CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-9650 MEDIUM · 5.0 CRLF injection vulnerability in the management plugin in RabbitMQ 2.1.0 through 3.4.x before 3.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP… Broadcom
- CVE-2014-9649 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de beheerplug-in in RabbitMQ 2.1.0 tot en met 3.4.x vóór 3.4.1 stelt externe aanvallers in staat om willekeurig webscript of… Broadcom
- CVE-2014-9648 MEDIUM · 4.3 components/navigation_interception/intercept_navigation_resource_throttle.cc in Google Chrome before 40.0.2214.91 on Android does not properly limit use of intent: URLs to open an application after navigation to a website,… Google
- CVE-2014-9647 MEDIUM · 6.8 Use-after-free vulnerability in PDFium, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or possibly have unspecified other… Google
- CVE-2014-9646 MEDIUM · 4.6 Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/google_chrome_distribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain… Google
- CVE-2014-9198 HIGH · 10.0 The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for… Schneider-electric
- CVE-2014-9197 HIGH · 10.0 The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows… Schneider-electric
- CVE-2015-1308 MEDIUM · 4.3 kde-workspace 4.2.0 and plasma-workspace before 5.1.95 allows remote attackers to obtain input events, and consequently obtain passwords, by leveraging access to the X server when… Kde
- CVE-2015-1307 MEDIUM · 4.3 plasma-workspace before 5.1.95 allows remote attackers to obtain passwords via a Trojan horse Look and Feel package. Kde
- CVE-2015-1179 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the… Infinite Automation Systems
- CVE-2015-1178 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in cart.php in X-Cart 5.1.8 en eerder stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Qualiteam
- CVE-2014-9573 MEDIUM · 6.0 SQL injection vulnerability in manage_user_page.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote administrators with FILE privileges to execute arbitrary SQL commands via… Mantisbt
- CVE-2014-9572 HIGH · 7.5 MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 does not properly restrict access to /*/install.php, which allows remote attackers to obtain database credentials via the install… Mantisbt
- CVE-2014-9571 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in admin/install.php in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2 allows remote attackers to inject arbitrary web script or HTML via… Mantisbt
- CVE-2014-8158 MEDIUM · 6.8 Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary… Jasper Project Debian Redhat Opensuse
- CVE-2014-8157 HIGH · 7.5 Off-by-one fout in de jpc_dec_process_sot-functie in JasPer 1.900.1 en eerder stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken of mogelijk… Opensuse Debian Redhat Jasper Project
- CVE-2014-8148 HIGH · 7.2 The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system… Opensuse Midgard-project
- CVE-2015-1347 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in client.inc.php in osTicket before 1.9.5.1 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Enhancesoft
- CVE-2015-1200 LOW · 2.1 Race condition in pxz 4.999.99 Beta 3 uses weak file permissions for the output file when compressing a file before changing the permission to match… Pxz Project
- CVE-2015-1180 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Web Reports in EventSentry 3.1.0 allows remote attackers to inject arbitrary web script or HTML via the pageId parameter… Eventsentry
- CVE-2015-1176 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in upload/scp/tickets.php in osTicket before 1.9.5 allows remote attackers to inject arbitrary web script or HTML via the status parameter in… Enhancesoft
- CVE-2014-9640 MEDIUM · 5.0 oggenc/oggenc.c in vorbis-tools 1.4.0 stelt externe aanvallers in staat om een denial of service (buiten het bereik lezen) te veroorzaken via een vervaardigd RAW-bestand. Xiph Opensuse
- CVE-2014-9639 MEDIUM · 5.0 Integer overflow in oggenc in vorbis-tools 1.4.0 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via een vervaardigd aantal kanalen… Xiph Fedoraproject Opensuse
- CVE-2014-9638 MEDIUM · 5.0 oggenc in vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (divide-by-zero error and crash) via a WAV file with the number of… Fedoraproject Opensuse Xiph
- CVE-2014-9623 MEDIUM · 4.0 OpenStack Glance 2014.2.x through 2014.2.1, 2014.1.3, and earlier allows remote authenticated users to bypass the storage quota and cause a denial of service (disk consumption)… Redhat Openstack
- CVE-2014-8802 MEDIUM · 5.0 De Pie Register-plug-in vóór 2.0.14 voor WordPress beperkt de toegang tot bepaalde functies in pie-register.php niet goed, waardoor externe aanvallers (1) een gebruiker kunnen toevoegen… Genetechsolutions
- CVE-2015-1346 HIGH · 7.5 Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow attackers to cause a denial of service or possibly… Google Chromium Canonical
- CVE-2015-1205 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Canonical Google Chromium
- CVE-2014-7948 MEDIUM · 4.3 The AppCacheUpdateJob::URLFetcher::OnResponseStarted function in content/browser/appcache/appcache_update_job.cc in Google Chrome before 40.0.2214.91 proceeds with AppCache caching for SSL sessions even if there is an X.509 certificate error,… Google
- CVE-2014-7947 MEDIUM · 5.0 OpenJPEG before r2944, as used in PDFium in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds read) via a… Google
- CVE-2014-7946 MEDIUM · 5.0 The RenderTable::simplifiedNormalFlowLayout function in core/rendering/RenderTable.cpp in Blink, as used in Google Chrome before 40.0.2214.91, skips captions during table layout in certain situations, which allows remote… Google
- CVE-2014-7945 MEDIUM · 5.0 OpenJPEG vóór r2908, zoals gebruikt in PDFium in Google Chrome vóór 40.0.2214.91, stelt externe aanvallers in staat om een denial of service (buiten het bereik… Google
- CVE-2014-7944 MEDIUM · 5.0 De functie sycc422_to_rgb in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, zoals gebruikt in Google Chrome vóór 40.0.2214.91, gaat niet goed om met oneven waarden van afbeeldingsbreedte, waardoor externe… Google
- CVE-2014-7943 MEDIUM · 5.0 Skia, zoals gebruikt in Google Chrome vóór 40.0.2214.91, stelt externe aanvallers in staat om een denial of service (buiten het bereik lezen) te veroorzaken via… Canonical Opensuse Redhat Chromium
- CVE-2014-7942 HIGH · 7.5 The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of… Chromium Redhat Google Opensuse
- CVE-2014-7941 MEDIUM · 5.0 The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome before 40.0.2214.91 uses an incorrect data type for a certain length value, which… Chromium Redhat Google Opensuse
- CVE-2014-7940 HIGH · 7.5 The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not… Google Icu-project
- CVE-2014-7939 MEDIUM · 4.3 Google Chrome vóór 40.0.2214.91, wanneer de Harmony-proxy in Google V8 is ingeschakeld, stelt externe aanvallers in staat om het Same Origin-beleid te omzeilen via vervaardigde… Google Chromium Redhat Opensuse
- CVE-2014-7938 HIGH · 7.5 The Fonts implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact… Google
- CVE-2014-7937 HIGH · 7.5 Meerdere off-by-one fouten in libavcodec/vorbisdec.c in FFmpeg vóór 2.4.2, zoals gebruikt in Google Chrome vóór 40.0.2214.91, stellen externe aanvallers in staat om een denial of… Ffmpeg Google
- CVE-2014-7936 MEDIUM · 6.8 Use-after-free vulnerability in the ZoomBubbleView::Close function in browser/ui/views/location_bar/zoom_bubble_view.cc in the Views implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of… Google
- CVE-2014-7935 HIGH · 7.5 Use-after-free vulnerability in browser/speech/tts_message_filter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have… Google
- CVE-2014-7934 HIGH · 7.5 Use-after-free kwetsbaarheid in de DOM-implementatie in Blink, zoals gebruikt in Google Chrome vóór 40.0.2214.91, stelt externe aanvallers in staat om een denial of service te… Google
- CVE-2014-7933 HIGH · 7.5 Use-after-free vulnerability in the matroska_read_seek function in libavformat/matroskadec.c in FFmpeg before 2.5.1, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a… Google Ffmpeg
- CVE-2014-7932 HIGH · 7.5 Use-after-free kwetsbaarheid in het Element::detach functie in core/dom/Element.cpp in de DOM-implementatie in Blink, zoals gebruikt in Google Chrome vóór 40.0.2214.91, stelt externe aanvallers in staat… Google
- CVE-2014-7931 HIGH · 7.5 factory.cc in Google V8, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (memory corruption) or possibly have… Google
- CVE-2014-7930 HIGH · 7.5 Use-after-free vulnerability in core/events/TreeScopeEventContext.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of… Google
- CVE-2014-7929 HIGH · 7.5 Use-after-free vulnerability in the HTMLScriptElement::didMoveToNewDocument function in core/html/HTMLScriptElement.cpp in the DOM implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to… Google
- CVE-2014-7928 HIGH · 7.5 hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial… Google
- CVE-2014-7927 HIGH · 7.5 The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows… Google