CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-7911 HIGH · 7.2 luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization,… Google
- CVE-2014-6261 HIGH · 9.3 Zenoss Core tot en met 5 Beta 3 implementeert de functie Controleren op updates niet correct, waarmee externe aanvallers willekeurige code kunnen uitvoeren door (1)… Zenoss
- CVE-2014-6260 MEDIUM · 6.8 Zenoss Core tot en met 5 Beta 3 vereist geen wachtwoord voor het wijzigen van de pager-opdrachtreeks, waarmee externe aanvallers willekeurige opdrachten kunnen uitvoeren of… Zenoss
- CVE-2014-6259 MEDIUM · 5.0 Zenoss Core through 5 Beta 3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory… Zenoss
- CVE-2014-6258 MEDIUM · 5.0 An unspecified endpoint in Zenoss Core through 5 Beta 3 allows remote attackers to cause a denial of service (CPU consumption) by triggering an arbitrary… Zenoss
- CVE-2014-6257 MEDIUM · 5.0 Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions by using a web-endpoint URL to invoke an object helper method,… Zenoss
- CVE-2014-6256 HIGH · 7.5 Zenoss Core through 5 Beta 3 allows remote attackers to bypass intended access restrictions and place files in a directory with public (1) read or… Zenoss
- CVE-2014-6255 MEDIUM · 6.4 Open redirect vulnerability in the login form in Zenoss Core before 4.2.5 SP161 allows remote attackers to redirect users to arbitrary web sites and conduct… Zenoss
- CVE-2014-6254 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Zenoss Core tot en met 5 Beta 3 stellen externe aanvallers in staat om willekeurig webscript of HTML te… Zenoss
- CVE-2014-6253 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in Zenoss Core tot en met 5 Beta 3 stellen externe aanvallers in staat om de authenticatie van willekeurige… Zenoss
- CVE-2014-6053 MEDIUM · 5.0 The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier does not properly handle attempts to send a large amount of ClientCutText data, which allows… Libvncserver Canonical Debian
- CVE-2014-6052 HIGH · 7.5 The HandleRFBServerMessage function in libvncclient/rfbproto.c in LibVNCServer 0.9.9 and earlier does not check certain malloc return values, which allows remote VNC servers to cause a… Libvncserver Oracle Debian Canonical
- CVE-2014-3583 MEDIUM · 5.0 The handle_headers function in mod_proxy_fcgi.c in the mod_proxy_fcgi module in the Apache HTTP Server 2.4.10 allows remote FastCGI servers to cause a denial of service… Apple Apache Canonical
- CVE-2014-1569 HIGH · 7.5 The definite_length_decoder function in lib/util/quickder.c in Mozilla Network Security Services (NSS) before 3.16.2.4 and 3.17.x before 3.17.3 does not ensure that the DER encoding of… Mozilla
- CVE-2014-8269 HIGH · 7.5 Meerdere stackgebaseerde bufferoverlopen in (1) HWOPOSScale.ocx en (2) HWOPOSSCANNER.ocx in Honeywell OPOS Suite vóór 1.13.4.15 stellen aanvallers op afstand in staat om willekeurige code uit… Honeywell
- CVE-2014-3364 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Prime Security Manager (aka PRSM) 9.2.1-2 and earlier allow remote attackers to inject arbitrary… Cisco
- CVE-2014-8134 LOW · 3.3 The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_enabled setting for KVM guest kernels, which makes it easier for… Linux Canonical Opensuse Suse
- CVE-2014-4633 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in EMC RSA Archer GRC Platform 5.x before 5.5.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified… Emc
- CVE-2014-4628 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in EMC Isilon InsightIQ 2.x en 3.x vóór 3.1 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren… Emc
- CVE-2014-2516 MEDIUM · 5.8 Open redirect vulnerability in EMC RSA Authentication Manager 8.x before 8.1 Patch 6 allows remote attackers to redirect users to arbitrary web sites and conduct… Emc
- CVE-2014-6210 MEDIUM · 4.0 IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to… Ibm
- CVE-2014-6209 MEDIUM · 4.0 IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote… Ibm
- CVE-2014-9374 MEDIUM · 5.0 Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, and 13.x before 13.0.2 and Certified… Digium
- CVE-2014-8956 HIGH · 7.2 Stack-based buffer overflow in the K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local… K7computing
- CVE-2014-8608 MEDIUM · 4.9 The K7Sentry.sys kernel mode driver (aka K7AV Sentry Device Driver) before 12.8.0.119, as used in multiple K7 Computing products, allows local users to cause a… K7computing
- CVE-2014-8515 MEDIUM · 6.8 De webinterface in BitTorrent stelt externe aanvallers in staat om willekeurige opdrachten uit te voeren door gebruik te maken van kennis van de koppelingswaarden en… Bittorrent
- CVE-2014-8489 MEDIUM · 6.4 Open omleidingskwetsbaarheid in startSSO.ping in de SP-eindpunten in Ping Identity PingFederate 6.10.1 stelt externe aanvallers in staat om gebruikers om te leiden naar willekeurige websites… Pingidentity
- CVE-2014-8124 MEDIUM · 5.0 OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows… Openstack Fedoraproject Opensuse Oracle
- CVE-2014-7840 HIGH · 7.5 The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or… Qemu Redhat
- CVE-2014-7136 HIGH · 7.2 Een bufferoverloop op de heap in het K7FWFilt.sys-kernelstuurprogramma (ook bekend als K7Firewall Packet Driver) vóór versie 14.0.1.16, zoals gebruikt in meerdere K7 Computing-producten, stelt lokale… K7computing
- CVE-2014-6408 MEDIUM · 5.0 Docker 1.3.0 through 1.3.1 allows remote attackers to modify the default run profile of image containers and possibly bypass the container by applying unspecified security… Docker
- CVE-2014-6407 HIGH · 7.5 Docker voor 1.3.2 stelt externe aanvallers in staat om naar willekeurige bestanden te schrijven en willekeurige code uit te voeren via een (1) symlink- of… Docker
- CVE-2014-6381 LOW · 2.9 Juniper WLC devices with WLAN Software releases 8.0.x before 8.0.4, 9.0.x before 9.0.2.11, 9.0.3.x before 9.0.3.5, and 9.1.x before 9.1.1, when "Proxy ARP" or "No… Juniper
- CVE-2013-4399 MEDIUM · 4.3 The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be… Redhat
- CVE-2014-9365 MEDIUM · 5.8 The HTTP clients in the (1) httplib, (2) urllib, (3) urllib2, and (4) xmlrpclib libraries in CPython (aka Python) 2.x before 2.7.9 and 3.x before… Python Apple
- CVE-2014-8270 MEDIUM · 5.0 BMC Track-It! 11.3 stelt externe aanvallers in staat om privileges te verkrijgen en willekeurige code uit te voeren door een account aan te maken waarvan… Bmc
- CVE-2014-7265 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in LinPHA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Linpha
- CVE-2014-6316 MEDIUM · 5.8 core/string_api.php in MantisBT before 1.2.18 does not properly categorize URLs when running under the web root, which allows remote attackers to conduct open redirect and… Mantisbt
- CVE-2014-6145 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in de server in IBM Cognos Business Intelligence 10.1 vóór IF10, 10.1.1 vóór IF9, 10.2 vóór IF11, 10.2.1 vóór IF8 en… Ibm
- CVE-2014-6138 MEDIUM · 4.0 The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors. Ibm
- CVE-2014-4323 HIGH · 7.5 The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for… Linux
- CVE-2014-7250 MEDIUM · 5.0 The TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly 3.6, does not properly implement the session timer,… Bsd Freebsd Netbsd Openbsd
- CVE-2014-4815 MEDIUM · 4.3 Session fixation vulnerability in IBM Rational Lifecycle Integration Adapter for Windchill 1.x before 1.0.1 allows remote attackers to hijack web sessions via unspecified vectors. Ibm
- CVE-2014-7263 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted HTTP header, a different vulnerability… Ultrapop
- CVE-2014-7262 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Omake BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted… Ultrapop
- CVE-2014-7261 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in ULTRAPOP.JP i-HTTPD allows remote attackers to inject arbitrary web script or HTML via a crafted string that is improperly rendered… Ultrapop
- CVE-2014-7260 HIGH · 7.5 The Server Side Includes (SSI) implementation in the File Upload BBS component in ULTRAPOP.JP i-HTTPD allows remote attackers to execute arbitrary commands by uploading files… Ultrapop
- CVE-2014-7264 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in admin/themes/default/pages/manage_users.twig in the Users Management feature in the admin component in Chyrp before 2.5.1 allow remote authenticated users to… Chyrp
- CVE-2014-6215 LOW · 3.5 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and… Ibm
- CVE-2014-6163 LOW · 3.5 Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script… Ibm