CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0611 MEDIUM · 6.5 The administrative web-management portal in Cisco IX 8 (.0.1) and earlier on Cisco TelePresence IX5000 devices does not properly restrict the device-recovery account's access, which… Cisco
- CVE-2015-0610 MEDIUM · 4.3 Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic… Cisco
- CVE-2015-0608 HIGH · 7.1 Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of… Cisco
- CVE-2015-0606 MEDIUM · 4.9 The IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash) via unspecified commands, aka Bug ID CSCur59696. Cisco
- CVE-2015-0592 HIGH · 7.8 The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic… Cisco
- CVE-2015-0580 MEDIUM · 6.5 Meerdere kwetsbaarheden voor SQL-injectie in de ACS View-rapportage-interfacepagina's in Cisco Secure Access Control System (ACS) vóór patch 5.5 7 stellen externe geverifieerde beheerders in staat… Cisco
- CVE-2014-3365 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Prime Security Manager (PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via… Cisco
- CVE-2014-2153 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in INSERT pages in Cisco Prime Infrastructure allow remote attackers to inject arbitrary web script or HTML via unspecified parameters,… Cisco
- CVE-2014-2152 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allows remote attackers to hijack the authentication of arbitrary users, aka… Cisco
- CVE-2014-2147 MEDIUM · 4.3 The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers… Cisco
- CVE-2015-1582 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML… Web-dorado
- CVE-2015-1581 MEDIUM · 6.8 Meerdere CSRF-kwetsbaarheden (cross-site request forgery) in de Mobile Domain-plugin 1.5.2 voor WordPress stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor… Mobile Domain Project
- CVE-2015-1580 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests… Redirection Project
- CVE-2015-1579 MEDIUM · 5.0 Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the… Elegantthemes
- CVE-2015-1578 MEDIUM · 5.8 Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL… Yuba
- CVE-2015-1577 MEDIUM · 6.4 Directory traversal-kwetsbaarheid in u5admin/deletefile.php in u5CMS vóór 3.9.4 stelt externe aanvallers in staat om naar willekeurige bestanden te schrijven via een (1) .. (dot dot)… Yuba
- CVE-2015-1576 HIGH · 7.5 Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter to (1) copy2.php, (2) localize.php,… Yuba
- CVE-2015-1575 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via the (1) c, (2) i,… Yuba
- CVE-2015-1518 HIGH · 7.5 SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter. Redaxscript
- CVE-2015-1172 HIGH · 7.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in admin/upload-file.php in het Holding Pattern-thema (ook bekend als holding_pattern) 0.6 en eerder voor WordPress stelt externe aanvallers… Holding Pattern Project
- CVE-2015-0070 MEDIUM · 4.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers inhoud van een ander (1) domein of (2) zone lezen via een vervaardigde… Microsoft
- CVE-2015-0069 MEDIUM · 4.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers het ASLR-beveiligingsmechanisme omzeilen via een vervaardigde website, ook bekend als 'Internet Explorer ASLR Bypass Vulnerability'. Microsoft
- CVE-2015-0068 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0067 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2015-0066 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2015-0065 HIGH · 9.3 Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka… Microsoft
- CVE-2015-0064 HIGH · 9.3 Met Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer en… Microsoft
- CVE-2015-0063 HIGH · 9.3 Microsoft Excel 2007 SP3; de proofing-tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1 en RT; Excel Viewer; en Office Compatibility Pack… Microsoft
- CVE-2015-0062 HIGH · 7.2 Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1… Microsoft
- CVE-2015-0061 MEDIUM · 4.3 Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Microsoft
- CVE-2015-0060 MEDIUM · 4.7 De font mapper in win32k.sys in de kernel-modus stuurprogramma's in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1,… Microsoft
- CVE-2015-0059 MEDIUM · 6.9 win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2,… Microsoft
- CVE-2015-0058 HIGH · 7.2 Dubbele gratis kwetsbaarheid in win32k.sys in de kernel-modus stuurprogramma's in Microsoft Windows 8.1, Windows Server 2012 R2 en Windows RT 8.1 stelt lokale gebruikers in… Microsoft
- CVE-2015-0057 HIGH · 7.2 win32k.sys in de kernel-modus stuurprogramma's in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 en R2 SP1, Windows 7 SP1, Windows… Microsoft
- CVE-2015-0055 MEDIUM · 4.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Microsoft
- CVE-2015-0054 MEDIUM · 4.3 Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability." Microsoft
- CVE-2015-0053 HIGH · 9.3 Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0052 HIGH · 9.3 Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0051 MEDIUM · 4.3 Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability." Microsoft
- CVE-2015-0050 HIGH · 9.3 Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0049 HIGH · 9.3 Microsoft Internet Explorer 8 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0048 HIGH · 9.3 Met Microsoft Internet Explorer 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2015-0046 HIGH · 9.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0045 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 8 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2015-0044 HIGH · 9.3 Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0043 HIGH · 9.3 Met Microsoft Internet Explorer 8 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2015-0042 HIGH · 9.3 Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0041 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2015-0040 HIGH · 9.3 Met Microsoft Internet Explorer 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2015-0039 HIGH · 9.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft