bypass intended access restrictions, and possibly… Redhat
- CVE-2014-8114 MEDIUM · 6.8 The UberFire Framework 0.3.x does not properly restrict paths, which allows remote attackers to (1) execute arbitrary code by uploading crafted content to FileUploadServlet or… Redhat
- CVE-2014-3682 HIGH · 7.5 XML external entity (XXE) vulnerability in the JBPMBpmn2ResourceImpl function in designer/bpmn2/resource/JBPMBpmn2ResourceImpl.java in jbpm-designer 6.0.x and 6.2.x allows remote attackers to read arbitrary files and possibly… Redhat
- CVE-2014-0005 LOW · 3.6 PicketBox and JBossSX, as used in Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.2 and JBoss BRMS before 6.0.3 roll up patch 2, allows remote… Redhat
- CVE-2015-2033 HIGH · 10.0 Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request. Infoblox
- CVE-2015-0881 MEDIUM · 4.3 CRLF-injectiekwetsbaarheid in Squid vóór 3.1.1 stelt externe aanvallers in staat om willekeurige HTTP-headers te injecteren en HTTP-antwoordsplitsingsaanvallen uit te voeren via een vervaardigde header in… Squid-cache
- CVE-2015-0880 MEDIUM · 6.8 Buffer overflow in CREAR AL-Mail32 before 1.13d allows remote attackers to execute arbitrary code via a long filename of an attachment. Crear.ne.jp
- CVE-2015-0879 MEDIUM · 4.3 Met CREAR AL-Mail32 voor 1.13d kunnen externe aanvallers een denial of service (applicatiecrash) veroorzaken via een (1) CON, (2) AUX of (3) NUL-apparaatnaam in de… Almail
- CVE-2015-0878 MEDIUM · 5.8 Directory traversal vulnerability in CREAR AL-Mail32 before 1.13d allows remote attackers to write to arbitrary files via a crafted filename of an attachment. Almail
- CVE-2014-5355 MEDIUM · 5.0 MIT Kerberos 5 (aka krb5) through 1.13.1 incorrectly expects that a krb5_read_message data field is represented as a string ending with a '' character, which… Mit
- CVE-2015-0628 MEDIUM · 5.0 The proxy engine on Cisco Web Security Appliance (WSA) devices allows remote attackers to bypass intended proxying restrictions via a malformed HTTP method, aka Bug… Cisco
- CVE-2015-0584 HIGH · 7.2 The image-upgrade implementation on Cisco Desktop Collaboration Experience (aka Collaboration Desk Experience or DX) DX650 endpoints allows local users to execute arbitrary OS commands via… Cisco
- CVE-2014-3578 MEDIUM · 5.0 Directory traversal vulnerability in Pivotal Spring Framework 3.x before 3.2.9 and 4.0 before 4.0.5 allows remote attackers to read arbitrary files via a crafted URL. Pivotal Software
- CVE-2015-1879 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Google Doc Embedder-plug-in vóór 2.5.19 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Google Doc Embedder
- CVE-2015-1614 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Image Metadata Cruncher plugin for WordPress allow remote attackers to hijack the authentication of administrators for requests… Image Metadata Cruncher Project
- CVE-2015-1604 MEDIUM · 6.5 Unrestricted file upload vulnerability in asys/site/files.php in Adminsystems CMS before 4.0.2 allows remote authenticated users to execute arbitrary code by uploading a file with an… Adminsystems Cms Project
- CVE-2015-1603 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Adminsystems CMS before 4.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter… Adminsystems Cms Project
- CVE-2015-1592 HIGH · 7.5 Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::thaw function, which… Debian Sixapart
- CVE-2015-1587 HIGH · 7.5 Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote attackers to execute arbitrary PHP code… Maarch
- CVE-2015-1585 MEDIUM · 6.8 Fat Free CRM before 0.13.6 allows remote attackers to conduct cross-site request forgery (CSRF) attacks via a request without the authenticity_token, as demonstrated by a… Fatfreecrm
- CVE-2015-1515 HIGH · 7.2 The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a… Softsphere
- CVE-2015-1197 LOW · 1.9 cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. Gnu
- CVE-2014-9679 MEDIUM · 6.8 Integer-onderloop in de cupsRasterReadPixels-functie in filter/raster.c in CUPS vóór 2.0.2 stelt externe aanvallers in staat om niet-gespecificeerde impact te hebben via een verkeerd gevormd gecomprimeerd… Apple Canonical Fedoraproject Opensuse