CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-9468 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in InstantASP InstantForum.NET 4.1.3, 4.1.2, 4.1.1, 4.0.0, 4.1.0 en 3.4.0 stellen externe aanvallers in staat om willekeurig webscript of HTML… Instantasp
- CVE-2014-9465 MEDIUM · 5.0 senddocument.php in Zarafa WebApp before 2.0 beta 3 en WebAccess in Zarafa Collaboration Platform (ZCP) 7.x before 7.1.12 beta 1 en 7.2.x before 7.2.0 beta… Fedoraproject Zarafa
- CVE-2014-8690 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Exponent CMS vóór 2.1.4 patch 6, 2.2.x vóór 2.2.3 patch 9 en 2.3.x vóór 2.3.1 patch 4 stellen externe… Exponentcms
- CVE-2014-8165 HIGH · 10.0 scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object. Powerpc-utils Project
- CVE-2014-1832 LOW · 2.1 Met Phusion Passenger 4.0.37 kunnen lokale gebruikers naar bepaalde bestanden en mappen schrijven via een symlink-aanval op (1) control_process.pid of een (2) generatie-* bestand. OPMERKING:… Phusion
- CVE-2014-1831 LOW · 2.1 Met Phusion Passenger vóór 4.0.37 kunnen lokale gebruikers naar bepaalde bestanden en mappen schrijven via een symlink-aanval op (1) control_process.pid of een (2) generatie-* bestand. Phusion
- CVE-2012-6687 MEDIUM · 5.0 FastCGI (aka fcgi and libfcgi) 2.4.0 allows remote attackers to cause a denial of service (segmentation fault and crash) via a large number of connections. Fastcgi
- CVE-2014-9423 MEDIUM · 5.0 De functie svcauth_gss_accept_sec_context in lib/rpc/svc_auth_gss.c in MIT Kerberos 5 (ook bekend als krb5) 1.11.x tot en met 1.11.5, 1.12.x tot en met 1.12.2 en 1.13.x… Mit
- CVE-2014-9422 MEDIUM · 6.1 The check_rpcsec_auth function in kadmin/server/kadm_rpc_svc.c in kadmind in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 allows remote authenticated… Mit
- CVE-2014-9421 HIGH · 9.0 The auth_gssapi_unwrap_data function in lib/rpc/auth_gssapi_misc.c in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial… Mit
- CVE-2014-6304 MEDIUM · 5.0 Met het CSS-bestand Form Controls in PNMsoft Sequence Kinetics vóór 7.7 kunnen aanvallers op afstand gevoelige broncode-informatie verkrijgen via niet-gespecificeerde vectoren. Pnmsoft
- CVE-2014-6303 MEDIUM · 5.0 The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 do not properly detect recursion during entity expansion, which allows remote attackers to cause a… Pnmsoft
- CVE-2014-6302 MEDIUM · 5.0 The Monitoring Administration pages in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to read arbitrary files via an XML external entity declaration in conjunction… Pnmsoft
- CVE-2014-6301 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the tables-management module in PNMsoft Sequence Kinetics before 7.7 allow remote attackers to inject arbitrary web script or HTML… Pnmsoft
- CVE-2014-5352 HIGH · 9.0 The krb5_gss_process_context_token function in lib/gssapi/krb5/process_context_token.c in the libgssapi_krb5 library in MIT Kerberos 5 (aka krb5) through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does… Mit
- CVE-2015-1349 MEDIUM · 5.4 named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are enabled, allows remote attackers… Isc
- CVE-2014-6147 LOW · 2.1 IBM Flex System Manager (FSM) 1.1.xx, 1.2.0.x, 1.2.1.x, 1.3.0.0, 1.3.1.0 en 1.3.2.0 stelt lokale gebruikers in staat om gevoelige informatie te verkrijgen en daardoor privileges… Ibm
- CVE-2014-5286 MEDIUM · 6.4 The ActiveMatrix Policy Manager Authentication module in TIBCO ActiveMatrix Policy Agent 3.x before 3.1.2, ActiveMatrix Policy Manager 3.x before 3.1.2, ActiveMatrix Management Agent 1.x before… Tibco
- CVE-2015-0626 MEDIUM · 4.3 The SOAP interface in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug… Cisco
- CVE-2015-0623 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Administrator report page on Cisco Web Security Appliance (WSA) devices allows remote attackers to inject arbitrary web script or… Cisco
- CVE-2015-0622 HIGH · 7.1 The Wireless Intrusion Detection (aka WIDS) functionality on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to cause a denial of service (device outage)… Cisco
- CVE-2015-1358 MEDIUM · 5.0 De module voor extern beheer in de (1) Multi Panels, (2) Comfort Panels en (3) RT Advanced-functionaliteit in Siemens SIMATIC WinCC (Tia Portal) vóór 13… Siemens
- CVE-2015-1356 MEDIUM · 4.4 Siemens SIMATIC STAP 7 (Tia Portal) vóór 13 SP1 bepaalt de rechten van een gebruiker op basis van projectbestandvelden die geen integriteitsbescherming bieden, waardoor aanvallers… Siemens
- CVE-2015-1355 LOW · 2.1 Siemens SIMATIC STEP 7 (TIA Portal) before 13 SP1 uses a weak password-hash algorithm, which makes it easier for local users to determine cleartext passwords… Siemens
- CVE-2015-0621 HIGH · 7.8 Cisco TelePresence MCU-apparaten met softwareversie 4.5(1.45) stellen externe aanvallers in staat een denial-of-service-aanval (herstart van het apparaat) uit te voeren via een niet-gespecificeerde reeks TCP-pakketten,… Cisco
- CVE-2015-0620 MEDIUM · 4.0 De XML-parser in Cisco TelePresence Management Suite (TMS) 14.3(.2) en eerder behandelt externe entiteiten niet correct, waardoor op afstand geverifieerde gebruikers een weigering van service… Cisco
- CVE-2015-0617 MEDIUM · 5.0 Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices allow remote attackers to cause a denial of service (CPU consumption and SNMP outage) via malformed… Cisco
- CVE-2015-0109 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.8, and Maximo Asset Management 7.1 through 7.1.1.8 and 7.2 for Tivoli IT Asset… Ibm
- CVE-2015-0108 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in IBM Maximo Asset Management 7.1 tot en met 7.1.1.8 en Maximo Asset Management 7.1 tot en met 7.1.1.8 en 7.2… Ibm
- CVE-2015-1621 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Webform prepopulate block module before 7.x-3.1 for Drupal allows remote authenticated users to inject arbitrary web script or HTML… Webform Prepopulate Block Project
- CVE-2015-1619 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Secure Web Mail Client user interface in McAfee Email Gateway (MEG) 7.6.x before 7.6.3.2, 7.5.x before 75.6, 7.0.x through… Mcafee
- CVE-2015-1618 MEDIUM · 4.0 The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to obtain sensitive password information via a crafted URL. Mcafee
- CVE-2015-1617 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated users to inject arbitrary web… Mcafee
- CVE-2015-1616 MEDIUM · 6.5 SQL injection vulnerability in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows remote authenticated ePO users to execute arbitrary SQL… Mcafee
- CVE-2015-1494 MEDIUM · 4.3 De FancyBox voor WordPress-plug-in vóór 3.0.3 voor WordPress beperkt de toegang niet goed, waardoor externe aanvallers cross-site scripting (XSS) -aanvallen kunnen uitvoeren via een mfbfw… Colorlib
- CVE-2015-0247 MEDIUM · 4.6 Heap-based buffer overflow in openfs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code via crafted block group descriptor… E2fsprogs Project Debian Canonical Fedoraproject
- CVE-2014-9466 MEDIUM · 4.0 Open-Xchange (OX) AppSuite en Server vóór 7.4.2-rev42, 7.6.0 vóór 7.6.0-rev36 en 7.6.1 vóór 7.6.1-rev14 behandelen mapmachtigingen niet correct, waardoor op afstand geverifieerde gebruikers bestanden kunnen… Open-xchange
- CVE-2014-8757 HIGH · 8.3 Met LG On-Screen Phone (OSP) vóór 4.3.010 kunnen externe aanvallers autorisatie omzeilen via een vervaardigd verzoek. Lg
- CVE-2014-8023 MEDIUM · 4.0 Cisco Adaptive Security Appliance (ASA) Software 9.2(.3) and earlier, when challenge-response authentication is used, does not properly select tunnel groups, which allows remote authenticated users… Cisco
- CVE-2014-6194 MEDIUM · 4.0 Directory traversal vulnerability in an unspecified web form in IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX007, Maximo Asset Management 7.5.0… Ibm
- CVE-2014-6102 LOW · 2.1 IBM Maximo Asset Management 7.1 through 7.1.1.13 and 7.5.0 before 7.5.0.6 IFIX008, Maximo Asset Management 7.5.0 through 7.5.0.3 and 7.5.1 through 7.5.1.2 for SmartCloud Control… Ibm
- CVE-2015-1613 MEDIUM · 4.0 RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API… Rhodecode
- CVE-2015-1501 MEDIUM · 6.8 The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via a UNC path to a… Solarwinds
- CVE-2015-1500 MEDIUM · 6.8 Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to… Solarwinds
- CVE-2015-1499 HIGH · 8.5 The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via… Samsung
- CVE-2015-1498 HIGH · 10.0 Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers… Persistent Systems
- CVE-2015-1497 HIGH · 10.0 radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to… Persistent Systems
- CVE-2015-1496 HIGH · 7.2 Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allows local users to gain privileges via unspecified vectors. Motorola
- CVE-2015-1495 MEDIUM · 6.8 Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in (1)… Motorola
- CVE-2015-1436 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the… Easing Slider Project