CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2011-5306 MEDIUM · 6.8 Cross-site request forgery (CSRF) kwetsbaarheid in cgi-bin/admin/setup_edit.cgi in CosmoShop ePRO 10.05.00 stelt externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken… Zaunz Gmbh
- CVE-2011-5305 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in CosmoShop ePRO 10.05.00 allow remote attackers to inject arbitrary web script or HTML via (1) the rcopy parameter to… Zaunz Gmbh
- CVE-2011-5304 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Sodahead Polls plugin before 2.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via… Sodahead
- CVE-2011-5303 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Spitfire CMS 1.0.436 allows remote attackers to inject arbitrary web script or HTML via a cms_username cookie. Clausmuus
- CVE-2011-5302 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in adm/admin_edit.php in PHPDug 2.0.0 stelt externe aanvallers in staat om de authenticatie van beheerders te kapen voor verzoeken die… Kubelabs
- CVE-2011-5301 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in PHPDug 2.0.0 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via (1) de story_url-parameter om… Kubelabs
- CVE-2011-5300 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in admin/setup/config/users.php in poMMo Aardvark PR16.1 allows remote attackers to hijack the authentication of administrators for requests that modify credentials… Pommo
- CVE-2011-5299 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in poMMo Aardvark PR16.1 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via (1) de referer… Pommo
- CVE-2011-5298 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Argyle Social 2011-04-26 allow remote attackers to hijack the authentication of administrators for requests that (1) modify credentials… Viralheat
- CVE-2011-5297 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in TTChat 1.0.4 stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren via (1) de msg-parameter naar… Ttfreeware
- CVE-2011-5296 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in profilo.php in Happy Chat 1.0 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de nick… Tuttophp
- CVE-2011-5295 HIGH · 9.3 Buffer overflow in the Download method in a certain ActiveX control in MDIEEx.dll in Gogago YouTube Video Converter 1.1.6 allows remote attackers to execute arbitrary… Gogago
- CVE-2011-5294 MEDIUM · 6.4 The SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control in LTCML14n.dll 14.0.0.34 in Kofax e-Transactions Sender Sendbox 2.5.0.933 allows remote attackers to write to arbitrary files… Kofax
- CVE-2011-5293 HIGH · 9.3 The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname… Threediffy
- CVE-2011-5292 HIGH · 7.5 The EaseWeFtp.FtpLibrary ActiveX control in EaseWeFtp.ocx in Easewe FTP OCX 4.5.0.9 does not restrict access to certain methods, which allows remote attackers to execute arbitrary… Easewe Software
- CVE-2011-5291 MEDIUM · 6.4 The SaveData method in the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx in Ashampoo 3D CAD Professional 3.x before 3.0.2 allows remote attackers to write to arbitrary…
- CVE-2011-5290 MEDIUM · 6.4 The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100_EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote attackers to write to arbitrary files via a… Idrive Inc
- CVE-2011-5289 MEDIUM · 6.4 The SaveDecrypted method in the ChilkatCrypt2.ChilkatOmaDrm.1 ActiveX control in ChilkatCrypt2.dll in aTube Catcher 2.3.570 allows remote attackers to write to arbitrary files via a pathname… Diego Uscanga
- CVE-2011-5288 HIGH · 9.3 Meerdere bufferoverlopen in het ThreeDify.ThreeDifyDesigner.1 ActiveX-besturingselement in ActiveSolid.dll in ThreeDify Designer 5.0.2 stellen externe aanvallers in staat om willekeurige code uit te voeren via een… Threedify
- CVE-2011-5287 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in HESK before 2.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) hesk_settings[tmp_title] or (2)… Hesk
- CVE-2011-5286 HIGH · 7.5 SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA… Social Slider Project
- CVE-2011-5285 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in BugFree 2.1.3 allow remote attackers to inject arbitrary web script or HTML via (1) the ActionType parameter to Bug.php,… Bugfree
- CVE-2014-9433 LOW · 2.6 Multiple cross-site scripting (XSS) vulnerabilities in cms/front_content.php in Contenido before 4.9.6, when advanced mod rewrite (AMR) is disabled, allow remote attackers to inject arbitrary web… Contenido
- CVE-2014-9432 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in templates/2k11/admin/overview.inc.tpl in Serendipity before 2.0-rc2 allow remote attackers to inject arbitrary web script or HTML via a blog comment… S9y
- CVE-2014-9431 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Smoothwall Express 3.1 and 3.0 SP3 allow remote attackers to hijack the authentication of administrators for requests that… Smoothwall
- CVE-2014-9430 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in httpd/cgi-bin/vpn.cgi/vpnconfig.dat in Smoothwall Express 3.0 SP3 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de… Smoothwall
- CVE-2014-9429 MEDIUM · 4.3 Meerdere XSS-kwetsbaarheden (cross-site scripting) in Smoothwall Express 3.1 en 3.0 SP3 stellen externe aanvallers in staat om willekeurige webscripts of HTML te injecteren via (1)… Smoothwall
- CVE-2014-9119 MEDIUM · 5.0 Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 and earlier for Wordpress allows remote attackers to read arbitrary files via a ..… Db Backup Project
- CVE-2014-8145 HIGH · 7.5 Meerdere op heap gebaseerde bufferoverlopen in Sound eXchange (SoX) 14.4.1 en eerder stellen externe aanvallers in staat om niet-gespecificeerde impact te hebben via een vervaardigd… Sound Exchange Project Debian Oracle
- CVE-2014-8144 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user… Doorkeeper Project
- CVE-2011-5284 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de webbeheerinterface in httpd/cgi-bin/shutdown.cgi in Smoothwall Express 3.1 en 3.0 SP3 en eerder stelt externe aanvallers in staat om… Smoothwall
- CVE-2011-5283 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the web management interface in httpd/cgi-bin/ipinfo.cgi in Smoothwall Express 3.1 and 3.0 SP3 and earlier allows remote attackers to inject… Smoothwall
- CVE-2014-9401 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the WP Limit Posts Automatically plugin 0.7 and earlier for WordPress allows remote attackers to hijack the authentication of… Wp Limit Posts Automatically Project
- CVE-2014-9400 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Wp Unique Article Header Image plugin 1.0 and earlier for WordPress allow remote attackers to hijack the… Wp Unique Article Header Image Project
- CVE-2014-9399 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the TweetScribe plugin 1.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for requests… Tweetscribe Project
- CVE-2014-9398 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Twitter LiveBlog plugin 1.1.2 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for… Twitter Liveblog Project
- CVE-2014-9397 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the twimp-wp plugin for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site… Twimp-wp Project
- CVE-2014-9396 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the SimpleFlickr plugin 3.0.3 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for… Simpleflickr Project
- CVE-2014-9395 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Simplelife plugin 1.2 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for… Simplelife Project
- CVE-2014-9394 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in de PWGRandom-plug-in 1.11 en eerder voor WordPress stellen externe aanvallers in staat om de authenticatie van beheerders te… Pwgrandom Project
- CVE-2014-9393 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Post to Twitter plugin 0.7 and earlier for WordPress allow remote attackers to hijack the authentication of… Post To Twitter Project
- CVE-2014-9392 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the PictoBrowser (pictobrowser-gallery) plugin 0.3.1 and earlier for WordPress allows remote attackers to hijack the authentication of administrators for… Pictobrowser Project
- CVE-2014-9391 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the gSlideShow plugin 0.1 and earlier for WordPress allow remote attackers to hijack the authentication of administrators for… Gslideshow Project
- CVE-2014-9367 MEDIUM · 4.3 Onvolledige blacklist-kwetsbaarheid in de urlEncode-functie in lib/TWiki.pm in TWiki 6.0.0 en 6.0.1 stelt externe aanvallers in staat om cross-site scripting (XSS) -aanvallen uit te voeren… Twiki
- CVE-2014-9325 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in TWiki 6.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) QUERYSTRING variable in lib/TWiki.pm… Twiki
- CVE-2014-9254 HIGH · 7.5 bb_func_unsub.php in MiniBB 3.1 before 20141127 uses an incorrect regular expression, which allows remote attackers to conduct SQl injection attacks via the code parameter in… Minibb
- CVE-2014-8752 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in view.php in JCE-Tech PHP Video Script (aka Video Niche Script) 4.0 allow remote attackers to inject arbitrary web script… Jce-tech
- CVE-2014-9426 HIGH · 7.3 The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in PHP through 5.6.4 attempts to perform a free operation on a stack-based character array, which… Php
- CVE-2014-9425 HIGH · 7.5 Dubbele gratis kwetsbaarheid in de functie zend_ts_hash_graceful_destroy in zend_ts_hash.c in de Zend Engine in PHP tot en met 5.5.20 en 5.6.x tot en met 5.6.4… Php Apple
- CVE-2014-4634 MEDIUM · 4.6 Unquoted Windows search path vulnerability in EMC Replication Manager through 5.5.2 and AppSync before 2.1.0 allows local users to gain privileges via a Trojan horse… Emc