CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-9200 HIGH · 7.5 Stack-based buffer overflow in an unspecified DLL file in a DTM development kit in Schneider Electric Unity Pro, SoMachine, SoMove, SoMove Lite, Modbus Communication Library… Schneider-electric
- CVE-2014-8630 MEDIUM · 6.5 Bugzilla vóór 4.0.16, 4.1.x en 4.2.x vóór 4.2.12, 4.3.x en 4.4.x vóór 4.4.7, en 5.x vóór 5.0rc1 stelt op afstand geverifieerde gebruikers in staat om… Mozilla Fedoraproject
- CVE-2014-7270 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability on ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with… Asus
- CVE-2014-7269 MEDIUM · 6.5 ASUS JAPAN RT-AC87U routers with firmware 3.0.0.4.378.3754 and earlier, RT-AC68U routers with firmware 3.0.0.4.376.3715 and earlier, RT-AC56S routers with firmware 3.0.0.4.376.3715 and earlier, RT-N66U routers… Asus
- CVE-2014-7266 HIGH · 7.8 De kwetsbaarheid voor algoritmische complexiteit in Cybozu Remote Service Manager via 2.3.0 en 3.x tot 3.1.2 stelt externe aanvallers in staat om een denial of… Cybozu
- CVE-2015-0926 MEDIUM · 6.8 Labtech before 100.237 on Linux uses world-writable permissions for root-executed scripts, which allows local users to gain privileges by modifying a script file. Labtech Software
- CVE-2015-0870 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in hb.cgi in Nishishi Factory Fumy News Clipper 2.x vóór 2.5.0 stelt externe aanvallers in staat om willekeurig webscript of HTML… Nishishi
- CVE-2014-8268 MEDIUM · 6.4 QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request. Qpr
- CVE-2014-8267 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter. Qpr
- CVE-2014-8266 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML… Qpr
- CVE-2014-7288 HIGH · 9.0 Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line… Symantec
- CVE-2014-7287 MEDIUM · 5.0 De sleutelbeheercomponent in Symantec PGP Universal Server en Encryption Management Server vóór 3.3.2 MP7 stelt externe aanvallers in staat om onbedoelde inhoud in uitgaande e-mailberichten… Symantec
- CVE-2014-4632 MEDIUM · 4.3 VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar… Vmware
- CVE-2014-9161 HIGH · 9.3 CoolType.dll in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows, and 10.x through 10.1.13 and 11.x through 11.0.10 on OS… Adobe Apple Microsoft
- CVE-2014-8840 MEDIUM · 6.8 Met de iTunes Store-component in Apple iOS vóór 8.1.3 kunnen externe aanvallers een Safari-sandboxbeveiligingsmechanisme omzeilen door gebruik te maken van omleiding van een SSL-URL naar… Apple
- CVE-2014-8839 MEDIUM · 5.0 Spotlight in Apple OS X vóór 10.10.2 dwingt de configuratie Mail "Laad externe inhoud in berichten" niet af, waardoor externe aanvallers IP-adressen van ontvangers kunnen… Apple
- CVE-2014-8838 MEDIUM · 4.3 The Security component in Apple OS X before 10.10.2 does not properly process cached information about app certificates, which allows attackers to bypass the Gatekeeper… Apple
- CVE-2014-8837 HIGH · 9.3 Multiple unspecified vulnerabilities in the Bluetooth driver in Apple OS X before 10.10.2 allow attackers to execute arbitrary code in a privileged context via a… Apple
- CVE-2014-8836 HIGH · 10.0 The Bluetooth driver in Apple OS X before 10.10.2 allows attackers to execute arbitrary code in a privileged context or cause a denial of service… Apple
- CVE-2014-8835 HIGH · 9.3 The xpc_data_get_bytes function in libxpc in Apple OS X before 10.10.2 does not verify that a dictionary's Attributes key has the xpc_data data type, which… Apple
- CVE-2014-8834 LOW · 2.1 UserAccountUpdater in Apple OS X 10.10 before 10.10.2 stores a PDF document's password in a printing preference file, which allows local users to obtain sensitive… Apple
- CVE-2014-8833 LOW · 2.1 SpotlightIndex in Apple OS X vóór 10.10.2 voert deserialisatie niet correct uit tijdens toegang tot een machtigingscache, waardoor lokale gebruikers zoekresultaten kunnen lezen die zijn… Apple
- CVE-2014-8832 MEDIUM · 4.9 The indexing functionality in Spotlight in Apple OS X before 10.10.2 writes memory contents to an external hard drive, which allows local users to obtain… Apple
- CVE-2014-8831 MEDIUM · 5.0 security_taskgate in Apple OS X vóór 10.10.2 stelt aanvallers in staat om groep-ACL-beperkte sleutelhangeritems van willekeurige apps te lezen via een vervaardigde app met een… Apple
- CVE-2014-8830 MEDIUM · 6.8 Heap-based buffer overflow in SceneKit in Apple OS X before 10.10.2 allows remote attackers to execute arbitrary code or cause a denial of service (application… Apple
- CVE-2014-8829 HIGH · 7.5 SceneKit in Apple OS X vóór 10.10.2 stelt aanvallers in staat om willekeurige code uit te voeren of een denial of service (buiten het bereik… Apple
- CVE-2014-8828 HIGH · 7.5 Sandbox in Apple OS X before 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that includes a com.apple.sandbox segment in… Apple
- CVE-2014-8827 LOW · 2.1 LoginWindow in Apple OS X before 10.10.2 does not transition to the lock-screen state immediately upon being woken from sleep, which allows physically proximate attackers… Apple
- CVE-2014-8826 MEDIUM · 5.0 LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted… Apple
- CVE-2014-8825 HIGH · 7.2 The kernel in Apple OS X before 10.10.2 does not properly perform identitysvc validation of certain directory-service functionality, which allows local users to gain privileges… Apple
- CVE-2014-8824 HIGH · 10.0 The kernel in Apple OS X before 10.10.2 does not properly validate IODataQueue object metadata fields, which allows attackers to execute arbitrary code in a… Apple
- CVE-2014-8823 MEDIUM · 4.7 The IOUSBControllerUserClient::ReadRegister function in the IOUSB controller in IOUSBFamily in Apple OS X before 10.10.2 allows local users to read data from arbitrary kernel-memory locations… Apple
- CVE-2014-8822 HIGH · 10.0 Met IOHIDFamily in Apple OS X vóór 10.10.2 kunnen aanvallers willekeurige code uitvoeren in een kernelcontext of een denial of service (schrijven naar kernelgeheugen) veroorzaken… Apple
- CVE-2014-8821 HIGH · 7.2 The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and… Apple
- CVE-2014-8820 HIGH · 7.2 The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8819 and… Apple
- CVE-2014-8819 HIGH · 7.2 The Intel Graphics Driver in Apple OS X before 10.10.2 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2014-8820 and… Apple
- CVE-2014-8817 HIGH · 10.0 coresymbolicationd in CoreSymbolication in Apple OS X before 10.10.2 does not verify that expected data types are present in XPC messages, which allows attackers to… Apple
- CVE-2014-8816 MEDIUM · 6.8 CoreGraphics in Apple OS X before 10.10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash)… Apple
- CVE-2014-4499 LOW · 2.1 The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows local users… Apple
- CVE-2014-4498 MEDIUM · 4.7 The CPU Software in Apple OS X before 10.10.2 allows physically proximate attackers to modify firmware during the EFI update process by inserting a Thunderbolt… Apple
- CVE-2014-4497 HIGH · 10.0 Integer-ondertekeningsfout in IOBluetoothFamily in de Bluetooth-implementatie in Apple OS X vóór 10.10 stelt aanvallers in staat om willekeurige code uit te voeren in een bevoorrechte… Apple
- CVE-2014-4496 MEDIUM · 5.0 De interface mach_port_kobject in de kernel in Apple iOS vóór 8.1.3 en Apple TV vóór 7.0.3 beperkt de kerneladres- en heap-permutatie-informatie niet goed, waardoor het… Apple
- CVE-2014-4495 HIGH · 10.0 The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-only attribute of a… Apple
- CVE-2014-4494 MEDIUM · 6.8 Springplank in Apple iOS vóór 8.1.3 valideert handtekeningen niet goed bij het bepalen of de gebruiker een vertrouwensbeslissing voor een app moet nemen, waardoor aanvallers… Apple
- CVE-2014-4493 HIGH · 7.5 The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an… Apple
- CVE-2014-4492 HIGH · 7.5 libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected… Apple
- CVE-2014-4491 MEDIUM · 5.0 The extension APIs in the kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 do not prevent the… Apple
- CVE-2014-4489 HIGH · 10.0 IOHIDFamily in Apple iOS vóór 8.1.3, Apple OS X vóór 10.10.2 en Apple TV vóór 7.0.3 initialiseert de wachtrijen voor gebeurtenissen niet correct, waardoor aanvallers… Apple
- CVE-2014-4488 HIGH · 10.0 IOHIDFamily in Apple iOS vóór 8.1.3, Apple OS X vóór 10.10.2 en Apple TV vóór 7.0.3 valideert de metagegevens van de bronwachtrij niet correct, waardoor… Apple
- CVE-2014-4487 HIGH · 10.0 Buffer overflow in IOHIDFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows attackers to execute arbitrary code… Apple