CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-10026 MEDIUM · 5.0 index.cgi in D-Link DAP-1360 met firmware 2.5.4 en eerder stelt externe aanvallers in staat om authenticatie te omzeilen en gevoelige informatie te verkrijgen door de… Dlink
- CVE-2014-10025 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in D-Link DAP-1360 met firmware 2.5.4 en eerder stellen externe aanvallers in staat om de authenticatie van niet-gespecificeerde gebruikers… Dlink
- CVE-2014-10024 HIGH · 7.5 Multiple integer signedness errors in DirectShowDemuxFilter, as used in Divx Web Player, Divx Player, and other Divx plugins, allow remote attackers to execute arbitrary code… Divx
- CVE-2014-10023 HIGH · 7.5 Meerdere SQL-injectiekwetsbaarheden in TopicsViewer 3.0 Beta 1 stellen externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de id-parameter om (1) edit_block.php, (2)… Topicsviewer
- CVE-2014-10022 MEDIUM · 5.0 Apache Traffic Server before 5.1.2 allows remote attackers to cause a denial of service via unspecified vectors, related to internal buffer sizing. Apache
- CVE-2014-10021 HIGH · 7.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in UploadHandler.php in de WP Symposium-plug-in 14.11 voor WordPress stelt externe aanvallers in staat om willekeurige code uit… Wpsymposiumpro
- CVE-2014-10020 HIGH · 7.5 SQL-injectiekwetsbaarheid in login.php in Simple e-document 1.31 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de gebruikersnaamparameter. Tecorange
- CVE-2014-10019 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in webconfig/wlan/country.html/country in de Teracom T2-B-Gawv1.4U10Y-BI-modem stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor… Teracom
- CVE-2014-10018 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in webconfig/wlan/country.html/country in the Teracom T2-B-Gawv1.4U10Y-BI modem allows remote attackers to inject arbitrary web script or HTML via the essid parameter. Teracom
- CVE-2014-10017 HIGH · 7.5 Multiple SQL injection vulnerabilities in the Welcart e-Commerce plugin 1.3.12 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) changeSort or… Welcart
- CVE-2014-10016 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de Welcart e-Commerce plugin 1.3.12 voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Welcart
- CVE-2014-10015 HIGH · 7.5 SQL injection vulnerability in load-calendar.php in PHPJabbers Event Booking Calendar 2.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter. Phpjabbers
- CVE-2014-10014 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Event Booking Calendar 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1)… Phpjabbers
- CVE-2014-10013 HIGH · 7.5 SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase parameter in… Strategy11
- CVE-2014-10012 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the… Strategy11
- CVE-2014-10011 HIGH · 7.5 Stack-based buffer overflow in UltraCamLib in the UltraCam ActiveX Control (UltraCamX.ocx) for the TRENDnet SecurView camera TV-IP422WN allows remote attackers to execute arbitrary code via… Trendnet
- CVE-2014-10010 MEDIUM · 5.0 Directory traversal vulnerability in PHPJabbers Appointment Scheduler 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the id parameter in… Phpjabbers
- CVE-2014-10009 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Stark CRM 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name,… Iwcn
- CVE-2014-10008 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Stark CRM 1.0 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken die… Iwcn
- CVE-2014-10007 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name,… Maianscriptworld
- CVE-2014-10006 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Maian Uploader 4.0 allow remote attackers to hijack the authentication of unspecified users for requests that conduct cross-site… Maianscriptworld
- CVE-2014-10005 MEDIUM · 5.0 Maian Uploader 4.0 allows remote attackers to obtain sensitive information via a request without the height parameter to load_flv.js.php, which reveals the installation path in… Maianscriptworld
- CVE-2014-10004 HIGH · 7.5 SQL-injectiekwetsbaarheid in admin/data_files/move.php in Maian Uploader 4.0 stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de id-parameter. Maianscriptworld
- CVE-2014-10003 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Maian Uploader 4.0 allow remote attackers to inject arbitrary web script or HTML via the width parameter to (1)… Maian Script World
- CVE-2014-10002 MEDIUM · 5.0 Unspecified vulnerability in JetBrains TeamCity before 8.1 allows remote attackers to obtain sensitive information via unknown vectors. Jetbrains
- CVE-2014-100010 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ClanSphere 2011.4 allows remote attackers to inject arbitrary web script or HTML via the where parameter in a list action… Csphere
- CVE-2014-10001 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in PHPJabbers Appointment Scheduler 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) conduct… Phpjabbers
- CVE-2014-100009 MEDIUM · 5.0 The Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 and earlier for WordPress allows remote attackers to obtain the installation path via… Joomlaskin
- CVE-2014-100008 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in includes/delete_img.php in de Joomlaskin JS Multi Hotel (ook bekend als JS MultiHotel en Js-Multi-Hotel) plugin 2.2.1 en eerder voor WordPress… Joomlaskin
- CVE-2014-100007 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the HK Exif Tags plugin before 1.12 for WordPress allows remote authenticated users to inject arbitrary web script or HTML… Hk Exif Tags Project
- CVE-2014-100006 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in modules_v3/googlemap/wt_v3_street_view.php in webtrees before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) map,… Webtrees
- CVE-2014-100004 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Sitecore CMS before 7.0 Update-4 (rev. 140120) allows remote attackers to inject arbitrary web script or HTML via the xmlcontrol… Sitecore
- CVE-2014-100003 HIGH · 7.5 SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ym_download_id parameter… Yourmembers Project
- CVE-2014-100002 MEDIUM · 5.0 Directory traversal kwetsbaarheid in ManageEngine SupportCenter Plus 7.9 vóór 7917 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een ..%2f (dot dot… Zohocorp
- CVE-2014-100001 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de SEO Plugin LiveOptim-plug-in vóór 1.1.4-free voor WordPress stelt externe aanvallers in staat om de authenticatie van beheerders te… Seopressor
- CVE-2013-2604 HIGH · 7.2 RealNetworks GameHouse RealArcade Installer (ook bekend als ActiveMARK Game Installer) 2.6.0.481 en 3.0.7 gebruikt zwakke machtigingen (bestanden maken/gegevens schrijven) voor de directorystructuur van GameHouse Games,… Realnetworks
- CVE-2013-2603 HIGH · 10.0 The RACInstaller.StateCtrl.1 ActiveX control in InstallerDlg.dll in RealNetworks GameHouse RealArcade Installer 2.6.0.481 performs unexpected type conversions for invalid parameter types, which allows remote attackers to… Realnetworks
- CVE-2013-7420 HIGH · 7.5 Bufferoverloop in Hancom Office 2010 SE stelt externe aanvallers in staat om willekeurig uit te voeren via een lange tekenreeks in het Text-attribuut in een… Hancom
- CVE-2014-6268 MEDIUM · 4.9 Met de functie evtchn_Fifo_set_pending in Xen 4.4.x kunnen lokale gastgebruikers een denial of service (crash van de host) veroorzaken via vectoren met een niet-geïnitialiseerd FIFO-gebaseerd… Xen
- CVE-2014-2839 HIGH · 7.5 SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in… Dev4press
- CVE-2014-2838 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication of administrators for… Dev4press
- CVE-2014-9495 HIGH · 8.8 Op heap gebaseerde bufferoverloop in de functie png_combine_row in libpng vóór 1.5.21 en 1.6.x vóór 1.6.16, wanneer deze op 64-bits systemen wordt uitgevoerd, kunnen contextafhankelijke… Apple Libpng
- CVE-2015-0582 MEDIUM · 5.0 The High Availability (HA) subsystem in Cisco NX-OS on MDS 9000 devices allows remote attackers to cause a denial of service via crafted traffic, aka… Cisco
- CVE-2015-0564 MEDIUM · 5.0 Buffer underflow in the ssl_decrypt_record function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allows remote attackers to cause a denial of… Wireshark Oracle Debian Opensuse
- CVE-2015-0563 MEDIUM · 5.0 epan/dissectors/packet-smtp.c in the SMTP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 uses an incorrect length value for certain string-append operations, which allows… Opensuse Wireshark
- CVE-2015-0562 MEDIUM · 5.0 Multiple use-after-free vulnerabilities in epan/dissectors/packet-dec-dnart.c in the DEC DNA Routing Protocol dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to… Wireshark
- CVE-2015-0561 MEDIUM · 5.0 asn1/lpp/lpp.cnf in the LPP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not validate a certain index value, which allows remote attackers… Wireshark Opensuse Oracle
- CVE-2015-0560 MEDIUM · 5.0 The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 does not initialize certain data structures, which… Wireshark Opensuse
- CVE-2015-0559 MEDIUM · 5.0 Multiple use-after-free vulnerabilities in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.10.x before 1.10.12 and 1.12.x before 1.12.3 allow remote attackers to cause a denial… Opensuse Wireshark
- CVE-2014-9191 LOW · 2.1 De CodeWrights HART Device Type Manager (DTM) -bibliotheek in Emerson HART DTM vóór 1.4.181 stelt fysiek nabije aanvallers in staat om een denial of service… Codewrights