CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-9669 MEDIUM · 6.8 Meerdere integer overflows in sfnt/ttcmap.c in FreeType vóór 2.5.4 stellen externe aanvallers in staat om een denial of service (buiten het bereik lezen of geheugenbeschadiging)… Canonical Freetype Redhat Oracle
- CVE-2014-9668 HIGH · 7.5 De functie woff_open_font in sfnt/sfobjs.c in FreeType before 2.5.4 gaat door met offset+lengteberekeningen zonder lengtewaarden te beperken, waardoor externe aanvallers een denial of service (integer… Opensuse Fedoraproject Canonical Freetype
- CVE-2014-9667 MEDIUM · 6.8 sfnt/ttload.c in FreeType vóór 2.5.4 gaat door met offset+lengteberekeningen zonder de waarden te beperken, waardoor externe aanvallers een denial of service (integer overflow en out-of-bounds… Debian Canonical Fedoraproject Freetype
- CVE-2014-9666 MEDIUM · 6.8 The tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count-to-size association without restricting the count value, which allows remote attackers to cause… Opensuse Oracle Canonical Debian
- CVE-2014-9665 HIGH · 7.5 The Load_SBit_Png function in sfnt/pngshim.c in FreeType before 2.5.4 does not restrict the rows and pitch values of PNG data, which allows remote attackers to… Fedoraproject Canonical Freetype Opensuse
- CVE-2014-9664 MEDIUM · 6.8 FreeType vóór 2.5.4 controleert niet op het einde van de gegevens tijdens bepaalde parseeracties, waardoor externe aanvallers een denial of service kunnen veroorzaken (buiten het… Redhat Debian Opensuse Canonical
- CVE-2014-9663 HIGH · 7.5 The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers… Freetype Debian Opensuse Fedoraproject
- CVE-2014-9662 HIGH · 7.5 cff/cf2ft.c in FreeType before 2.5.4 does not validate the return values of point-allocation functions, which allows remote attackers to cause a denial of service (heap-based… Opensuse Debian Canonical Fedoraproject
- CVE-2014-9661 HIGH · 7.5 type42/t42parse.c in FreeType vóór 2.5.4 is niet van mening dat scannen onvolledig kan zijn zonder een fout te veroorzaken, waardoor externe aanvallers een denial of… Canonical Debian Redhat Freetype
- CVE-2014-9660 HIGH · 7.5 The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial… Opensuse Canonical Debian Oracle
- CVE-2014-9659 HIGH · 7.5 cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers… Oracle Freetype Fedoraproject Opensuse
- CVE-2014-9658 HIGH · 7.5 The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service… Oracle Canonical Fedoraproject Freetype
- CVE-2014-9657 HIGH · 7.5 De functie tt_face_load_hdmx in truetype/ttpload.c in FreeType vóór 2.5.4 stelt geen minimale recordgrootte vast, waardoor externe aanvallers een denial of service (buiten het bereik lezen)… Opensuse Redhat Oracle Fedoraproject
- CVE-2014-9656 HIGH · 7.5 The tt_sbit_decoder_load_image function in sfnt/ttsbit.c in FreeType before 2.5.4 does not properly check for an integer overflow, which allows remote attackers to cause a denial… Fedoraproject Freetype Debian Opensuse
- CVE-2015-0072 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script… Microsoft
- CVE-2015-0871 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Mrs. Shiromuku Perl CGI shiromuku(u1)GUESTBOOK 1.62 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified… Shiromuku
- CVE-2015-0602 MEDIUM · 5.0 De mobiliteitsuitbreiding op Cisco Unified IP 9900-telefoons met firmware 9.4(.1) en eerder stelt externe aanvallers in staat om gevoelige informatie te verkrijgen door het netwerk… Cisco
- CVE-2015-0600 MEDIUM · 5.0 De mobiliteitsuitbreiding op Cisco Unified IP 9900-telefoons met firmware 9.4(.1) en eerder stelt externe aanvallers in staat om een denial of service (afmelden) te veroorzaken… Cisco
- CVE-2015-0589 HIGH · 9.0 The administrative web interface in Cisco WebEx Meetings Server 1.0 through 1.5 allows remote authenticated users to execute arbitrary OS commands with root privileges via… Cisco
- CVE-2014-9203 MEDIUM · 5.0 Buffer overflow in the Field Device Tool (FDT) Frame application in the HART Device Type Manager (DTM) library, as used in MACTek Bullet DTM 1.00.0,… Ge Mactek
- CVE-2015-0605 MEDIUM · 4.3 Met de uuencode-inspectie-engine in Cisco AsyncOS op Cisco Email Security Appliance (ESA) -apparaten 8.5 en eerder kunnen externe aanvallers beoogde inhoudsbeperkingen omzeilen via een vervaardigde… Cisco
- CVE-2015-0604 MEDIUM · 5.0 The web framework on Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allows remote attackers to upload files to arbitrary locations on a… Cisco
- CVE-2015-0603 MEDIUM · 4.6 Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier use weak permissions for unspecified files, which allows local users to cause a denial of… Cisco
- CVE-2015-0601 MEDIUM · 4.6 Cisco Unified IP 9900 phones with firmware 9.4(.1) and earlier allow local users to cause a denial of service (device reload) via crafted commands, aka… Cisco
- CVE-2013-5557 MEDIUM · 6.3 The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier allows remote authenticated users to… Cisco
- CVE-2015-1514 HIGH · 7.5 Meerdere SQL-injectiekwetsbaarheden in FancyFon FAMOC vóór 3.17.4 stellen (1) externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de device ID REST parameter… Fancyfon
- CVE-2015-1513 HIGH · 7.5 SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username. Siphon
- CVE-2015-1512 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the (1) LoginForm[username] to… Fancyfon
- CVE-2015-1467 HIGH · 7.5 Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) language[] or… Fork-cms
- CVE-2015-1444 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de frontend voor webbeheer in het httpd-pakket in fli4l vóór 3.10.1 en 4.0 vóór 2015-01-30 stellen externe aanvallers in… Fli4l
- CVE-2015-1442 HIGH · 7.5 SQL injection vulnerability in views/zero_transact_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote authenticated users to execute arbitrary SQL commands via… Aas9
- CVE-2015-1305 MEDIUM · 6.9 McAfee Data Loss Prevention Endpoint (DLPe) vóór 9.3.400 stelt lokale gebruikers in staat om naar willekeurige geheugenlocaties te schrijven en bijgevolg privileges te verkrijgen, via… Mcafee Microsoft
- CVE-2014-9643 HIGH · 7.2 K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain… K7computing
- CVE-2014-9642 HIGH · 7.2 bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write data to arbitrary memory locations, and consequently… Bullguard
- CVE-2014-9641 HIGH · 7.2 The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write to arbitrary memory locations, and… Trendmicro
- CVE-2014-9636 MEDIUM · 5.0 Unzip 6.0 stelt externe aanvallers in staat een denial-of-service-aanval (lezen of schrijven buiten de toegestane grenzen en crash) uit te voeren via een extra veld… Unzip Project Canonical Debian Fedoraproject
- CVE-2014-9632 HIGH · 7.2 The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.5315 allows local users to… Avg
- CVE-2015-1212 HIGH · 7.5 Meerdere niet-gespecificeerde kwetsbaarheden in Google Chrome vóór 40.0.2214.111 op Windows, OS X en Linux en vóór 40.0.2214.109 op Android stellen aanvallers in staat om een… Google Apple Linux Microsoft
- CVE-2015-1211 HIGH · 7.5 The OriginCanAccessServiceWorkers function in content/browser/service_worker/service_worker_dispatcher_host.cc in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android does not properly restrict… Google Apple Linux Microsoft
- CVE-2015-1210 MEDIUM · 5.0 The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and… Google Apple Linux Microsoft
- CVE-2015-1209 HIGH · 7.5 Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.111 on Windows, OS X,… Google Apple Linux Microsoft
- CVE-2014-9354 MEDIUM · 4.0 NetApp OnCommand Balance vóór 4.2P3 stelt lokale gebruikers in staat om gevoelige informatie te verkrijgen via niet-gespecificeerde vectoren met betrekking tot cleartext-opslag. Netapp
- CVE-2014-9353 HIGH · 10.0 NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecified vectors. Netapp
- CVE-2014-5332 MEDIUM · 6.9 Raceconditie in NVMap in NVIDIA Tegra Linux Kernel 3.10 stelt lokale gebruikers in staat om privileges te verkrijgen via een vervaardigde NVMAP_IOC_CREATE IOCTL-aanroep, die een… Linux
- CVE-2014-0605 HIGH · 10.0 Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors… Attachmate
- CVE-2014-0604 HIGH · 10.0 Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to execute arbitrary code via unspecified vectors… Attachmate
- CVE-2014-0603 HIGH · 10.0 The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (memory corruption) and execute arbitrary… Attachmate
- CVE-2015-0330 HIGH · 10.0 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute… Adobe Apple Microsoft Linux
- CVE-2015-0329 HIGH · 10.0 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2015-0328 HIGH · 10.0 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause… Adobe Apple Microsoft Linux