CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-1435 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the back parameter to… Mylittleforum
- CVE-2015-1434 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the (1) letter parameter in a… Mylittleforum
- CVE-2015-0268 MEDIUM · 4.9 The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to… Xen
- CVE-2015-0260 MEDIUM · 4.0 Met RhodeCode vóór 2.2.7 en Kallithea 0.1 kunnen op afstand geverifieerde gebruikers API-sleutels en andere gevoelige informatie verkrijgen via de get_repo API-methode. Kallithea-scm Rhodecode
- CVE-2014-9375 HIGH · 9.0 Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a ..… Lexmark
- CVE-2015-1608 MEDIUM · 4.0 Topline Opportunity Form (aka XLS Opp form) before 2015-02-15 does not properly restrict access to database-connection strings, which allows attackers to read the cleartext version… Topline Systems
- CVE-2015-1474 HIGH · 10.0 Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service (memory… Google
- CVE-2015-0609 HIGH · 7.1 Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote… Cisco
- CVE-2014-6137 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attackers to inject arbitrary web script… Ibm
- CVE-2014-6113 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Web Reports-component in IBM Tivoli Endpoint Manager 9.1 vóór 9.1.1229 stelt externe aanvallers in staat om willekeurig webscript of… Ibm
- CVE-2014-0227 MEDIUM · 6.4 java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an… Apache
- CVE-2015-1574 MEDIUM · 5.0 The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a "Content-Disposition: ;" header in… Google
- CVE-2014-7883 MEDIUM · 5.0 HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive information by reading the… Hp
- CVE-2015-0875 LOW · 1.8 The Ogaki Kyoritsu Bank Smartphone Passbook application 1.0.0 for Android creates a log file containing input data from the user, which allows attackers to obtain… Okb.co.jp
- CVE-2015-0519 LOW · 2.1 The InputAccel Database (IADB) installation process in EMC Captiva Capture 7.0 before patch 25 and 7.1 before patch 13 places a cleartext InputAccel (IA) SQL… Emc
- CVE-2015-0518 HIGH · 9.0 The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11… Emc
- CVE-2015-0517 MEDIUM · 4.0 De D2-API-component in EMC Documentum D2 3.1 tot en met SP1, 4.0 en 4.1 vóór 4.1 P22 en 4.2 vóór P11 plaatst de MD5-hash van… Emc
- CVE-2015-0931 MEDIUM · 6.8 Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1, when the Saxon XSLT parser is used, allows remote attackers to… Ektron
- CVE-2015-0923 MEDIUM · 5.0 De ContentBlockEx-methode in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 en 8.7 vóór 8.7sp2 en 9.0 vóór sp1 stelt externe aanvallers in staat om… Ektron
- CVE-2014-8911 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.0 and 2.0.1 before 2.0.1.2 FP002 IF003 and 2.0.3 before 2.0.3.2 FP002 allows remote attackers to inject… Ibm
- CVE-2014-6195 LOW · 1.9 The (1) Java GUI and (2) Web GUI components in the IBM Tivoli Storage Manager (TSM) Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX,… Ibm Linux Microsoft Oracle
- CVE-2014-4804 MEDIUM · 4.3 Curam Universal Access in IBM Curam Social Program Management 5.2 before SP6 EP6, 6.0 SP2 before EP26, 6.0.4.5 before iFix007, 6.0.5.4 before iFix005, and 6.0.5.5… Ibm
- CVE-2015-0255 MEDIUM · 6.4 X.Org Server (aka xserver and xorg-server) before 1.16.3 and 1.17.x before 1.17.1 allows remote attackers to obtain sensitive information from process memory or cause a… X.org Opensuse
- CVE-2015-0245 LOW · 1.9 D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate the source of ActivationFailure signals, which allows local users… Freedesktop Opensuse
- CVE-2014-8122 MEDIUM · 4.3 Race condition in JBoss Weld before 2.2.8 and 3.x before 3.0.0 Alpha3 allows remote attackers to obtain information from a previous conversation via vectors related… Redhat
- CVE-2014-7853 MEDIUM · 4.0 The JBoss Application Server (WildFly) JacORB subsystem in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 does not properly assign socket-binding-ref sensitivity classification to… Redhat
- CVE-2014-7849 MEDIUM · 4.0 The Role Based Access Control (RBAC) implementation in JBoss Enterprise Application Platform (EAP) 6.2.0 through 6.3.2 does not properly verify authorization conditions, which allows remote… Redhat
- CVE-2014-7827 LOW · 3.5 The org.jboss.security.plugins.mapping.JBossMappingManager implementation in JBoss Security in Red Hat JBoss Enterprise Application Platform (EAP) before 6.3.3 uses the default security domain when a security domain… Redhat
- CVE-2014-0154 MEDIUM · 5.0 oVirt Engine before 3.5.0 does not include the HTTPOnly flag in a Set-Cookie header for the session IDs, which makes it easier for remote attackers… Ovirt
- CVE-2014-0151 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in oVirt Engine vóór 3.5.0 beta2 stelt externe aanvallers in staat om de authenticatie van gebruikers te kapen voor verzoeken… Redhat
- CVE-2013-2027 MEDIUM · 4.6 Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via… Opensuse Jython Project
- CVE-2015-0873 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Homepage Decorator PerlTreeBBS 2.30 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Homepage Decorator
- CVE-2015-0593 HIGH · 7.1 The Zone-Based Firewall implementation in Cisco IOS 12.4(122)T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of… Cisco
- CVE-2014-8909 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in IBM WebSphere Portal 6.1.0.x tot en met 6.1.0.6 CF27, 6.1.5.x tot en met 6.1.5.3 CF27, 7.0.0.x tot en met 7.0.0.2… Ibm
- CVE-2014-8385 HIGH · 10.0 Buffer overflow on Advantech EKI-1200 gateways with firmware before 1.63 allows remote attackers to execute arbitrary code via unspecified vectors. Advantech
- CVE-2014-6185 HIGH · 7.2 dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library… Ibm
- CVE-2014-6154 HIGH · 7.8 Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for… Ibm Linux Microsoft
- CVE-2014-6139 MEDIUM · 4.0 The Search REST API in IBM Business Process Manager 8.0.1.3, 8.5.0.1, and 8.5.5.0 allows remote authenticated users to bypass intended access restrictions and perform task-instance… Ibm
- CVE-2014-4813 MEDIUM · 6.9 Race condition in the client in IBM Tivoli Storage Manager (TSM) 5.4.0.0 through 5.4.3.6, 5.5.0.0 through 5.5.4.3, 6.1.0.0 through 6.1.5.6, 6.2 before 6.2.5.4, 6.3 before… Ibm Linux
- CVE-2014-4803 LOW · 3.5 CRLF-injectiekwetsbaarheid in de Universal Access-implementatie in IBM Curam Social Program Management 6.0 SP2 vóór EP26, 6.0.4 vóór 6.0.4.5 iFix007 en 6.0.5 vóór 6.0.5.5 iFix003, wanneer… Ibm
- CVE-2014-4781 MEDIUM · 5.0 The alert module in IBM InfoSphere BigInsights 2.1.2 and 3.x before 3.0.0.2 allows remote attackers to obtain sensitive Alert management-services API information via a network-tracing… Ibm
- CVE-2014-4771 LOW · 3.5 IBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0.0.1 allows remote authenticated users to cause a denial of… Ibm
- CVE-2015-1546 MEDIUM · 5.0 Double free vulnerability in the get_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denial of service (crash) via a crafted… Openldap Opensuse Apple
- CVE-2015-1545 MEDIUM · 5.0 The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via… Openldap
- CVE-2015-1471 HIGH · 7.5 SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to the default URI. Pragyan Cms Project
- CVE-2015-1345 LOW · 2.1 The bmexec_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and crash) via… Gnu Opensuse
- CVE-2015-0227 MEDIUM · 5.0 Met Apache WSS4J vóór 1.6.17 en 2.x vóór 2.0.2 kunnen externe aanvallers de requireSignedEncryptedDataElements-configuratie omzeilen via een vectoren met betrekking tot "wrapping attacks". Apache
- CVE-2014-9512 MEDIUM · 6.4 rsync 3.1.1 stelt externe aanvallers in staat om via een symlink-aanval naar willekeurige bestanden te schrijven op een bestand in het synchronisatiepad. Samba Opensuse Oracle
- CVE-2014-8110 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remote attackers to inject arbitrary web script… Apache
- CVE-2015-0619 MEDIUM · 5.0 Geheugenlek in de geïntegreerde webserver in het WebVPN-subsysteem in Cisco Adaptive Security Appliance (ASA) -software stelt externe aanvallers in staat om een denial of service… Cisco