CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2015-0302 MEDIUM · 5.0 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245… Adobe Linux Apple Microsoft
- CVE-2015-0301 HIGH · 10.0 Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245… Adobe Apple Microsoft Linux
- CVE-2015-0015 HIGH · 7.8 Microsoft Windows Server 2003 SP2, Server 2008 SP2 and R2 SP1, and Server 2012 Gold and R2 allow remote attackers to cause a denial of… Microsoft
- CVE-2015-0014 HIGH · 10.0 Buffer overflow in the Telnet service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,… Microsoft
- CVE-2015-0011 MEDIUM · 4.7 mrxdav.sys (aka the WebDAV driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,… Microsoft
- CVE-2015-0006 MEDIUM · 6.1 The Network Location Awareness (NLA) service in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,… Microsoft
- CVE-2015-0004 HIGH · 7.2 The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,… Microsoft
- CVE-2015-0002 HIGH · 7.2 The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows… Microsoft
- CVE-2015-0001 LOW · 1.9 The Windows Error Reporting (WER) component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows… Microsoft
- CVE-2014-10038 HIGH · 7.5 SQL injection vulnerability in agenda/indexdate.php in DomPHP 0.83 and earlier allows remote attackers to execute arbitrary SQL commands via the ids parameter. Domphp
- CVE-2014-10037 HIGH · 7.5 Directory traversal-kwetsbaarheid in DomPHP 0.83 en eerder stelt externe aanvallers in staat om niet-gespecificeerde impact te hebben via een .. (puntpunt) in de URL-parameter naar… Domphp
- CVE-2014-10036 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in JetBrains TeamCity vóór 8.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de cameFromUrl-parameter naar… Jetbrains
- CVE-2014-10035 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to inject arbitrary web script or HTML via the… Couponphp
- CVE-2014-10034 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or… Couponphp
- CVE-2014-10033 MEDIUM · 6.5 SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via… Oscommerce
- CVE-2014-10032 MEDIUM · 6.5 SQL injection vulnerability in news_popup.php in Taboada MacroNews 1.0 allows remote authenticated users to execute arbitrary SQL commands via the id parameter. Scriptbrasil
- CVE-2014-10031 HIGH · 7.5 Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary code via a long string in a UID… Qualcomm
- CVE-2014-100039 LOW · 2.1 mbae.sys in Malwarebytes Anti-Exploit before 1.05.1.2014 allows local users to cause a denial of service (crash) via a crafted size in an unspecified IOCTL call,… Malwarebytes
- CVE-2014-100038 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Storytlr 1.3.dev en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de zoekparameter om… Storytlr
- CVE-2014-100037 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in Storytlr 1.3.dev en eerder stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de PATH_INFO naar… Storytlr
- CVE-2014-100036 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in FlatPress 1.0.2 stelt externe aanvallers in staat om willekeurig webscript of HTML via de inhoudsparameter in de standaard URI te… Flatpress
- CVE-2014-100035 HIGH · 7.5 SQL injection vulnerability in the ticket grid in the admin interface in LicensePal ArcticDesk before 1.2.5 allows remote attackers to execute arbitrary SQL commands via… Licensepal
- CVE-2014-100034 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de frontend-interface in LicensePal ArcticDesk vóór 1.2.5 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Licensepal
- CVE-2014-100033 MEDIUM · 5.0 Directory traversal vulnerability in LicensePal ArcticDesk before 1.2.5 allows remote attackers to read arbitrary files via unspecified vectors. Licensepal
- CVE-2014-100032 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in top.html in the Airties Air 6372 modem allows remote attackers to inject arbitrary web script or HTML via the productboardtype… Airties
- CVE-2014-100031 HIGH · 7.5 Multiple SQL injection vulnerabilities in Ganesha Digital Library (GDL) 4.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) download.php… Ismail Fahmi
- CVE-2014-100030 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in module/search/function.php in Ganesha Digital Library (GDL) 4.2 allows remote attackers to inject arbitrary web script or HTML via the keyword… Ganesha Digital Library Project
- CVE-2014-100029 MEDIUM · 5.0 Multiple directory traversal vulnerabilities in class/session.php in Ganesha Digital Library (GDL) 4.2 allow remote attackers to read arbitrary files via a .. (dot dot) in… Ganesha Digital Library Project
- CVE-2014-100028 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in /signup in WEBCrafted allows remote attackers to inject arbitrary web script or HTML via the username. Webcrafted Project
- CVE-2014-100027 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de WP SlimStat-plug-in vóór 3.5.6 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Getusedtoit
- CVE-2014-100026 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script…
- CVE-2014-100025 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an administrator… Savsoft Technologies
- CVE-2014-100024 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Seopanel
- CVE-2014-100023 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML… Mtouch Quiz Project
- CVE-2014-100022 HIGH · 7.5 SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter… Mtouch Quiz Project
- CVE-2014-100021 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in symfony/web/index.php/pim/viewEmployeeList in OrangeHRM before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the empsearch[employee_name][empId] parameter. Orangehrm
- CVE-2014-100020 HIGH · 7.5 SQL-injectiekwetsbaarheid in ChangeEmail.php in iTechClassifieds 3.03.057 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de parameter PreviewNum. OPMERKING: de CatID-parameter wordt… Itechscripts
- CVE-2014-100019 HIGH · 7.5 SQL-injectiekwetsbaarheid in de LTree-converter in Pomm vóór 1.1.5 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via niet-gespecificeerde vectoren. Pomm-project
- CVE-2014-100018 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s… Unconfirmed Project
- CVE-2014-100017 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in canned_opr.php in PhpOnlineChat 3.0 allows remote attackers to inject arbitrary web script or HTML via the message field. Phponlinechat
- CVE-2014-100016 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prod_id… Photocati Media
- CVE-2014-100015 MEDIUM · 6.4 Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. (dot dot) in the… Solidworks
- CVE-2014-100014 HIGH · 7.5 Multiple stack-based buffer overflows in pdmwService.exe in SolidWorks Workgroup PDM 2014 SP2 allow remote attackers to execute arbitrary code via a long string in a… Solidworks
- CVE-2014-100013 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in clientResponse 4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Subject or (2) Message… Clientresponse Project
- CVE-2014-100012 HIGH · 7.5 SQL-injectiekwetsbaarheid in /app in Sendy 1.1.8.4 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de i-parameter. Sendy
- CVE-2014-100011 HIGH · 7.5 SQL injection vulnerability in /send-to in Sendy 1.1.9.1 allows remote attackers to execute arbitrary SQL commands via the c parameter. Sendy
- CVE-2014-10030 MEDIUM · 5.8 Open redirect vulnerability in forums/login.php in FluxBB before 1.4.13 and 1.5.x before 1.5.7 allows remote attackers to redirect users to arbitrary web sites and conduct… Fluxbb
- CVE-2014-10029 HIGH · 7.5 SQL-injectiekwetsbaarheid in profile.php in FluxBB vóór 1.4.13 en 1.5.x vóór 1.5.7 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de parameter… Fluxbb
- CVE-2014-10028 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the… Dlink
- CVE-2014-10027 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users… Dlink