CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-1455 HIGH · 7.5 Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it… Fortinet
- CVE-2015-1441 HIGH · 7.5 SQL-injectiekwetsbaarheid in Piwigo vóór 2.5.6, 2.6.x vóór 2.6.5 en 2.7.x vóór 2.7.3 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde… Piwigo
- CVE-2015-1433 MEDIUM · 4.3 program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote attackers to conduct cross-site scripting (XSS) attacks via the style attribute in… Roundcube Opensuse Fedoraproject
- CVE-2015-1428 HIGH · 7.5 Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to… Sefrengo
- CVE-2015-1405 HIGH · 7.5 SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Content Rating Extbase Project
- CVE-2015-1404 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de Content Rating Extbase extensie 2.0.3 en eerder voor TYPO3 stelt externe aanvallers in staat om willekeurig webscript of HTML… Content Rating Extbase Project
- CVE-2015-1403 HIGH · 7.5 SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Content Rating Project
- CVE-2015-1402 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via… Content Rating Project
- CVE-2015-1400 HIGH · 7.5 SQL-injectiekwetsbaarheid in search.php in NPD's Revolution 13 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de queryparameter. Npds
- CVE-2015-1384 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via… Banner Effect Header Project
- CVE-2015-1382 MEDIUM · 5.0 parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vectors related to an HTTP time… Debian Privoxy Opensuse
- CVE-2015-1381 MEDIUM · 5.0 Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of service (segmentation fault or memory consumption) via unspecified… Opensuse Debian Privoxy
- CVE-2015-1380 MEDIUM · 5.0 jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body. Privoxy Oracle Opensuse
- CVE-2015-1348 HIGH · 7.8 Op heap gebaseerde bufferoverloop in Aruba Instant (IAP) met firmware vóór 4.0.0.7 en 4.1.x vóór 4.1.1.2 stelt externe aanvallers in staat om een denial of… Arubanetworks
- CVE-2014-9633 HIGH · 7.5 The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device handle, which triggers a NULL pointer dereference. Comodo
- CVE-2014-9574 HIGH · 9.3 Directory traversal vulnerability in install.php in FluxBB before 1.5.8 allows remote attackers to include and execute arbitrary local install.php files via a .. (dot dot)… Fluxbb
- CVE-2014-9568 LOW · 2.1 puppetlabs-rabbitmq 3.0 through 4.1 stores the RabbitMQ Erlang cookie value in the facts of a node, which allows local users to obtain sensitive information as… Voxpupuli
- CVE-2014-9559 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in SnipSnap 0.5.2a, 1.0b1, and 1.0b2 allows remote attackers to inject arbitrary web script or HTML via the query parameter to… Snipsnap
- CVE-2014-9556 MEDIUM · 5.0 Integer-overloop in de qtmd_decompress-functie in libmspack 0.4 stelt externe aanvallers in staat om een denial of service (hang) te veroorzaken via een vervaardigd CAB-BESTAND, dat… Libmspack Project Opensuse
- CVE-2014-9328 HIGH · 7.5 ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition." Fedoraproject Clamav
- CVE-2014-8779 HIGH · 7.1 Pexip Infinity before 8 gebruikt dezelfde SSH-hostsleutels in de installaties van verschillende klanten, waardoor man-in-the-middle-aanvallers beheer- en conferentieknooppunten kunnen vervalsen door gebruik te maken van… Pexip
- CVE-2014-5360 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML… Landesk
- CVE-2015-1454 HIGH · 7.1 Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly validate certain certificates, which allows man-in-the-middle attackers to… Bluecoat
- CVE-2015-1453 MEDIUM · 5.0 De qm-klasse in Fortinet FortiClient 5.2.3.091 voor Android gebruikt een hardgecodeerde coderingssleutel van FoRtInEt!AnDrOiD, dat het voor aanvallers gemakkelijker maakt om wachtwoorden en mogelijk andere… Fortinet
- CVE-2015-1452 HIGH · 7.8 The Control and Provisioning of Wireless Access Points (CAPWAP) daemon in Fortinet FortiOS 5.0 Patch 7 build 4457 allows remote attackers to cause a denial… Fortinet
- CVE-2015-1451 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiOS 5.0 Patch 7 build 4457 allow remote authenticated users to inject arbitrary web script or HTML via… Fortinet
- CVE-2015-0223 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in Apache Qpid 0.30 en eerder stelt externe aanvallers in staat om toegangsbeperkingen op qpidd te omzeilen via onbekende vectoren, gerelateerd aan 0-10… Apache
- CVE-2014-8613 HIGH · 7.8 The sctp module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4 before p23 allows remote attackers to cause a denial… Freebsd
- CVE-2014-8612 MEDIUM · 4.6 Multiple array index errors in the Stream Control Transmission Protocol (SCTP) module in FreeBSD 10.1 before p5, 10.0 before p17, 9.3 before p9, and 8.4… Freebsd
- CVE-2014-0998 HIGH · 7.2 Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allows local users to cause a… Freebsd
- CVE-2015-1450 HIGH · 7.5 SQL injection vulnerability in Restaurant Biller allows remote attackers to execute arbitrary SQL commands via the cid parameter in a category action to index.php. Restaurantbiller
- CVE-2015-1449 HIGH · 10.0 Bufferoverloop in de geïntegreerde webserver op Siemens Ruggedcom WIN51xx-apparaten met firmware vóór SS4.4.4624.35, WIN52xx-apparaten met firmware vóór SS4.4.4624.35, WIN70xx-apparaten met firmware vóór BS4.4.4621.32 en WIN72xx-apparaten… Siemens
- CVE-2015-1448 HIGH · 10.0 The integrated management service on Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32,… Siemens
- CVE-2015-1393 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in de Photo Gallery-plug-in vóór 1.2.11 voor WordPress stelt op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via de asc_or_DESC-parameter… 10web
- CVE-2015-1385 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Blubrry PowerPress Podcasting-plug-in vóór 6.0.1 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Blubrry
- CVE-2015-1383 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the geo search widget in the Geo Mashup plugin before 1.8.3 for WordPress allows remote attackers to inject arbitrary web… Cyberhobo
- CVE-2015-1357 MEDIUM · 5.0 Siemens Ruggedcom WIN51xx devices with firmware before SS4.4.4624.35, WIN52xx devices with firmware before SS4.4.4624.35, WIN70xx devices with firmware before BS4.4.4621.32, and WIN72xx devices with firmware… Siemens
- CVE-2015-1049 MEDIUM · 6.8 The web server on Siemens SCALANCE X-200IRT switches with firmware before 5.2.0 allows remote attackers to hijack sessions via unspecified vectors. Siemens
- CVE-2015-0866 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Zoho ManageEngine SupportCenter Plus 7.9 before hotfix 7941 allow remote attackers to inject arbitrary web script or HTML via… Zohocorp
- CVE-2015-0597 MEDIUM · 5.0 The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs… Cisco
- CVE-2015-0596 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug… Cisco
- CVE-2015-0595 MEDIUM · 5.0 The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests,… Cisco
- CVE-2015-0512 MEDIUM · 5.8 Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an… Emc
- CVE-2014-8918 MEDIUM · 5.8 IBM Security AppScan Standard 8.x and 9.x before 9.0.1.1 FP1 does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Ibm
- CVE-2014-7882 MEDIUM · 5.5 Unspecified vulnerability in HP SiteScope 11.1x and 11.2x allows remote authenticated users to gain privileges via unknown vectors. Hp
- CVE-2014-6170 MEDIUM · 5.0 The HTTPInput node in IBM WebSphere Message Broker 7.0 before 7.0.0.8 and 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.4 allows remote attackers… Ibm
- CVE-2014-6141 HIGH · 8.5 IBM Tivoli Monitoring (ITM) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, 6.2.3 through FP05, and 6.3.0 before FP04 allows remote authenticated users to… Ibm
- CVE-2014-6136 MEDIUM · 5.0 IBM Security AppScan Standard 8.x en 9.x vóór 9.0.1.1 FP1 ondersteunt niet-versleutelde sessies, waarmee externe aanvallers gevoelige informatie kunnen verkrijgen door het netwerk te besnuffelen. Ibm
- CVE-2015-0869 HIGH · 7.8 I-O DATA DEVICE NP-BBRM routers allow remote attackers to cause a denial of service (SSDP reflection) via UPnP requests. I-o Data Device
- CVE-2015-0868 HIGH · 7.5 Unrestricted file upload vulnerability in Mrs. Shiromuku Perl CGI shiromuku(bu2)BBS before 2.91 allows remote attackers to execute arbitrary code by uploading an executable file. Shiromuku