CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2010-5317 HIGH · 7.5 Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in… Basic-cms
- CVE-2010-5316 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in as/index.php in SweetRice CMS vóór 0.6.7.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via een… Basic-cms
- CVE-2010-5315 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in BEdita vóór 3.1 stellen externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken die…
- CVE-2010-5314 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in controllers/home_controller.php in BEdita before 3.1 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter to…
- CVE-2014-9427 HIGH · 7.5 sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file,… Php
- CVE-2014-9461 LOW · 3.5 Directory traversal kwetsbaarheid in modellen/Cart66.php in de Cart66 Lite plugin vóór 1.5.4 voor WordPress stelt op afstand geverifieerde gebruikers in staat om willekeurige bestanden te… Reality66
- CVE-2013-7418 MEDIUM · 6.5 cgi-bin/iptablesgui.cgi in IPCop (aka IPCop Firewall) before 2.1.5 allows remote authenticated users to execute arbitrary code via shell metacharacters in the TABLE parameter. NOTE: this… Ipcop
- CVE-2014-9428 HIGH · 7.8 The batadv_frag_merge_packets function in net/batman-adv/fragmentation.c in the B.A.T.M.A.N. implementation in the Linux kernel through 3.18.1 uses an incorrect length field during a calculation of an… Linux
- CVE-2014-9460 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in de WP-ViperGB-plug-in vóór 1.3.11 voor WordPress stellen externe aanvallers in staat om de authenticatie van beheerders te kapen… Justin Klein
- CVE-2014-9459 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de AdminObserver-functie in e107_admin/users.php in e107 2.0 alpha2 stelt externe aanvallers in staat om de authenticatie van beheerders te… E107
- CVE-2014-9458 HIGH · 10.0 Heap-gebaseerde bufferoverloop in de GDB-debuggermodule in Hex-Rays IDA Pro vóór 6.6 cumulatieve fix 2014-12-24 maakt het mogelijk dat externe GDB-servers een niet-gespecificeerde impact hebben via… Hex-rays
- CVE-2014-9457 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in classes/mono_display.class.php in PMB 4.1.3 en eerder stelt op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via de id-parameter naar… Pmb Services
- CVE-2014-9456 HIGH · 10.0 Buffer overflow in NotePad++ 6.6.9 allows remote attackers to have unspecified impact via a long Time attribute in an Event element in an XML file.… Don Ho
- CVE-2014-9455 HIGH · 7.5 SQL injection vulnerability in showads.php in CTS Projects & Software ClassAd 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
- CVE-2014-9454 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Simple Sticky Footer plugin before 1.3.3 for WordPress allow remote attackers to hijack the authentication of administrators… Simple Sticky Footer Project
- CVE-2014-9453 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in simple-visitor-stat.php in the Simple visitor stat plugin for WordPress allow remote attackers to inject arbitrary web script or HTML… Simple Visitor Stat Project
- CVE-2014-9452 MEDIUM · 5.0 Directory traversal vulnerability in VDG Security SENSE (formerly DIVA) 2.3.13 allows remote attackers to read arbitrary files via a .. (dot dot) in the default… Vdgsecurity
- CVE-2014-9451 HIGH · 7.5 Multiple stack-based buffer overflows in the DIVA web service API (/webservice) in VDG Security SENSE (formerly DIVA) 2.3.13 allow remote attackers to execute arbitrary code… Vdgsecurity
- CVE-2014-9450 HIGH · 7.5 Meerdere kwetsbaarheden voor SQL-injectie in chart_bar.php in de frontend in Zabbix vóór 1.8.22, 2.0.x vóór 2.0.14 en 2.2.x vóór 2.2.8 stellen externe aanvallers in staat… Zabbix
- CVE-2014-9449 MEDIUM · 5.0 Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY… Exiv2 Fedoraproject
- CVE-2014-9448 HIGH · 7.5 Buffer overflow in Mini-stream RM-MP3 Converter 3.1.2.1.2010.03.30 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long string… Mini-stream
- CVE-2014-9447 MEDIUM · 6.4 Directory traversal vulnerability in the read_long_names function in libelf/elf_begin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root… Elfutils Project
- CVE-2014-9446 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Staff client in Koha before 3.16.6 and 3.18.x before 3.18.2 allow remote attackers to inject arbitrary web script… Koha
- CVE-2014-9445 HIGH · 7.5 SQL injection vulnerability in incl/create.inc.php in Installatron GQ File Manager 0.2.5 allows remote attackers to execute arbitrary SQL commands via the create parameter to index.php.… Installatron
- CVE-2014-9444 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de Frontend Uploader plugin 0.9.2 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Frontend Uploader Project
- CVE-2014-7294 MEDIUM · 5.8 Open redirect vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers to… Nyu
- CVE-2014-7293 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the logon page in NYU OpenSSO Integration 2.1 and earlier for Ex Libris Patron Directory Services (PDS) allows remote attackers… Nyu
- CVE-2014-9443 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Relevanssi plugin before 3.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Relevanssi
- CVE-2014-9442 MEDIUM · 6.5 SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the… Reality66
- CVE-2014-9441 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Lightbox Photo Gallery plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for… Lightbox Photo Gallery Project
- CVE-2014-9440 HIGH · 7.5 SQL injection vulnerability in browse.php in phpMyRecipes 1.2.2 allows remote attackers to execute arbitrary SQL commands via the category parameter. Phpmyrecipes Project
- CVE-2014-9439 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary web script or HTML via the username field… Efssoft
- CVE-2014-9438 MEDIUM · 6.8 Cross-site request forgery (CSRF) kwetsbaarheid in het Moderator Control Panel in vBulletin 4.2.2 stelt externe aanvallers in staat om de authenticatie van beheerders te kapen… Vbulletin
- CVE-2014-9437 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in de Sliding Social Icons-plug-in 1.61 voor WordPress stellen externe aanvallers in staat om de authenticatie van beheerders te… Sliding Social Icons Project
- CVE-2014-9436 MEDIUM · 5.0 Absolute path traversal vulnerability in SysAid On-Premise before 14.4.2 allows remote attackers to read arbitrary files via a \\ (four backslashes) in the fileName parameter… Sysaid
- CVE-2014-9435 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in Absolut Engine 1.73 allow remote authenticated users to execute arbitrary SQL commands via the (1) sectionID parameter to admin/managersection.php, (2)… Absolutengine
- CVE-2014-9434 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in admin/managerrelated.php in de administratieve backend in Absolut Engine 1.73 stelt externe geverifieerde gebruikers in staat om willekeurig webscript of HTML… Absolutengine
- CVE-2013-7417 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in cgi-bin/ipinfo.cgi in IPCop (aka IPCop Firewall) before 2.1.3 allows remote attackers to inject arbitrary web script or HTML via the… Ipcop
- CVE-2011-5318 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in diafan.CMS before 5.1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify articles… Diafan
- CVE-2011-5317 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter. Wondercms
- CVE-2011-5316 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in admin/index.php in Cambio 0.5a nightly r37 allows remote attackers to hijack the authentication of administrators for requests that modify… Cambio Project
- CVE-2011-5315 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in admin/index.php in whCMS 0.115 alpha allows remote attackers to hijack the authentication of administrators for requests that modify credentials… Whcms Project
- CVE-2011-5314 MEDIUM · 5.0 templates/default/index.php in Redaxscript 0.3.2 stelt externe aanvallers in staat om gevoelige informatie te verkrijgen via een direct verzoek, dat het volledige pad in een foutbericht… Redaxscript
- CVE-2011-5313 HIGH · 7.5 Meerdere SQL-injectiekwetsbaarheden in includes/password.php in Redaxscript 0.3.2 stellen externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de (1) id of (2) wachtwoordparameter… Redaxscript
- CVE-2011-5312 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Gollos 2.8 allow remote attackers to inject arbitrary web script or HTML via the returnurl parameter to (1) register.aspx,… Gollos
- CVE-2011-5311 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in pages.php in Wikipad 1.6.0 allows remote attackers to hijack the authentication of administrators for requests that modify pages via… Cherry-design
- CVE-2011-5310 MEDIUM · 5.0 Directory traversal kwetsbaarheid in pages.php in Wikipad 1.6.0 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot dot) in de… Cherry-design
- CVE-2011-5309 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in pages.php in Wikipad 1.6.0 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de id-parameter. Cherry-design
- CVE-2011-5308 HIGH · 7.5 Multiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1)… Cdnvote Project
- CVE-2011-5307 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in index.php in de PhotoSmash-plug-in 1.0.1 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Photosmash Project