CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2011-3591 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 3.4.x before 3.4.5 allow remote authenticated users to inject arbitrary web script or HTML via a crafted row… Phpmyadmin
- CVE-2011-1798 HIGH · 7.5 rendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not properly perform a cast of an unspecified variable during an attempt to handle… Google
- CVE-2011-1796 HIGH · 7.5 Use-after-free vulnerability in the FrameView::calculateScrollbarModesForLayout function in page/FrameView.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of… Google
- CVE-2011-1795 HIGH · 7.5 Integer underflow in the HTMLFormElement::removeFormElement function in html/HTMLFormElement.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of… Google
- CVE-2011-1794 HIGH · 7.5 Integer overflow in the FilterEffect::copyImageBytes function in platform/graphics/filters/FilterEffect.cpp in the SVG filter implementation in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers… Google
- CVE-2011-1793 HIGH · 7.5 rendering/svg/RenderSVGResourceFilter.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified… Google
- CVE-2014-9420 MEDIUM · 4.9 The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users… Linux
- CVE-2014-9419 LOW · 2.1 The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with… Linux
- CVE-2014-7300 HIGH · 7.2 GNOME Shell 3.14.x before 3.14.1, when the Screen Lock feature is used, does not limit the aggregate memory consumption of all active PrtSc requests, which… Gnome Redhat
- CVE-2014-2217 HIGH · 7.5 Absolute kwetsbaarheid van padtraversal in de RadAsyncUpload-besturing in de RadControls in Telerik UI voor ASP.NET AJAX vóór Q3 2012 SP2 stelt externe aanvallers in staat… Progress
- CVE-2014-1449 MEDIUM · 5.0 The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history… Maxthon
- CVE-2014-7193 MEDIUM · 5.8 De Crumb-plug-in vóór 3.0.0 voor Node.js beperkt de toegang tot tokens niet goed in situaties waarin een hapi-routeafhandelaar CORS heeft ingeschakeld, waardoor externe aanvallers gevoelige… Sideway
- CVE-2014-3971 MEDIUM · 5.0 The CmdAuthenticate::_authenticateX509 function in db/commands/authentication_commands.cpp in mongod in MongoDB 2.6.x before 2.6.2 allows remote attackers to cause a denial of service (daemon crash) by attempting… Mongodb
- CVE-2014-9418 LOW · 2.1 The eSpace Meeting ActiveX control (eSpaceStatusCtrl.dll) in Huawei eSpace Desktop before V200R001C03 allows local users to cause a denial of service (memory overflow) via unspecified… Huawei
- CVE-2014-9417 LOW · 2.1 Met de Meeting-component in Huawei eSpace Desktop vóór V100R001C03 kunnen lokale gebruikers een denial of service (programma-uitgang) veroorzaken via een vervaardigde afbeelding. Huawei
- CVE-2014-9416 MEDIUM · 4.4 Multiple untrusted search path vulnerabilities in Huawei eSpace Desktop before V200R003C00 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a… Huawei
- CVE-2014-9415 LOW · 1.9 Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted QES file. Huawei
- CVE-2014-9414 MEDIUM · 6.8 The W3 Total Cache plugin before 0.9.4.1 for WordPress does not properly handle empty nonces, which allows remote attackers to conduct cross-site request forgery (CSRF)… Boldgrid
- CVE-2014-9413 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the IP Ban (simple-ip-ban) plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for… Ip Ban Project
- CVE-2014-9334 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in the Bird Feeder plugin 1.2.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests… Bird Feeder Project
- CVE-2014-9223 HIGH · 10.0 Multiple buffer overflows in AllegroSoft RomPager, as used in Huawei Home Gateway products and other vendors and products, allow remote attackers to cause a denial… Allegrosoft
- CVE-2014-9222 HIGH · 10.0 AllegroSoft RomPager 4.34 and earlier, as used in Huawei Home Gateway products and other vendors and products, allows remote attackers to gain privileges via a… Allegrosoft
- CVE-2014-8810 MEDIUM · 6.5 SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the… Wpsymposiumpro
- CVE-2014-8809 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de WP Symposium-plug-in vóór 14.11 voor WordPress stellen externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Wpsymposiumpro
- CVE-2014-8138 HIGH · 7.5 Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute… Redhat Jasper Project
- CVE-2014-8137 MEDIUM · 6.8 Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute… Jasper Project Redhat
- CVE-2004-2771 HIGH · 7.5 Met de functie Expand in fio.c in Heirloom mailx 12.5 en eerder en BSD mailx 8.1.2 en eerder kunnen externe aanvallers willekeurige opdrachten uitvoeren via… Oracle Redhat Bsd Mailx Project Heirloom
- CVE-2014-4322 HIGH · 7.2 drivers/misc/qseecom.c in the QSEECOM driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products,… Linux
- CVE-2014-6188 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before… Ibm
- CVE-2014-6187 MEDIUM · 6.0 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x vóór 6.3.0.5, 7.0.x vóór 7.0.0.5, 7.5.x vóór 7.5.0.3 en 8.0.x… Ibm
- CVE-2014-6186 MEDIUM · 4.0 IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to… Ibm
- CVE-2014-6181 MEDIUM · 4.0 IBM WebSphere Service Registry and Repository (WSRR) 7.0.x vóór 7.0.0.5 voert geen toegangscontrolecontroles uit voor ingesloten objecten, waardoor op afstand geverifieerde gebruikers gevoelige informatie kunnen… Ibm
- CVE-2014-6180 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote… Ibm
- CVE-2014-6179 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.2 allows remote… Ibm
- CVE-2014-6178 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated… Ibm
- CVE-2014-6177 MEDIUM · 4.0 IBM WebSphere Service Registry and Repository (WSRR) 7.0.x vóór 7.0.0.5 en 7.5.x vóór 7.5.0.3 voert geen toegangscontrolecontroles uit voor diepte-0 ophaalbewerkingen, waardoor op afstand geverifieerde… Ibm
- CVE-2014-6155 MEDIUM · 4.0 Meerdere kwetsbaarheden in de ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x tot en met 7.5.0.4, 8.0.x vóór 8.0.0.3 en 8.5.x vóór… Ibm
- CVE-2014-6153 MEDIUM · 4.3 The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x… Ibm
- CVE-2014-6132 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 t/m 6.3.0.5, 7.0.x t/m 7.0.0.5, 7.5.x t/m 7.5.0.4,… Ibm
- CVE-2014-3569 MEDIUM · 5.0 The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to… Openssl
- CVE-2014-7999 HIGH · 7.7 Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote authenticated users to install arbitrary firmware by leveraging unspecified HTTP handler access on… Cisco
- CVE-2014-7995 HIGH · 7.2 Cisco-Meraki MS-, MR- en MX-apparaten met firmware vóór 24-09-2014 stellen fysiek nabije aanvallers in staat om shell-toegang te verkrijgen door de behuizing van een apparaat… Cisco
- CVE-2014-7994 MEDIUM · 5.4 Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to execute arbitrary commands by leveraging knowledge of a cross-device secret and… Cisco
- CVE-2014-7993 LOW · 3.3 Cisco-Meraki MS, MR, and MX devices with firmware before 2014-09-24 allow remote attackers to obtain sensitive credential information by leveraging unspecified HTTP handler access on… Cisco
- CVE-2014-9412 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in NetIQ Access Manager (NAM) 4.x before 4.1 allow remote attackers to inject arbitrary web script or HTML via (1)… Microfocus
- CVE-2014-9115 HIGH · 7.5 SQL injection vulnerability in the rate_picture function in include/functions_rate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute… Piwigo
- CVE-2014-5217 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in nps/servlet/webacc in the Administration Console server in NetIQ Access Manager (NAM) 4.x before 4.1 allows remote attackers to hijack… Microfocus
- CVE-2014-5216 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in NetIQ Access Manager (NAM) 4.x vóór 4.0.1 HF3 stellen externe aanvallers in staat om willekeurig webscript of HTML te… Microfocus
- CVE-2014-5215 MEDIUM · 4.0 NetIQ Access Manager (NAM) 4.x vóór 4.0.1 HF3 stelt externe geverifieerde beheerders in staat om wachtwoorden voor serviceaccounts te ontdekken via een verzoek aan (1)… Microfocus
- CVE-2014-5214 MEDIUM · 4.0 nps/servlet/webacc in iManager in de Administration Console-server in NetIQ Access Manager (NAM) 4.x vóór 4.0.1 Met HF3 kunnen op afstand geverifieerde novlwww-gebruikers willekeurige bestanden lezen… Microfocus