CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4486 HIGH · 10.0 IOAcceleratorFamily in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not properly handle resource lists and IOService userclient… Apple
- CVE-2014-4485 HIGH · 7.5 Buffer overflow in the XML parser in Foundation in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote… Apple
- CVE-2014-4484 HIGH · 7.5 FontParser in Apple iOS vóór 8.1.3, Apple OS X vóór 10.10.2 en Apple TV vóór 7.0.3 stelt externe aanvallers in staat om willekeurige code uit… Apple
- CVE-2014-4483 MEDIUM · 6.8 Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to execute arbitrary… Apple
- CVE-2014-4481 MEDIUM · 6.8 Integer-overloop in CoreGraphics in Apple iOS vóór 8.1.3, Apple OS X vóór 10.10.2 en Apple TV vóór 7.0.3 stelt externe aanvallers in staat om willekeurige… Apple
- CVE-2014-4480 HIGH · 10.0 Directory traversal vulnerability in afc in AppleFileConduit in Apple iOS before 8.1.3 and Apple TV before 7.0.3 allows attackers to access unintended filesystem locations by… Apple
- CVE-2014-4479 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 8.1.3; Apple Safari vóór 6.2.3, 7.x vóór 7.1.3 en 8.x vóór 8.0.3; en Apple TV vóór 7.0.3, stelt… Apple
- CVE-2014-4477 MEDIUM · 6.8 WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows… Apple
- CVE-2014-4476 MEDIUM · 6.8 WebKit, as used in Apple iOS before 8.1.3; Apple Safari before 6.2.3, 7.x before 7.1.3, and 8.x before 8.0.3; and Apple TV before 7.0.3, allows… Apple
- CVE-2014-4467 MEDIUM · 4.3 WebKit, as used in Apple iOS before 8.1.3, does not properly determine scrollbar boundaries during the rendering of FRAME elements, which allows remote attackers to… Apple
- CVE-2015-1044 LOW · 3.3 vmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware ESXi 5.0 through 5.5 allows attackers to… Vmware
- CVE-2015-1043 LOW · 3.3 The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x… Vmware
- CVE-2014-8370 MEDIUM · 6.4 VMware Workstation 10.x vóór 10.0.5, VMware Player 6.x vóór 6.0.5, VMware Fusion 6.x vóór 6.0.5 en VMware ESXi 5.0 tot en met 5.5 stellen gebruikers… Vmware
- CVE-2015-1424 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in Gecko CMS 2.2 en 2.3 stelt externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken… Jakweb
- CVE-2015-1423 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote administrators to execute arbitrary SQL commands via the (1) jak_delete_log[] or (2) ssp… Jakweb
- CVE-2015-1422 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Gecko CMS 2.2 and 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) horder[],… Jakweb
- CVE-2015-0236 LOW · 3.5 libvirt before 1.2.12 allow remote authenticated users to obtain the VNC password by using the VIR_DOMAIN_XML_SECURE flag with a crafted (1) snapshot to the virDomainSnapshotGetXMLDesc… Mageia Redhat Opensuse Canonical
- CVE-2014-8895 MEDIUM · 4.3 IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 vóór 3.3.2.3 en 3.4.1 vóór 3.4.1.1 stelt externe aanvallers in staat om beoogde toegangsbeperkingen te omzeilen en de afbeeldingsbestanden… Ibm
- CVE-2014-8894 MEDIUM · 4.9 Open redirect vulnerability in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allows remote authenticated users to redirect users to arbitrary… Ibm
- CVE-2014-8893 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in (1) mainpage.jsp and (2) GetImageServlet.img in IBM TRIRIGA Application Platform 3.2.1.x, 3.3.2 before 3.3.2.3, and 3.4.1 before 3.4.1.1 allow… Ibm
- CVE-2015-0586 HIGH · 7.8 The Network-Based Application Recognition (NBAR) protocol implementation in Cisco IOS 15.3(100)M and earlier on Cisco 2900 Integrated Services Router (aka Cisco Internet Router) devices allows… Cisco
- CVE-2015-0581 HIGH · 7.5 Met de XML-parser in Cisco Prime Service Catalog vóór 10.1 kunnen op afstand geverifieerde gebruikers willekeurige bestanden lezen of een denial of service (CPU- en… Cisco
- CVE-2015-0312 HIGH · 9.3 Dubbele gratis kwetsbaarheid in Adobe Flash Player vóór 13.0.0.264 en 14.x tot 16.x vóór 16.0.0.296 op Windows en OS X en vóór 11.2.202.440 op Linux… Adobe Linux Microsoft Apple
- CVE-2014-8920 HIGH · 7.2 Bufferoverloop in het Data Transfer Program in IBM i Access 5770-XE1 5R4, 6.1 en 7.1 op Windows stelt lokale gebruikers in staat om privileges te… Ibm
- CVE-2014-8917 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in (1) dojox/form/resources/uploader.swf (aka upload.swf), (2) dojox/form/resources/fileuploader.swf (aka fileupload.swf), (3) dojox/av/resources/audio.swf, en (4) dojox/av/resources/video.swf in de IBM Dojo Toolkit, zoals… Ibm
- CVE-2015-0235 HIGH · 10.0 Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors… Gnu Oracle Debian Redhat
- CVE-2015-1419 MEDIUM · 5.0 Unspecified vulnerability in vsftpd 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing. Opensuse Vsftpd Project
- CVE-2015-1376 MEDIUM · 4.0 pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via… Pixabay Images Project
- CVE-2015-1375 HIGH · 7.5 pixabay-images.php in de Pixabay Images-plug-in vóór 2.4 voor WordPress beperkt de toegang tot de uploadfunctionaliteit niet goed, waardoor aanvallers op afstand naar willekeurige bestanden kunnen… Pixabay Images Project
- CVE-2015-1182 HIGH · 7.5 The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked list,… Opensuse Polarssl
- CVE-2014-8154 HIGH · 7.5 The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a… Gnome Opensuse
- CVE-2014-5211 MEDIUM · 6.8 Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response. Attachmate
- CVE-2015-1374 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to hijack the authentication of administrators for requests that conduct (1)… Ferretcms Project
- CVE-2015-1373 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in admin.php in ferretCMS 1.0.4-alpha allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter… Ferretcms Project
- CVE-2015-1372 HIGH · 7.5 SQL-injectiekwetsbaarheid in ferretCMS 1.0.4-alpha stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de p-parameter in een updateactie naar admin.php. Ferretcms Project
- CVE-2015-1371 HIGH · 7.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in ferretCMS 1.0.4-alpha stelt externe beheerders in staat om willekeurige code uit te voeren door een bestand met… Ferretcms Project
- CVE-2015-1370 MEDIUM · 4.3 Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting (XSS) attacks via a vbscript tag in a… Marked Project
- CVE-2015-1369 HIGH · 7.5 SQL-injectiekwetsbaarheid in Sequelize before 2.0.0-rc7 voor Node.js stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de orderparameter. Sequelize Project
- CVE-2015-1368 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web script or HTML via the… Ansible
- CVE-2015-1367 HIGH · 7.5 SQL injection vulnerability in index.php in CatBot 0.4.2 allows remote attackers to execute arbitrary SQL commands via the lastcatbot parameter. Catbot Project
- CVE-2015-1366 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to inject arbitrary web script or HTML… Pixabay Images Project
- CVE-2015-1365 MEDIUM · 5.0 Directory traversal vulnerability in pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress allows remote attackers to write to arbitrary files via a ..… Pixabay Images Project
- CVE-2015-1364 HIGH · 7.5 SQL-injectiekwetsbaarheid in de getProfile-functie in system/profile.functions.php in Free Reprintables ArticleFR 3.0.5 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de gebruikersnaamparameter… Freereprintables
- CVE-2015-1363 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Free Reprintables ArticleFR 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the q parameter to search/v/. Freereprintables
- CVE-2015-1362 HIGH · 7.5 Bufferoverloop in het tabblad 35 mm aanpassen in Two Pilots Exif Pilot 4.7.2 stelt aanvallers op afstand in staat om willekeurige code uit te voeren… Two Pilots
- CVE-2015-1361 MEDIUM · 6.8 platform/image-decoders/ImageFrame.h in Blink, zoals gebruikt in Google Chrome vóór 40.0.2214.91, initialiseert geen variabele die wordt gebruikt in oproepen naar de Skia SkBitmap:: setAlphaType-functie, waardoor externe… Google
- CVE-2015-1360 HIGH · 7.5 Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact… Google
- CVE-2015-1359 MEDIUM · 6.8 Multiple off-by-one errors in fpdfapi/fpdf_font/font_int.h in PDFium, as used in Google Chrome before 40.0.2214.91, allow remote attackers to cause a denial of service (buffer overflow)… Google
- CVE-2015-0232 MEDIUM · 6.8 Met de functie exif_process_unicode in ext/exif/exif.c in PHP vóór 5.4.37, 5.5.x vóór 5.5.21 en 5.6.x vóór 5.6.5 kunnen externe aanvallers willekeurige code uitvoeren of een… Php
- CVE-2015-0231 HIGH · 7.5 Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary… Php