CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-9135 MEDIUM · 4.3 The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via… Huawei
- CVE-2014-8875 MEDIUM · 5.0 Met de functie XML_RPC_cd in lib/pear/XML/RPC.php in Revive Adserver vóór 3.0.6 kunnen externe aanvallers een denial of service (CPU- en geheugenverbruik) veroorzaken via een vervaardigd… Revive-adserver
- CVE-2014-8793 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in lib/max/Admin/UI/Field/PublisherIdField.php in Revive Adserver before 3.0.6 allows remote attackers to inject arbitrary web script or HTML via the refresh_page parameter… Revive-adserver
- CVE-2014-8724 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de W3 Total Cache plugin voor 0.9.4.1 voor WordPress, wanneer de debug-modus is ingeschakeld, stelt externe aanvallers in staat om… Boldgrid
- CVE-2014-8136 LOW · 2.1 De functies (1) qemuDomainMigratePerform en (2) qemuDomainMigrateFinish2 in qemu/qemu_driver.c in libvirt ontgrendelen het domein niet wanneer een ACL-controle mislukt, waardoor lokale gebruikers een weigering van… Mageia Redhat Canonical Opensuse
- CVE-2014-8135 LOW · 2.1 The storageVolUpload function in storage/storage_driver.c in libvirt before 1.2.11 does not check a certain return value, which allows local users to cause a denial of… Redhat
- CVE-2014-7208 HIGH · 7.2 Met GParted vóór 0.15.0 kunnen lokale gebruikers willekeurige opdrachten uitvoeren met rootbevoegdheden via shell-metakarakters in een vervaardigd bestandssysteemlabel. Gparted
- CVE-2014-6396 HIGH · 7.5 The dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a… Ettercap-project
- CVE-2014-6395 HIGH · 7.5 Heap-based buffer overflow in the dissector_postgresql function in dissectors/ec_postgresql.c in Ettercap before 0.8.1 allows remote attackers to cause a denial of service or possibly execute… Ettercap-project
- CVE-2014-2716 MEDIUM · 4.3 De Ekahau B4 personeelsbadge 5.7 met firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL en Activator 3 hergebruikt de RC4-coderingsstroom, waardoor het voor externe aanvallers… Ekahau
- CVE-2014-2026 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in de zoekfunctionaliteit in United Planet Intrexx Professional vóór 5.2 Online Update 0905 en 6.x vóór 6.0 Online Update 10 stelt… Unitedplanet
- CVE-2013-4442 MEDIUM · 5.0 Wachtwoordgenerator (ook bekend als Pwgen) vóór 2.07 gebruikt zwakke pseudo gegenereerde nummers wanneer /dev/urandom niet beschikbaar is, wat het voor contextafhankelijke aanvallers gemakkelijker maakt om… Pwgen Project
- CVE-2013-4440 MEDIUM · 5.0 Password Generator (ook bekend als Pwgen) vóór 2.07 genereert zwakke niet-tty wachtwoorden, waardoor het voor contextafhankelijke aanvallers gemakkelijker wordt om het wachtwoord te raden via… Pwgen Project
- CVE-2014-8272 MEDIUM · 5.0 The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values,… Dell Intel
- CVE-2014-7268 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary… Ricksoft
- CVE-2014-7267 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de output-page generator in de Ricksoft WBS Gantt-Chart add-on 7.8.1 en eerder voor JIRA stelt op afstand geverifieerde gebruikers in… Ricksoft
- CVE-2014-7249 HIGH · 10.0 Buffer overflow on the Allied Telesis AR440S, AR441S, AR442S, AR745, AR750S, AR750S-DP, AT-8624POE, AT-8624T/2M, AT-8648T/2SP, AT-8748XL, AT-8848, AT-9816GB, AT-9924T, AT-9924Ts, CentreCOM AR415S, CentreCOM AR450S, CentreCOM… Alliedtelesis
- CVE-2014-7241 MEDIUM · 6.8 The TSUTAYA application 5.3 and earlier for Android allows remote attackers to execute arbitrary Java methods via a crafted HTML document. Tsutaya
- CVE-2014-8902 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Blog Portlet in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0… Ibm
- CVE-2014-8016 MEDIUM · 5.0 The Cisco IronPort Email Security Appliance (ESA) allows remote attackers to cause a denial of service (CPU consumption) via long Subject headers in e-mail messages,… Cisco
- CVE-2014-6193 MEDIUM · 4.9 IBM WebSphere Portal 8.0.0 through 8.0.0.1 CF14 and 8.5.0 before CF04, when the Managed Pages setting is enabled, allows remote authenticated users to write to… Ibm
- CVE-2014-6173 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de Process Inspector in IBM Business Process Manager (BPM) 8.0.x tot en met 8.0.1.3 en 8.5.x tot en met 8.5.5… Ibm
- CVE-2014-6171 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and… Ibm
- CVE-2014-4801 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM Rational Quality Manager 2.x through 2.0.1.1, 3.x before 3.0.1.6 iFix 4, 4.x before 4.0.7 iFix 2, and 5.x before… Ibm
- CVE-2014-8901 MEDIUM · 4.0 IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 allows remote authenticated users to cause a… Ibm
- CVE-2014-8890 MEDIUM · 5.1 IBM WebSphere Application Server Liberty Profile 8.5.x before 8.5.5.4 allows remote attackers to gain privileges by leveraging the combination of a servlet's deployment descriptor security… Ibm
- CVE-2014-8014 MEDIUM · 5.0 Cisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCub63710. Cisco
- CVE-2014-8012 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script… Cisco
- CVE-2014-6174 MEDIUM · 4.3 IBM WebSphere Application Server 7.x vóór 7.0.0.37, 8.0.x vóór 8.0.0.10 en 8.5.x vóór 8.5.5.4 stelt externe aanvallers in staat om clickjacking-aanvallen uit te voeren via… Ibm
- CVE-2014-6167 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the URL rewriting feature in IBM WebSphere Application Server 7.x before 7.0.0.37, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.4 allows… Ibm
- CVE-2014-6166 MEDIUM · 4.3 The Communications Enabled Applications (CEA) service in IBM WebSphere Application Server 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.4, and Feature Pack for CEA 1.x before… Ibm
- CVE-2014-6164 MEDIUM · 5.0 IBM WebSphere Application Server 8.0.x vóór 8.0.0.10 en 8.5.x vóór 8.5.5.4 staat externe aanvallers toe om OpenID- en OpenID Connect-cookies te vervalsen en bijgevolg gevoelige… Ibm
- CVE-2014-6089 MEDIUM · 4.0 IBM Security Access Manager for Mobile 8.x vóór 8.0.1 en Security Access Manager for Web 7.x vóór 7.0.0 FP10 en 8.x vóór 8.0.1 stellen externe… Ibm
- CVE-2014-6088 MEDIUM · 5.0 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote… Ibm
- CVE-2014-6087 MEDIUM · 5.0 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it… Ibm
- CVE-2014-6086 MEDIUM · 5.0 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not… Ibm
- CVE-2014-6084 MEDIUM · 5.0 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it… Ibm
- CVE-2014-6083 MEDIUM · 5.0 IBM Security Access Manager voor mobiel 8.x vóór 8.0.1 en Security Access Manager voor web 7.x vóór 7.0.0 FP10 en 8.x vóór 8.0.1 staan externe… Ibm
- CVE-2014-6082 MEDIUM · 4.0 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote… Ibm
- CVE-2014-6080 MEDIUM · 6.5 SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x… Ibm
- CVE-2014-6078 MEDIUM · 5.0 IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 do not… Ibm
- CVE-2014-6077 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10… Ibm
- CVE-2014-6076 MEDIUM · 4.3 IBM Security Access Manager voor mobiel 8.x vóór 8.0.1 en Security Access Manager voor web 7.x vóór 7.0.0 FP10 en 8.x vóór 8.0.1 staan externe… Ibm
- CVE-2014-9406 HIGH · 10.0 ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for… Arris
- CVE-2014-8120 MEDIUM · 4.4 The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX management URLs of all local Java virtual machines… Thermostat Project
- CVE-2014-8108 MEDIUM · 5.0 The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service… Redhat Apache Apple
- CVE-2014-3580 MEDIUM · 5.0 The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service… Redhat Apache Debian Apple
- CVE-2014-9388 MEDIUM · 5.0 bug_report.php in MantisBT vóór 1.2.18 stelt externe aanvallers in staat om willekeurige problemen toe te wijzen via de parameter handler_id. Mantisbt
- CVE-2014-9387 HIGH · 10.0 SAP BusinessObjects Edge 4.1 allows remote attackers to obtain the SI_PLATFORM_SEARCH_SERVER_LOGON_TOKEN token and gain privileges via a crafted CORBA call, aka SAP Note 2039905. Sap
- CVE-2014-8553 MEDIUM · 5.0 The mci_account_get_array_by_id function in api/soap/mc_account_api.php in MantisBT before 1.2.18 allows remote attackers to obtain sensitive information via a (1) mc_project_get_users, (2) mc_issue_get, (3) mc_filter_get_issues, or… Mantisbt