CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-6143 LOW · 2.1 The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response. Ibm
- CVE-2014-3058 MEDIUM · 6.0 Cross-site request forgery (CSRF) -kwetsbaarheid op het IBM WebSphere DataPower XC10-apparaat 2.1 en 2.5 vóór FP4 stelt op afstand geverifieerde gebruikers in staat om de… Ibm
- CVE-2014-9264 HIGH · 7.5 Op stapels gebaseerde bufferoverloop in de .NET Data Provider in SAP SQL Anywhere stelt externe aanvallers in staat om willekeurige code uit te voeren via… Sap
- CVE-2014-9192 HIGH · 7.8 Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause… Trihedral
- CVE-2014-8373 HIGH · 9.0 The VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through 6.1.1 allows remote authenticated users to gain privileges via vectors involving… Vmware
- CVE-2014-8372 MEDIUM · 4.0 AirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to obtain the organizational information and statistics from arbitrary tenants via vectors involving… Vmware
- CVE-2014-7852 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in JBoss RichFaces, as used in JBoss Portal 6.1.1, allows remote attackers to inject arbitrary web script or HTML via crafted… Redhat
- CVE-2014-8632 MEDIUM · 4.3 The structured-clone implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 does not properly interact with XrayWrapper property filtering, which allows remote attackers to… Mozilla
- CVE-2014-8631 MEDIUM · 4.3 The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 34.0 and SeaMonkey before 2.31 supports native-interface passing, which allows remote attackers to bypass intended… Mozilla
- CVE-2014-7192 HIGH · 10.0 Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows… Joyent
- CVE-2014-6114 MEDIUM · 5.0 The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7.1 before MP1 FP5 IF43; WebSphere Operational Decision Management 7.5… Ibm
- CVE-2014-1595 LOW · 2.1 Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunderbird before 31.3 on Apple OS X 10.10 omit a CoreGraphics disable-logging action that is… Mozilla Apple
- CVE-2014-1594 MEDIUM · 6.8 Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 might allow remote attackers to execute arbitrary code by… Mozilla
- CVE-2014-1593 MEDIUM · 6.8 Stack-gebaseerde bufferoverloop in de mozilla:: FileBlockCache:: Leesfunctie in Mozilla Firefox vóór 34.0, Firefox ESR 31.x vóór 31.3, Thunderbird vóór 31.3 en SeaMonkey vóór 2.31 staat… Mozilla
- CVE-2014-1592 MEDIUM · 6.8 Use-after-free vulnerability in the nsHtml5TreeOperation function in xul.dll in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31… Mozilla
- CVE-2014-1591 MEDIUM · 4.3 Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in CSP violation reports, which allows remote attackers to obtain sensitive information via a web… Mozilla
- CVE-2014-1590 MEDIUM · 4.3 The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allows remote attackers to cause… Mozilla
- CVE-2014-1589 MEDIUM · 6.8 Mozilla Firefox vóór 34.0 en SeaMonkey vóór 2.31 voorzien stylesheets van een onjuiste primaire naamruimte, waardoor externe aanvallers de beoogde toegangsbeperkingen kunnen omzeilen via een… Mozilla
- CVE-2014-1588 MEDIUM · 6.8 Meerdere niet-gespecificeerde kwetsbaarheden in de browser-engine in Mozilla Firefox vóór 34.0 en SeaMonkey vóór 2.31 stellen externe aanvallers in staat om een denial of service… Mozilla
- CVE-2014-1587 MEDIUM · 6.8 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird before 31.3, and SeaMonkey before 2.31 allow… Mozilla
- CVE-2014-8680 MEDIUM · 5.4 The GeoIP functionality in ISC BIND 9.10.0 through 9.10.1 allows remote attackers to cause a denial of service (assertion failure and named exit) via vectors… Isc
- CVE-2014-8602 MEDIUM · 4.3 iterator.c in NLnet Labs Niet-geconsolideerd vóór 1.5.1 beperkt delegatieketting niet, waardoor externe aanvallers een denial of service (geheugen- en CPU-verbruik) kunnen veroorzaken via een groot… Nlnetlabs Canonical Debian
- CVE-2014-8500 HIGH · 7.8 ISC BIND 9.0.x through 9.8.x, 9.9.0 through 9.9.6, and 9.10.0 through 9.10.1 does not limit delegation chaining, which allows remote attackers to cause a denial… Isc
- CVE-2014-8966 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 8 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-6376 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-6375 HIGH · 9.3 Met Microsoft Internet Explorer 8 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-6374 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-6373 HIGH · 9.3 Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-6369 HIGH · 9.3 Met Microsoft Internet Explorer 9 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-6368 MEDIUM · 4.3 Met Microsoft Internet Explorer 11 kunnen externe aanvallers het ASLR-beveiligingsmechanisme omzeilen via een vervaardigde website, ook bekend als 'Internet Explorer ASLR Bypass Vulnerability'. Microsoft
- CVE-2014-6366 HIGH · 9.3 Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-6365 MEDIUM · 4.3 Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document,… Microsoft
- CVE-2014-6364 HIGH · 9.3 Use-after-free vulnerability in Microsoft Office 2007 SP3; 2010 SP2; 2013 Gold, SP1, and SP2; and 2013 RT Gold and SP1 allows remote attackers to execute… Microsoft
- CVE-2014-6363 HIGH · 9.3 vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code… Microsoft
- CVE-2014-6361 HIGH · 9.3 Met Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold en SP1, Excel 2013 RT Gold en SP1 en Office Compatibility Pack kunnen externe… Microsoft
- CVE-2014-6360 HIGH · 9.3 Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Global… Microsoft
- CVE-2014-6357 HIGH · 9.3 Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office… Microsoft
- CVE-2014-6356 HIGH · 9.3 Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a… Microsoft
- CVE-2014-6355 MEDIUM · 5.0 The Graphics Component in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows… Microsoft
- CVE-2014-6336 LOW · 3.5 Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 does not properly validate redirection tokens, which allows remote attackers to… Microsoft
- CVE-2014-6330 HIGH · 9.3 Met Microsoft Internet Explorer 9 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-6329 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-6328 MEDIUM · 5.0 Met Microsoft Internet Explorer 8 tot en met 11 kunnen externe aanvallers het XSS-filter omzeilen via een vervaardigd kenmerk van een element in een HTML-document,… Microsoft
- CVE-2014-6327 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-6326 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Microsoft Exchange Server 2013 SP1 en Cumulatieve Update 6 stelt externe aanvallers in staat om willekeurig webscript of HTML te… Microsoft
- CVE-2014-6325 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Microsoft Exchange Server 2013 SP1 en Cumulatieve Update 6 stelt externe aanvallers in staat om willekeurig webscript of HTML te… Microsoft
- CVE-2014-6319 MEDIUM · 5.0 Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3 en 2013 SP1 en Cumulative Update 6 valideert tokens in verzoeken niet correct,… Microsoft
- CVE-2014-9166 MEDIUM · 5.0 Adobe ColdFusion 10 before Update 15 and 11 before Update 3 allows attackers to cause a denial of service (resource consumption) via unspecified vectors. Adobe
- CVE-2014-9165 HIGH · 10.0 Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allows attackers to execute arbitrary code… Adobe Apple Microsoft
- CVE-2014-9164 HIGH · 10.0 Adobe Flash Player vóór 13.0.0.259 en 14.x tot en met 16.x vóór 16.0.0.235 op Windows en OS X en vóór 11.2.202.425 op Linux stelt aanvallers… Adobe Apple Microsoft Linux