CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0327 HIGH · 10.0 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux… Adobe Apple Microsoft Linux
- CVE-2015-0326 HIGH · 10.0 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause… Adobe Apple Microsoft Linux
- CVE-2015-0325 HIGH · 10.0 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to cause… Adobe Linux Apple Microsoft
- CVE-2015-0324 HIGH · 10.0 Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows… Adobe Apple Microsoft Linux
- CVE-2015-0323 HIGH · 10.0 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux… Adobe Apple Microsoft Linux
- CVE-2015-0322 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows… Adobe Linux Apple Microsoft
- CVE-2015-0321 HIGH · 10.0 Adobe Flash Player vóór 13.0.0.269 en 14.x tot en met 16.x vóór 16.0.0.305 op Windows en OS X en vóór 11.2.202.442 op Linux stelt aanvallers… Adobe Linux Apple Microsoft
- CVE-2015-0320 HIGH · 10.0 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows… Adobe Linux Apple Microsoft
- CVE-2015-0319 HIGH · 10.0 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute… Adobe Linux Apple Microsoft
- CVE-2015-0318 HIGH · 10.0 Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attackers to execute… Adobe Apple Microsoft Linux
- CVE-2015-0317 HIGH · 10.0 Adobe Flash Player vóór 13.0.0.269 en 14.x tot en met 16.x vóór 16.0.0.305 op Windows en OS X en vóór 11.2.202.442 op Linux stelt aanvallers… Adobe Linux Apple Microsoft
- CVE-2015-0316 HIGH · 10.0 Adobe Flash Player vóór 13.0.0.269 en 14.x tot en met 16.x vóór 16.0.0.305 op Windows en OS X en vóór 11.2.202.442 op Linux stelt aanvallers… Adobe Linux Apple Microsoft
- CVE-2015-0315 HIGH · 10.0 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 13.0.0.269 en 14.x tot en met 16.x vóór 16.0.0.305 op Windows en OS X en vóór 11.2.202.442 op… Adobe Apple Microsoft Linux
- CVE-2015-0314 HIGH · 10.0 Adobe Flash Player vóór 13.0.0.269 en 14.x tot en met 16.x vóór 16.0.0.305 op Windows en OS X en vóór 11.2.202.442 op Linux stelt aanvallers… Adobe Linux Apple Microsoft
- CVE-2015-1482 MEDIUM · 5.0 Ansible Tower (ook bekend als Ansible UI) vóór 2.0.5 stelt externe aanvallers in staat om authenticatie te omzeilen en gevoelige informatie te verkrijgen via een… Ansible
- CVE-2015-1481 MEDIUM · 6.5 Ansible Tower (ook bekend als Ansible UI) vóór 2.0.5 stelt externe organisatiebeheerders in staat om privileges te verkrijgen door een superuser-account aan te maken. Ansible
- CVE-2014-9562 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in display_dialog.php in M2 OptimalSite 0.1 en 2.4 stelt externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via… M2 Technologies
- CVE-2014-9049 MEDIUM · 4.0 The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote authenticated users to obtain all valid session IDs via an… Owncloud
- CVE-2014-9048 MEDIUM · 5.0 The documents application in ownCloud Server 6.x before 6.0.6 and 7.x before 7.0.3 allows remote attackers to bypass the password-protection for shared files via the… Owncloud
- CVE-2014-9047 MEDIUM · 4.3 Multiple unspecified vulnerabilities in the preview system in ownCloud 6.x before 6.0.6 and 7.x before 7.0.3 allow remote attackers to read arbitrary files via unknown… Owncloud
- CVE-2014-9046 MEDIUM · 5.0 The OC_Util::getUrlContent function in ownCloud Server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to read arbitrary files via a file://… Owncloud
- CVE-2014-9045 MEDIUM · 5.0 The FTP backend in user_external in ownCloud Server before 5.0.18 and 6.x before 6.0.6 allows remote attackers to bypass intended authentication requirements via a crafted… Owncloud
- CVE-2014-9044 MEDIUM · 5.0 Asset Pipeline in ownCloud 7.x before 7.0.3 uses an MD5 hash of the absolute file paths of the original CSS and JS files as the… Owncloud
- CVE-2014-9043 MEDIUM · 5.0 The user_ldap (aka LDAP user and group backend) application in ownCloud before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 allows remote attackers to bypass… Owncloud
- CVE-2014-9042 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de importfunctionaliteit in de bladwijzertoepassing in ownCloud vóór 5.0.18, 6.x vóór 6.0.6 en 7.x vóór 7.0.3 stelt op afstand geverifieerde… Owncloud
- CVE-2014-9041 MEDIUM · 6.8 The import functionality in the bookmarks application in ownCloud server before 5.0.18, 6.x before 6.0.6, and 7.x before 7.0.3 does not validate CSRF tokens, which… Owncloud
- CVE-2014-5341 MEDIUM · 4.3 The SFTP external storage driver (files_external) in ownCloud Server before 6.0.5 validates the RSA Host key after login, which allows remote attackers to obtain sensitive… Owncloud
- CVE-2015-1480 MEDIUM · 4.0 ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/AJaxServlet… Manageengine
- CVE-2015-1479 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in rapporten/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) vóór 9.0 build 9031 stelt externe geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren… Zohocorp
- CVE-2015-1478 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the view parameter… Cmsjunkie
- CVE-2015-1477 HIGH · 7.5 SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad… Cmsjunkie
- CVE-2015-1476 HIGH · 7.5 Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username… Ecommercemajor Project
- CVE-2015-1475 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in my little forum 2.3.3, 2.2, and 1.7 allow remote attackers to inject arbitrary web script or HTML via the… Mylittleforum
- CVE-2015-1437 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Asus RT-N10+ D1 router with firmware 2.1.1.1.70 allow remote attackers to inject arbitrary web script or HTML via the… Asus
- CVE-2014-9331 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in ZOHO ManageEngine Desktop Central vóór 9 build 90130 stelt externe aanvallers in staat om de authenticatie van beheerders te… Zohocorp
- CVE-2014-7864 HIGH · 7.5 Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 build 11400 and IT360 10.5 and earlier allow… Zohocorp
- CVE-2015-1469 HIGH · 9.0 time.htm in the web interface on SerVision HVG Video Gateway devices with firmware through 2.2.26a100 allows remote authenticated users to gain privileges by leveraging a… Servision
- CVE-2015-0930 HIGH · 10.0 The web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a100 has a hardcoded administrative password, which makes it easier for remote attackers… Servision
- CVE-2015-0929 HIGH · 10.0 time.htm in the web interface on SerVision HVG Video Gateway devices with firmware before 2.2.26a78 allows remote attackers to bypass authentication and obtain administrative access… Servision
- CVE-2015-0599 MEDIUM · 4.3 The web interface in Cisco Integrated Management Controller in Cisco Unified Computing System (UCS) on C-Series Rack Servers does not properly restrict use of IFRAME… Cisco
- CVE-2014-8021 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Cisco AnyConnect Secure Mobility Client 3.1(.02043) and earlier and Cisco HostScan Engine 3.1(.05183) and earlier allows remote attackers to inject… Cisco
- CVE-2014-8013 MEDIUM · 4.9 De TACACS+ -opdrachtautorisatie-implementatie in Cisco NX-OS stelt lokale gebruikers in staat om een denial of service (herladen van het apparaat) te veroorzaken via een lange… Cisco
- CVE-2015-1463 MEDIUM · 5.0 ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, related to an "incorrect compiler optimization." Clamav Fedoraproject
- CVE-2015-1462 HIGH · 7.5 ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "heap out of bounds condition." Fedoraproject Clamav
- CVE-2015-1461 HIGH · 7.5 ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew packer file, related to a "heap… Fedoraproject Clamav
- CVE-2015-1460 HIGH · 7.5 Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted packet. Huawei
- CVE-2015-1459 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Fortinet FortiAuthenticator 3.0.0 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de bewerkingsparameter naar cert/scep/. Fortinet
- CVE-2015-1458 MEDIUM · 6.9 Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tmp/privexec/dbgcore_enable_shell_access and executing the "shell" command. Fortinet
- CVE-2015-1457 MEDIUM · 4.9 Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command. Fortinet
- CVE-2015-1456 MEDIUM · 4.0 Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/. Fortinet