CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0552 MEDIUM · 6.4 Directory traversal vulnerability in the gcab_folder_extract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a… Gnome Opensuse
- CVE-2014-9595 MEDIUM · 6.5 Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service… Sap
- CVE-2014-9594 MEDIUM · 6.5 Buffer overflow in the SAP NetWeaver Dispatcher in SAP Kernel 7.00 32-bit and 7.40 64-bit allows remote authenticated users to cause a denial of service… Sap
- CVE-2014-9593 MEDIUM · 5.0 Met Apache CloudStack vóór 4.3.2 en 4.4.x vóór 4.4.2 kunnen aanvallers op afstand privésleutels verkrijgen via een listSslCerts API-aanroep. Apache
- CVE-2014-9587 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Roundcube Webmail vóór 1.0.4 stellen externe aanvallers in staat om de authenticatie van niet-gespecificeerde slachtoffers te kapen via… Roundcube
- CVE-2014-9570 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de MyWebsiteAdvisor Simple Security-plug-in 1.1.5 en eerder voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML… Mywebsiteadvisor
- CVE-2014-9561 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the post parameter. Softbb
- CVE-2014-9560 HIGH · 7.5 SQL injection vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter. Softbb
- CVE-2014-9308 MEDIUM · 6.5 Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0.9 allows remote authenticated users to execute arbitrary code… Wpeasycart
- CVE-2014-8870 MEDIUM · 5.8 Open redirect vulnerability in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin before 1.1.2 for Woltlab Burning Board 4.0 allows remote attackers to redirect users to arbitrary… Tapatalk
- CVE-2014-8869 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in mobiquo/smartbanner/welcome.php in the Tapatalk (com.tapatalk.wbb4) plugin 1.x before 1.1.2 for Woltlab Burning Board 4.0 allow remote attackers to inject… Tapatalk
- CVE-2014-8738 MEDIUM · 5.0 The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and… Fedoraproject Debian Gnu Canonical
- CVE-2014-8398 MEDIUM · 4.6 Multiple untrusted search path vulnerabilities in Corel FastFlick allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1)… Corel
- CVE-2014-8397 MEDIUM · 4.6 Untrusted search path vulnerability in Corel VideoStudio PRO X7 or FastFlick allows local users to execute arbitrary code and conduct DLL hijacking attacks via a… Corel
- CVE-2014-8396 MEDIUM · 4.6 Untrusted search path vulnerability in Corel PDF Fusion allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse quserex.dll… Corel
- CVE-2014-8395 MEDIUM · 4.6 Untrusted search path vulnerability in Corel Painter 2015 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wacommt.dll… Corel
- CVE-2014-8394 MEDIUM · 4.6 Multiple untrusted search path vulnerabilities in Corel CAD 2014 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse… Corel
- CVE-2014-8153 MEDIUM · 4.0 The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of service (blocked router… Litech Openstack
- CVE-2014-8151 MEDIUM · 5.8 The darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39.0, when using the DarwinSSL (aka SecureTransport) back-end for TLS, does not check if a cached… Apple Haxx
- CVE-2014-8150 MEDIUM · 4.3 Een CRLF-injectiekwetsbaarheid in libcurl 6.0 tot en met 7.x vóór versie 7.40.0, bij gebruik van een HTTP-proxy, stelt externe aanvallers in staat om willekeurige HTTP-headers… Debian Haxx Canonical
- CVE-2014-7957 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Pods plugin before 2.5 for WordPress allow remote attackers to hijack the authentication of administrators for requests… Pods Foundation
- CVE-2014-7956 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Pods plugin before 2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id… Podsfoundation
- CVE-2014-7812 LOW · 3.5 Cross-site scripting (XSS) vulnerability in Spacewalk and Red Hat Network (RHN) Satellite before 5.7.0 allows remote authenticated users to inject arbitrary web script or HTML… Redhat Suse
- CVE-2014-7811 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in Spacewalk en Red Hat Network (RHN) Satellite vóór 5.7.0 stellen op afstand geverifieerde gebruikers in staat om willekeurig webscript… Redhat Suse
- CVE-2014-0171 MEDIUM · 5.0 XML externe entiteit (XXE) kwetsbaarheid in StaxXMLFactoryProvider2 in Odata4j, zoals gebruikt in Red Hat JBoss Data Virtualization vóór 6.0.0 patch 4, stelt externe aanvallers in… Redhat Odata4j Project
- CVE-2015-0583 MEDIUM · 5.0 Cisco WebEx Meeting Center beperkt de inhoud van URL's niet goed, waardoor externe aanvallers gevoelige informatie kunnen verkrijgen via vectoren met betrekking tot bestand: URI's,… Cisco
- CVE-2015-0579 MEDIUM · 5.0 Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway allow remote attackers to cause a denial of service (memory and CPU consumption, and partial outage)… Cisco
- CVE-2015-0578 MEDIUM · 5.7 Cisco Adaptive Security Appliance (ASA) Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service (device reload) via crafted… Cisco
- CVE-2015-0577 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden op de IronPort Spam Quarantine (ISQ) -pagina in Cisco AsyncOS, zoals gebruikt op de Cisco Email Security Appliance (ESA) en… Cisco
- CVE-2014-3314 MEDIUM · 5.0 Cisco AnyConnect op Android en OS X verifieert het hosttype niet goed, waardoor externe aanvallers verificatieformulieren kunnen vervalsen en mogelijk inloggegevens kunnen vastleggen via niet-gespecificeerde… Cisco
- CVE-2014-8643 HIGH · 7.1 Mozilla Firefox before 35.0 on Windows allows remote attackers to bypass the Gecko Media Plugin (GMP) sandbox protection mechanism by leveraging access to the GMP… Opensuse Mozilla Microsoft
- CVE-2014-8642 MEDIUM · 4.3 Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it… Mozilla Opensuse
- CVE-2014-8641 HIGH · 7.5 Use-after-free vulnerability in the WebRTC implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, and SeaMonkey before 2.32 allows remote attackers to execute… Mozilla
- CVE-2014-8640 MEDIUM · 5.0 The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which… Mozilla Opensuse
- CVE-2014-8639 MEDIUM · 6.8 Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that… Mozilla
- CVE-2014-8638 MEDIUM · 6.8 The navigator.sendBeacon implementation in Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 omits the CORS Origin header,… Mozilla
- CVE-2014-8637 MEDIUM · 5.0 Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from… Mozilla
- CVE-2014-8636 HIGH · 7.5 The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter,… Mozilla
- CVE-2014-8635 HIGH · 7.5 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service… Mozilla
- CVE-2014-8634 HIGH · 7.5 Meerdere niet-gespecificeerde kwetsbaarheden in de browser-engine in Mozilla Firefox vóór 35.0, Firefox ESR 31.x vóór 31.4, Thunderbird vóór 31.4 en SeaMonkey vóór 2.32 stellen externe… Mozilla
- CVE-2014-5233 LOW · 1.9 The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to discover Sm@rtServer credentials by leveraging an error in the credential-processing… Siemens Apple
- CVE-2014-5232 LOW · 1.9 The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows local users to bypass an intended application-password requirement by leveraging the running of the… Siemens Apple
- CVE-2014-5231 LOW · 2.1 The Siemens SIMATIC WinCC Sm@rtClient app before 1.0.2 for iOS allows physically proximate attackers to extract the password from storage via unspecified vectors. Siemens Apple
- CVE-2015-0309 HIGH · 10.0 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux,… Adobe Apple Microsoft Linux
- CVE-2015-0308 HIGH · 10.0 Use-after-free kwetsbaarheid in Adobe Flash Player vóór 13.0.0.260 en 14.x tot en met 16.x vóór 16.0.0.257 op Windows en OS X en vóór 11.2.202.429 op… Adobe Apple Microsoft Linux
- CVE-2015-0307 HIGH · 8.5 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245… Adobe Apple Microsoft Linux
- CVE-2015-0306 HIGH · 10.0 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245… Adobe Apple Microsoft Linux
- CVE-2015-0305 HIGH · 9.3 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245… Adobe Linux Apple Microsoft
- CVE-2015-0304 HIGH · 10.0 Een heap-gebaseerde bufferoverloop in Adobe Flash Player vóór versie 13.0.0.260 en 14.x tot en met 16.x vóór versie 16.0.0.257 op Windows en OS X en… Adobe Apple Microsoft Linux
- CVE-2015-0303 HIGH · 10.0 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245… Adobe Linux Apple Microsoft