CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-7926 HIGH · 7.5 The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers… Redhat Opensuse Google Oracle
- CVE-2014-7925 HIGH · 7.5 Use-after-free vulnerability in the WebAudio implementation in Blink, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service or… Google
- CVE-2014-7924 MEDIUM · 5.0 Use-after-free vulnerability in the IndexedDB implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other… Google
- CVE-2014-7923 HIGH · 7.5 The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allows remote attackers… Redhat Opensuse Icu-project Oracle
- CVE-2015-1312 HIGH · 7.5 The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive information, gain privileges, and possibly have other… Sap
- CVE-2015-1311 HIGH · 10.0 The Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary ABAP code via unspecified vectors, aka SAP Note 2098906. NOTE: the… Sap
- CVE-2015-1310 HIGH · 7.5 SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333.… Sybase
- CVE-2015-1309 MEDIUM · 5.0 XML external entity vulnerability in the Extended Computer Aided Test Tool (eCATT) in SAP NetWeaver AS ABAP 7.31 and earlier allows remote attackers to access… Sap
- CVE-2015-1175 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML… Prestashop
- CVE-2015-1306 MEDIUM · 5.0 The newsletter posting area in the web interface in Sympa 6.0.x before 6.0.10 and 6.1.x before 6.1.24 allows remote attackers to read arbitrary files via… Sympa
- CVE-2015-0925 HIGH · 9.0 Met de client in iPass Open Mobile vóór 2.4.5 op Windows kunnen op afstand geverifieerde gebruikers willekeurige code uitvoeren via een DLL-padnaam in een vervaardigde… Ipass
- CVE-2014-8008 MEDIUM · 6.8 Absolute path traversal vulnerability in the Real-Time Monitoring Tool (RTMT) API in Cisco Unified Communications Manager (CUCM) allows remote authenticated users to read arbitrary files… Cisco
- CVE-2015-0437 HIGH · 9.3 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 8u25 stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit en beschikbaarheid te beïnvloeden via onbekende vectoren met betrekking… Oracle Novell
- CVE-2015-0436 MEDIUM · 4.3 Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login. Oracle
- CVE-2015-0435 MEDIUM · 6.8 Een niet-gespecificeerde kwetsbaarheid in de Oracle Transportation Management-component van Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4 en 6.3.5 stelt externe… Oracle
- CVE-2015-0434 MEDIUM · 4.3 Niet-gespecificeerde kwetsbaarheid in de Oracle Access Manager-component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.7, 11.1.2.1 en 11.1.2.2 stelt externe aanvallers in staat om de vertrouwelijkheid te… Oracle
- CVE-2015-0432 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL Server 5.5.40 en eerder stelt op afstand geverifieerde gebruikers in staat om de beschikbaarheid te beïnvloeden via vectoren gerelateerd aan… Oracle Canonical Debian Redhat
- CVE-2015-0431 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0 6.3.1, 6.3.2, 6.3.4, and 6.3.5 allows remote attackers… Oracle
- CVE-2015-0430 LOW · 1.9 Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality via vectors related to RPC Utility. Sun
- CVE-2015-0429 LOW · 3.3 Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect integrity and availability via vectors related to RPC Utility. Sun
- CVE-2015-0428 MEDIUM · 4.9 Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Resource Control. Sun
- CVE-2015-0427 LOW · 3.2 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors… Oracle Opensuse
- CVE-2015-0426 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in de Enterprise Manager Base Platform-component in Oracle Enterprise Manager Grid Control 12.1.0.3 en 12.1.0.4 stelt externe aanvallers in staat om de vertrouwelijkheid… Oracle
- CVE-2015-0425 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Enterprise Asset Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors… Oracle
- CVE-2015-0424 HIGH · 7.5 Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite ILOM prior to 3.2.4 allows remote authenticated users to… Oracle
- CVE-2015-0422 MEDIUM · 4.0 Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote… Oracle
- CVE-2015-0421 MEDIUM · 6.9 Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process. Oracle Novell
- CVE-2015-0420 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Forms component in Oracle Fusion Middleware 11.1.1.7 and 11.1.2.2 allows remote attackers to affect confidentiality via unknown vectors related to… Oracle
- CVE-2015-0419 MEDIUM · 4.3 Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote attackers to affect confidentiality via unknown vectors related… Oracle
- CVE-2015-0418 LOW · 2.1 Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability… Debian Opensuse Oracle
- CVE-2015-0417 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in de Siebel UI Framework-component in Oracle Siebel CRM 8.1.1 en 8.2.2 stelt externe geverifieerde gebruikers in staat om de vertrouwelijkheid te beïnvloeden… Oracle
- CVE-2015-0416 LOW · 3.5 Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown vectors… Oracle
- CVE-2015-0415 MEDIUM · 4.0 Niet-gespecificeerde kwetsbaarheid in de Oracle Application Object Library-component in Oracle E-Business Suite 12.1.3 stelt externe geverifieerde gebruikers in staat om de integriteit te beïnvloeden via… Oracle
- CVE-2015-0414 LOW · 3.5 Unspecified vulnerability in the Oracle SOA Suite component in Oracle Fusion Middleware 11.1.1.7 and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors… Oracle
- CVE-2015-0413 LOW · 1.9 Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability. Oracle Canonical Suse
- CVE-2015-0412 HIGH · 7.2 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 6u85, 7u72 en 8u25 stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit en beschikbaarheid te beïnvloeden via vectoren… Canonical Debian Novell Opensuse
- CVE-2015-0411 HIGH · 7.5 Niet-gespecificeerde kwetsbaarheid in Oracle MySQL Server 5.5.40 en eerder, en 5.6.21 en eerder, stelt externe aanvallers in staat om de vertrouwelijkheid, integriteit en beschikbaarheid te… Canonical Debian Fedoraproject Redhat
- CVE-2015-1196 MEDIUM · 4.3 GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file. Opensuse Oracle Gnu
- CVE-2015-1195 MEDIUM · 6.5 The V2 API in OpenStack Image Registry and Delivery Service (Glance) before 2014.1.4 and 2014.2.x before 2014.2.2 allows remote authenticated users to read or delete… Openstack
- CVE-2015-1194 MEDIUM · 4.3 pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive. Pax Project
- CVE-2015-1193 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot)… Pax Project
- CVE-2015-1192 MEDIUM · 5.0 Absolute path traversal vulnerability in kgb 1.0b4 allows remote attackers to write to arbitrary files via a full pathname in a crafted archive. Kgb Project
- CVE-2015-1191 MEDIUM · 5.0 Meerdere kwetsbaarheden voor directorytraversal in pigz 2.3.1 stellen externe aanvallers in staat om naar willekeurige bestanden te schrijven via een (1) volledige padnaam of (2)… Zlib
- CVE-2015-1038 MEDIUM · 5.8 p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive. Fedoraproject Oracle 7-zip
- CVE-2015-0554 HIGH · 9.4 The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to… Adb
- CVE-2015-0410 MEDIUM · 5.0 Unspecified vulnerability in the Java SE, Java SE Embedded, JRockit component in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and… Oracle Canonical Debian Novell
- CVE-2015-0409 MEDIUM · 4.0 Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer. Oracle
- CVE-2015-0408 HIGH · 10.0 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI. Oracle Canonical Debian Novell
- CVE-2015-0407 MEDIUM · 5.0 Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to Swing. Canonical Debian Fedoraproject Redhat
- CVE-2015-0406 MEDIUM · 5.8 Niet-gespecificeerde kwetsbaarheid in Oracle Java SE 6u85, 7u72 en 8u25 stelt externe aanvallers in staat om de vertrouwelijkheid en beschikbaarheid te beïnvloeden via onbekende vectoren… Oracle Novell