CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0514 MEDIUM · 5.0 EMC M&R (aka Watch4Net) before 6.5u1 and ViPR SRM before 3.6.1 might allow remote attackers to obtain cleartext data-center discovery credentials by leveraging certain SRM… Emc
- CVE-2015-0513 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in de administratieve gebruikersinterface in EMC M&R (ook bekend als Watch4Net) vóór 6.5u1 en ViPR SRM vóór 3.6.1 stellen op… Emc
- CVE-2014-9598 MEDIUM · 6.8 Met de picture_Release-functie in misc/picture.c in VideoLAN VLC-mediaspeler 2.1.5 kunnen aanvallers op afstand willekeurige code uitvoeren of een denial of service (schending van schrijftoegang) veroorzaken… Videolan
- CVE-2014-9597 MEDIUM · 6.8 The picture_pool_Delete function in misc/picture_pool.c in VideoLAN VLC media player 2.1.5 allows remote attackers to execute arbitrary code or cause a denial of service (DEP… Videolan
- CVE-2014-9226 HIGH · 7.2 De beheerserver in Symantec Critical System Protection (SCSP) 5.2.9 tot en met MP6 en Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x tot en met… Broadcom Symantec
- CVE-2014-9225 MEDIUM · 4.0 Met de ajaxswing webui in de beheerserver in Symantec Critical System Protection (SCSP) 5.2.9 tot en met MP6 en Symantec Data Center Security: Server Advanced… Broadcom Symantec
- CVE-2014-9224 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the ajaxswing webui in the Management Console server in the management server in Symantec Critical System Protection (SCSP) 5.2.9 through… Broadcom Symantec
- CVE-2014-8914 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users… Ibm
- CVE-2014-8913 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users… Ibm
- CVE-2014-7289 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in de beheerserver in Symantec Critical System Protection (SCSP) 5.2.9 vóór MP6 en Symantec Data Center Security: Server Advanced (SDCS:SA) 6.0.x vóór 6.0 MP1… Broadcom Symantec
- CVE-2014-6172 MEDIUM · 5.0 IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors. Ibm
- CVE-2014-3440 HIGH · 9.0 Met de Agent Control Interface in de beheerserver in Symantec Critical System Protection (SCSP) 5.2.9 vóór MP6 en Symantec Data Center Security: Server Advanced (SDCS:SA)… Broadcom Symantec
- CVE-2014-6528 MEDIUM · 4.0 Unspecified vulnerability in the Siebel Core - System Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via… Oracle
- CVE-2014-6526 MEDIUM · 4.3 Unspecified vulnerability in the Oracle Directory Server Enterprise Edition component in Oracle Fusion Middleware 7.0 allows remote attackers to affect integrity via unknown vectors related… Oracle
- CVE-2014-6525 LOW · 3.5 Niet-gespecificeerde kwetsbaarheid in de Oracle Web Applications Desktop Integrator-component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.2, 12.2.3 en 12.2.4 stelt externe geverifieerde gebruikers in… Oracle
- CVE-2014-6524 HIGH · 7.2 Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel. Sun
- CVE-2014-6521 HIGH · 7.2 Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility. Sun
- CVE-2014-6518 MEDIUM · 6.6 Niet-gespecificeerde kwetsbaarheid in Oracle Solaris 10 en 11 stelt lokale gebruikers in staat om de integriteit en beschikbaarheid te beïnvloeden via vectoren met betrekking tot… Sun
- CVE-2014-6514 MEDIUM · 4.0 Unspecified vulnerability in the PL/SQL component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality via unknown vectors. Oracle
- CVE-2014-6510 HIGH · 7.2 Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility. Sun
- CVE-2014-6509 MEDIUM · 4.9 Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability via unknown vectors related to Kernel. Sun
- CVE-2014-6481 MEDIUM · 4.3 Unspecified vulnerability in Oracle Solaris 10 and 11 allows remote attackers to affect confidentiality via vectors related to KSSL. Sun
- CVE-2014-6480 MEDIUM · 6.5 Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows local users to affect confidentiality, integrity, and availability… Oracle
- CVE-2014-4279 LOW · 3.5 Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via vectors related to PIA… Oracle
- CVE-2014-4259 HIGH · 9.0 Niet-gespecificeerde kwetsbaarheid in de Solaris Cluster-component in Oracle Sun Systems Products Suite 3.3 en 4.1 stelt op afstand geverifieerde gebruikers in staat om de vertrouwelijkheid,… Oracle
- CVE-2014-0191 MEDIUM · 4.3 De functie xmlParserHandlePEReference in parser.c in libxml2 vóór 2.9.2, zoals gebruikt in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0 en… Oracle
- CVE-2015-1201 MEDIUM · 5.0 Privoxy before 3.0.22 allows remote attackers to cause a denial of service (file descriptor consumption) via unspecified vectors. NOTE: the provenance of this information is… Privoxy
- CVE-2015-1030 MEDIUM · 5.0 Memory leak in the rfc2553_connect_to function in jbsocket.c in Privoxy before 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a… Privoxy
- CVE-2014-9494 MEDIUM · 5.0 RabbitMQ vóór 3.4.0 stelt externe aanvallers in staat om de loopback_users-beperking te omzeilen via een vervaardigde X-Forwareded-For-header. Pivotal Software
- CVE-2014-9491 MEDIUM · 5.0 De devzvol_readdir-functie in illumos controleert niet de retourwaarde van een strchr-aanroep, waardoor externe aanvallers een denial of service (NULL pointer dereference en paniek) kunnen veroorzaken… Illumos
- CVE-2014-9490 MEDIUM · 5.0 Met de numtok-functie in lib/raven/okjson.rb in de raven-ruby gem voor 0.12.2 voor Ruby kunnen externe aanvallers een denial of service veroorzaken via een grote exponentwaarde… Getsentry
- CVE-2014-9330 MEDIUM · 5.0 Integer overflow in tif_packbits.c in bmp2tif in libtiff 4.0.3 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via EEN vervaardigde… Libtiff
- CVE-2014-8790 MEDIUM · 5.0 XML external entity (XXE) vulnerability in admin/api.php in GetSimple CMS 3.1.1 through 3.3.x before 3.3.5 Beta 1, when in certain configurations, allows remote attackers to… Cagintranetworks Get-simple
- CVE-2014-8625 MEDIUM · 6.8 Multiple format string vulnerabilities in the parse_error_msg function in parsehelp.c in dpkg before 1.17.22 allow remote attackers to cause a denial of service (crash) and… Debian
- CVE-2014-8386 HIGH · 7.5 Multiple stack-based buffer overflows in Advantech AdamView 4.3 and earlier allow remote attackers to execute arbitrary code via a crafted (1) display properties or (2)… Advantech
- CVE-2015-0973 HIGH · 8.8 Bufferoverloop in de functie png_read_idat_data in pngrutil.c in libpng vóór 1.5.21 en 1.6.x vóór 1.6.16 stelt contextafhankelijke aanvallers in staat om willekeurige code uit te… Oracle Libpng Apple
- CVE-2015-0862 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the management web UI in the RabbitMQ management plugin before 3.4.3 allow remote authenticated users to inject arbitrary web… Pivotal Software
- CVE-2013-7252 MEDIUM · 5.0 kwalletd in KWallet voor KDE Applications 14.12.0 gebruikt Blowfish met ECB-modus in plaats van CBC-modus bij het versleutelen van de wachtwoordopslag, wat het voor aanvallers… Kde
- CVE-2015-0924 HIGH · 7.8 Ceragon FibeAir IP-10 bridges have a default password for the root account, which makes it easier for remote attackers to obtain access via a (1)… Ceragon
- CVE-2015-0590 MEDIUM · 5.0 Cisco WebEx Meeting Center allows remote attackers to activate disabled meeting attributes, and consequently obtain sensitive information, by providing crafted parameters during a meeting-join action,… Cisco
- CVE-2014-6197 MEDIUM · 4.3 IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors. Ibm
- CVE-2014-4835 LOW · 2.1 IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to… Ibm
- CVE-2014-3032 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 before 7.3.1.7, and 7.4.0 before 7.4.0.3 allows remote authenticated… Ibm
- CVE-2014-3019 MEDIUM · 5.0 IBM BladeCenter SAS Connectivity Module (ook bekend als NSSM) en SAS RAID Module (ook bekend als RSSM) vóór 1.3.3.006 stellen externe aanvallers in staat om… Ibm
- CVE-2014-3018 HIGH · 7.8 IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial of service (reboot)… Ibm
- CVE-2014-9199 HIGH · 10.0 The Clorius Controls Java web client before 01.00.0009g allows remote attackers to discover credentials by sniffing the network for cleartext-equivalent traffic. Clorius Controls A/s
- CVE-2014-9195 HIGH · 10.0 Phoenix Contact ProConO's en MultiProg vereisen geen authenticatie, waardoor aanvallers op afstand willekeurige opdrachten kunnen uitvoeren via protocol-compliant verkeer. Phoenixcontact-software
- CVE-2014-9194 MEDIUM · 5.4 Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service (disruption) via crafted radio transmissions that spoof GPS satellite broadcasts. Arbiter
- CVE-2014-8143 HIGH · 8.5 Samba 4.0.x before 4.0.24, 4.1.x before 4.1.16, and 4.2.x before 4.2rc4, when an Active Directory Domain Controller (AD DC) is configured, allows remote authenticated users… Samba
- CVE-2014-5419 HIGH · 10.0 De GE Multilink ML800, ML1200, ML1600 en ML2400 switches met firmware 4.2.1 en ouder, en de Multilink ML810, ML3000 en ML3100 switches met firmware 5.2.0… Ge