CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4630 MEDIUM · 4.3 EMC RSA BSAFE Micro Edition Suite (mes) 4.0.x vóór 4.0.6 en RSA BSAFE SSL-J vóór 6.1.4 zorgen er niet voor dat het X.509-certificaat van een… Dell
- CVE-2013-3295 HIGH · 7.5 Directory traversal-kwetsbaarheid in install/popup.php in Exponent CMS vóór 2.2.0 RC1 stelt externe aanvallers in staat om willekeurige lokale bestanden op te nemen en uit te… Exponentcms
- CVE-2011-2727 MEDIUM · 4.3 The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.php, and (3) cmsincludes/cms_plugin_api_link.inc.php scripts in Tribal Tribiq CMS before 5.2.7c allow remote attackers to obtain sensitive information via a direct… Tribiq
- CVE-2014-8109 MEDIUM · 4.3 mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x through 2.4.10 does not support an httpd configuration in which the same… Apache Canonical Fedoraproject Oracle
- CVE-2014-3556 MEDIUM · 6.8 The STARTTLS implementation in mail/ngx_mail_smtp_handler.c in the SMTP proxy in nginx 1.5.x and 1.6.x before 1.6.1 and 1.7.x before 1.7.4 does not properly restrict I/O… F5
- CVE-2014-2224 MEDIUM · 5.0 Plogger 1.0 RC1 and earlier, when the Lucid theme is used, does not assign new values for certain codes, which makes it easier for remote… Plogger
- CVE-2014-1908 MEDIUM · 5.0 The error-handling feature in (1) bp.php, (2) videowhisper_streaming.php, and (3) ls/rtmp.inc.php in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allows remote attackers… Videowhisper
- CVE-2014-1905 HIGH · 10.0 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in ls/vw_snapshots.php in de plug-in VideoWhisper Live Streaming Integration vóór 4.29.5 voor WordPress stelt externe aanvallers in staat… Videowhisper
- CVE-2014-6168 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users… Ibm
- CVE-2014-6160 LOW · 2.1 IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows… Ibm Google
- CVE-2014-6123 LOW · 2.1 IBM Rational AppScan Source 8.0 t/m 8.0.0.2 en 8.5 t/m 8.5.0.1 en Security AppScan Source 8.6 t/m 8.6.0.2, 8.7 t/m 8.7.0.1, 8.8, 9.0 t/m 9.0.0.1… Ibm
- CVE-2014-9424 HIGH · 7.5 Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a denial of service or possibly have… Openbsd
- CVE-2014-8132 MEDIUM · 5.0 Dubbele gratis kwetsbaarheid in de ssh_packet_kexinit-functie in kex.c in libssh 0.5.x en 0.6.x vóór 0.6.4 stelt externe aanvallers in staat om een denial of service… Libssh Debian Opensuse Fedoraproject
- CVE-2014-6229 MEDIUM · 5.0 De HashContext-klasse in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) vóór 3.3.0 verwacht ten onrechte dat een bepaalde sleutelreeks '' gebruikt voor beëindiging, waardoor externe… Facebook
- CVE-2014-6228 HIGH · 7.5 Integer-overloop in de string_chunk_split-functie in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine (HHVM) vóór 3.3.0 stelt externe aanvallers in staat om een denial of service (applicatiecrash)… Facebook
- CVE-2014-5386 MEDIUM · 5.0 The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number generator, which makes it easier for… Facebook
- CVE-2014-2209 MEDIUM · 5.0 Facebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows remote attackers to bypass intended access… Facebook
- CVE-2014-2208 HIGH · 7.5 CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (HHVM) before 2.4.2 allows remote attackers to execute arbitrary commands… Facebook
- CVE-2012-1415 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in lib/logout.php in DFLabs PTK 1.0.5 and earlier allows remote attackers to hijack the authentication of administrators or investigators for… Dflabs
- CVE-2012-1303 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in amCharts Flash 1 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2)… Amcharts
- CVE-2012-1302 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in amMap 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file… Ammap Project
- CVE-2011-4722 HIGH · 7.8 Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot dot) in… Ipswitch
- CVE-2010-5075 LOW · 2.1 Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service (memory corruption and panic)…
- CVE-2013-4663 HIGH · 7.5 git_http_controller.rb in the redmine_git_hosting plugin for Redmine allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the service parameter to info/refs, related… Redmine
- CVE-2012-1203 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add… Syndeocms
- CVE-2011-4720 MEDIUM · 5.0 Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename in a (1) RRQ or… Hillstone Software
- CVE-2013-6919 MEDIUM · 4.3 The default configuration of phpThumb before 1.7.12 has a false value for the disable_debug option, which allows remote attackers to conduct Server-Side Request Forgery (SSRF)… Phpthumb Project
- CVE-2013-6241 MEDIUM · 4.0 De verjaardagswidget in de backend in Open-Xchange (OX) AppSuite 7.2.x vóór 7.2.2-rev25 en 7.4.x vóór 7.4.0-rev14, in bepaalde scenario's voor het delen van gebruikers-id's, construeert… Open-xchange
- CVE-2013-6227 HIGH · 7.5 Onbeperkte kwetsbaarheid voor het uploaden van bestanden in plug-ins/editor.zoho/agent/save_zoho.php in de Zoho-plug-in in Pydio (voorheen AjaXplorer) vóór 5.0.4 stelt externe aanvallers in staat om willekeurige… Ajaxplorer Pydio
- CVE-2013-6043 MEDIUM · 5.0 The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows… Softaculous
- CVE-2013-6041 HIGH · 7.5 index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action. Softaculous
- CVE-2013-5958 MEDIUM · 5.0 The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial… Sensiolabs
- CVE-2013-4793 HIGH · 7.5 The update function in umbraco.webservices/templates/templateService.cs in the TemplateService component in Umbraco CMS before 6.0.4 does not require authentication, which allows remote attackers to execute arbitrary… Umbraco
- CVE-2014-9188 HIGH · 10.0 Bufferoverloop in een ActiveX-besturingselement in MDraw30.ocx in Schneider Electric ProClima vóór 6.1.7 stelt externe aanvallers in staat om willekeurige code uit te voeren via niet-gespecificeerde… Schneider Electric
- CVE-2014-8514 HIGH · 7.5 Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a… Schneider Electric
- CVE-2014-8513 HIGH · 7.5 Buffer overflow in an ActiveX control in MDraw30.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a… Schneider Electric
- CVE-2014-8512 HIGH · 7.5 Bufferoverloop in een ActiveX-besturingselement in Atx45.ocx in Schneider Electric ProClima vóór 6.1.7 stelt externe aanvallers in staat om willekeurige code uit te voeren via niet-gespecificeerde… Schneider Electric
- CVE-2014-8511 HIGH · 10.0 Buffer overflow in an ActiveX control in Atx45.ocx in Schneider Electric ProClima before 6.1.7 allows remote attackers to execute arbitrary code via unspecified vectors, a… Schneider-electric
- CVE-2014-0748 HIGH · 7.2 apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message,… Cray
- CVE-2013-4769 MEDIUM · 4.3 De cloudcontroller (ook bekend als CLC) -component in Eucalyptus 3.3.x en 3.4.x vóór 3.4.2, wanneer de instelling dns.recursive.enabled wordt gebruikt, stelt externe aanvallers in staat… Eucalyptus
- CVE-2013-4754 LOW · 3.5 Meerdere cross-site scripting (XSS) kwetsbaarheden in Owl Intranet Knowledgebase 1.10 stellen op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML te injecteren via… Owl
- CVE-2013-4753 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search… Claroline
- CVE-2011-3623 HIGH · 7.5 Multiple stack-based buffer overflows in VideoLAN VLC media player before 1.0.2 allow remote attackers to execute arbitrary code via (1) a crafted ASF file, related… Videolan
- CVE-2010-2062 HIGH · 7.5 Integer underflow in the real_get_rdt_chunk function in real.c, as used in modules/access/rtsp/real.c in VideoLAN VLC media player before 1.0.1 and stream/realrtsp/real.c in MPlayer before r29447,… Videolan
- CVE-2010-1445 HIGH · 7.5 Op heap gebaseerde bufferoverloop in VideoLAN VLC-mediaspeler vóór 1.0.6 stelt externe aanvallers in staat om een denial of service (applicatiecrash) te veroorzaken of mogelijk willekeurige… Videolan
- CVE-2010-1444 HIGH · 7.5 The ZIP archive decompressor in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of service (invalid memory access and application… Videolan
- CVE-2010-1443 MEDIUM · 5.0 The parse_track_node function in modules/demux/playlist/xspf.c in the XSPF playlist parser in VideoLAN VLC media player before 1.0.6 allows remote attackers to cause a denial of… Videolan
- CVE-2010-1442 HIGH · 7.5 VideoLAN VLC mediaspeler voor 1.0.6 stelt externe aanvallers in staat om een denial of service (ongeldige geheugentoegang en applicatiecrash) te veroorzaken of mogelijk willekeurige code… Videolan
- CVE-2010-1441 HIGH · 7.5 Multiple heap-based buffer overflows in VideoLAN VLC media player before 1.0.6 allow remote attackers to cause a denial of service (application crash) or possibly execute… Videolan
- CVE-2011-3592 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in the PMA_unInlineEditRow function in js/sql.js in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script… Phpmyadmin