CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5418 MEDIUM · 5.0 GE Multilink ML800, ML1200, ML1600, and ML2400 switches with firmware 4.2.1 and earlier and Multilink ML810, ML3000, and ML3100 switches with firmware 5.2.0 and earlier… Ge
- CVE-2014-2355 MEDIUM · 6.6 The (1) CimView and (2) CimEdit components in GE Proficy HMI/SCADA-CIMPLICITY 8.2 and earlier allow remote attackers to gain privileges via a crafted CIMPLICITY screen… Ge
- CVE-2014-9604 HIGH · 7.5 libavcodec/utvideodec.c in FFmpeg vóór 2.5.2 controleert niet op een nulwaarde van een plakhoogte, waardoor externe aanvallers een denial of service (toegang tot buitengrenzen van de… Ffmpeg Canonical
- CVE-2014-9603 HIGH · 7.5 De functie vmd_decode in libavcodec/vmdvideo.c in FFmpeg vóór 2.5.2 valideert de relatie tussen een bepaalde lengtewaarde en de framebreedte niet, waardoor externe aanvallers een denial… Ffmpeg
- CVE-2014-9602 HIGH · 7.5 libavcodec/xface.h in FFmpeg before 2.5.2 establishes certain digits and words array dimensions that do not satisfy a required mathematical relationship, which allows remote attackers to… Ffmpeg
- CVE-2015-1029 MEDIUM · 6.5 The puppetlabs-stdlib module 2.1 through 3.0 and 4.1.0 through 4.5.x before 4.5.1 for Puppet 2.8.8 and earlier allows remote authenticated users to gain privileges or… Puppet
- CVE-2015-0222 MEDIUM · 5.0 ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service… Canonical Djangoproject
- CVE-2015-0221 MEDIUM · 5.0 The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote… Djangoproject Canonical
- CVE-2015-0220 MEDIUM · 4.3 De functie django.util.http.is_safe_url in Django vóór 1.4.18, 1.6.x vóór 1.6.10 en 1.7.x vóór 1.7.3 behandelt niet goed de leidende witruimten, waardoor externe aanvallers cross-site scripting… Canonical Djangoproject
- CVE-2015-0219 MEDIUM · 5.0 Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of… Djangoproject
- CVE-2014-9601 MEDIUM · 5.0 Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large… Python Oracle Fedoraproject Opensuse
- CVE-2014-9496 LOW · 2.1 De sd2_parse_rsrc_fork-functie in sd2.c in libsndfile stelt aanvallers in staat om niet-gespecificeerde impact te hebben via vectoren gerelateerd aan een (1) map-offset of (2) rsrc-marker,… Libsndfile Project Opensuse Debian Canonical
- CVE-2014-9480 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Hovercards-extensie voor MediaWiki stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via vectoren met betrekking… Mediawiki
- CVE-2014-9479 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in het voorbeeld in de TemplateSandbox-extensie voor MediaWiki stelt externe aanvallers in staat om willekeurig webscript of HTML via de tekstparameter… Mediawiki
- CVE-2014-9478 LOW · 2.6 Cross-site scripting (XSS) -kwetsbaarheid in het voorbeeld in de ExpandTemplates-extensie voor MediaWiki, wanneer $ wgRawHTML is ingesteld op true, stelt externe aanvallers in staat om… Mediawiki
- CVE-2014-9477 MEDIUM · 4.3 Meerdere XSS-kwetsbaarheden (cross-site scripting) in de extensie Listings voor MediaWiki stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1)… Mediawiki
- CVE-2014-9476 MEDIUM · 5.0 MediaWiki 1.2x voor 1.22.15, 1.23.x voor 1.23.8 en 1.24.x voor 1.24.1 stelt externe aanvallers in staat om CORS-beperkingen in $ wgCrossSiteAJAX-domeinen te omzeilen via een… Mediawiki
- CVE-2014-9475 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in thumb.php in MediaWiki vóór 1.19.23, 1.2x vóór 1.22.15, 1.23.x vóór 1.23.8 en 1.24.x vóór 1.24.1 stelt op afstand geverifieerde gebruikers… Mediawiki
- CVE-2014-9471 HIGH · 7.5 Met de functie parse_datetime in GNU coreutils kunnen externe aanvallers een denial of service (crash) veroorzaken of mogelijk willekeurige code uitvoeren via een vervaardigde datumtekenreeks,… Gnu Canonical
- CVE-2014-7814 MEDIUM · 6.5 SQL injection vulnerability in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 allows remote authenticated users to execute arbitrary SQL commands via a crafted REST… Redhat
- CVE-2014-6386 HIGH · 7.8 Juniper Junos 11.4 before 11.4R8, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46 before 12.1X46-D20, 12.1X47 before 12.1X47-D10, 12.2 before 12.2R9, 12.3R2 before 12.3R2-S3, 12.3 before… Juniper
- CVE-2014-6385 MEDIUM · 6.1 Juniper Junos 11.4 before 11.4R13, 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D30, 12.1X47 before 12.1X47-D15, 12.2 before 12.2R9, 12.3R7 before 12.3R7-S1, 12.3 before 12.3R8, 13.1 before… Juniper
- CVE-2014-6384 MEDIUM · 6.9 Juniper Junos 12.1X44 before 12.1X44-D45, 12.1X46 before 12.1X46-D25, 12.1X47 before 12.1X47-D15, 12.3 before 12.3R9, 13.1 before 13.1R4-S3, 13.2 before 13.2R6, 13.3 before 13.3R5, 14.1 before… Juniper
- CVE-2014-6383 MEDIUM · 5.0 The stateless firewall in Juniper Junos 13.3R3, 14.1R1, and 14.1R2, when using Trio-based PFE modules, does not properly match ports, which might allow remote attackers… Juniper
- CVE-2014-6382 HIGH · 7.1 The Juniper MX Series routers with Junos 13.3R3 through 13.3Rx before 13.3R6, 14.1 before 14.1R4, 14.1X50 before 14.1X50-D70, and 14.2 before 14.2R2, when configured as… Juniper
- CVE-2014-3692 HIGH · 10.0 The customization template in Red Hat CloudForms 3.1 Management Engine (CFME) 5.3 uses a default password for the root account when a password is not… Redhat
- CVE-2014-1949 HIGH · 7.2 GTK+ 3.10.9 and earlier, as used in cinnamon-screensaver, gnome-screensaver, and other applications, allows physically proximate attackers to bypass the lock screen by pressing the menu… Linuxmint Gnome Canonical
- CVE-2015-1060 MEDIUM · 5.8 Een open redirect-kwetsbaarheid in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 stelt externe aanvallers in staat gebruikers door te sturen naar willekeurige websites en phishingaanvallen uit te voeren… Insanevisions
- CVE-2015-1059 MEDIUM · 6.5 Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP… Insanevisions
- CVE-2015-1058 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in AdaptCMS 3.0.3 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de (1) data[Categorie][titel] -parameter… Insanevisions
- CVE-2015-1057 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value. E107
- CVE-2015-1056 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Brother MFC-J4410DW printer with firmware before L allows remote attackers to inject arbitrary web script or HTML via the url… Brother
- CVE-2015-1055 HIGH · 7.5 SQL injection vulnerability in the Photo Gallery plugin 1.2.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the order_by parameter in a… 10web
- CVE-2015-1054 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the Game… Crea8social
- CVE-2015-1053 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the administrative backend in Croogo before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the path… Croogo
- CVE-2014-9600 HIGH · 7.2 Onvertrouwde zoekpadkwetsbaarheid in Macroplant iExplorer 3.6.3.0 stelt lokale gebruikers in staat om willekeurige code uit te voeren en DLL-kapingaanvallen uit te voeren via een Trojaans… Macroplant
- CVE-2014-9599 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de bestandsbeheerder in b2evolution vóór 5.2.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… B2evolution
- CVE-2014-9596 MEDIUM · 4.3 Panasonic Arbitrator Back-End Server (bes) MK 2.0 VPU vóór 9.3.1 build 4.08.003.0, wanneer USB Wi-Fi of Direct LAN is ingeschakeld, en MK 3.0 VPU vóór… Panasonic
- CVE-2015-0591 MEDIUM · 5.0 Cisco Unified Communications Domain Manager (UCDM) 10 stelt externe aanvallers in staat om een denial of service (daemon-hang en GUI-uitval) te veroorzaken via een stroom… Cisco
- CVE-2015-0588 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Cisco Unified Communications Domain Manager (UCDM) 10 allows remote attackers to hijack the authentication of arbitrary users, aka Bug… Cisco
- CVE-2014-8904 HIGH · 7.2 lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value. Ibm
- CVE-2014-8034 MEDIUM · 5.0 Cisco WebEx Meetings Server 1.5 presents the same CAPTCHA challenge for each login attempt, which makes it easier for remote attackers to obtain access via… Cisco
- CVE-2014-8022 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Cisco Identity Services Engine allow remote attackers to inject arbitrary web script or HTML via input to unspecified web… Cisco
- CVE-2014-7881 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the server in HP Insight Control allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Hp
- CVE-2015-1052 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the poll archive in PHPKIT 1.6.6 (Build 160014) allows remote attackers to inject arbitrary web script or HTML via the… Phpkit
- CVE-2015-1051 MEDIUM · 5.8 Open redirect vulnerability in the Context UI module in the Context module 7.x-3.x before 7.x-3.6 for Drupal allows remote attackers to redirect users to arbitrary… Context Project Fedoraproject
- CVE-2015-1050 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before 11.6 allows remote attackers to inject arbitrary web script or HTML via the… F5
- CVE-2015-1041 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in e107_admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107_files/ file path in… E107
- CVE-2015-1040 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the… Bedita
- CVE-2015-1039 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in user/login.phtml in ZF-Commons ZfcUser vóór 1.2.2 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Zfcuser Project