CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-9263 MEDIUM · 6.8 Multiple buffer overflows in the PocketNetNVRMediaClientAxCtrl.NVRMediaViewer.1 control in 3S Pocketnet Tech VMS allow remote attackers to execute arbitrary code via a crafted string to the… 3s Pocketnet Tech
- CVE-2014-9130 MEDIUM · 5.0 scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service… Pyyaml
- CVE-2014-9029 HIGH · 7.5 Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code… Jasper Project
- CVE-2014-8106 MEDIUM · 4.6 Op heap gebaseerde bufferoverloop in de Cirrus VGA-emulator (hw/display/cirrus_vga.c) in QEMU vóór 2.2.0 stelt lokale gastgebruikers in staat om willekeurige code uit te voeren via… Qemu
- CVE-2014-5462 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in OpenEMR 4.1.2 (Patch 7) and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) layout_id parameter… Open-emr
- CVE-2014-9342 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application Security Manager (ASM) in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary… F5
- CVE-2014-9219 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML… Phpmyadmin
- CVE-2014-9218 MEDIUM · 5.0 libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service (resource consumption) via… Phpmyadmin
- CVE-2014-9217 MEDIUM · 5.0 Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards. Torch Gmbh
- CVE-2014-8600 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary… Urs Wolfer Kde Opensuse
- CVE-2014-8371 MEDIUM · 4.3 VMware vCenter Server Appliance (vCSA) 5.5 vóór Update 2, 5.1 vóór Update 3 en 5.0 vóór Update 3c valideert certificaten niet goed bij het verbinden… Vmware
- CVE-2014-4880 HIGH · 7.5 Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP… Hikvision
- CVE-2014-4631 MEDIUM · 5.0 RSA Adaptive Authentication (On-Premise) 6.0.2.1 tot en met 7.1 P3, bij gebruik van apparaatbinding in een Challenge soap-oproep of met behulp van de RSA Adaptive… Emc
- CVE-2014-3797 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via… Vmware
- CVE-2014-3616 MEDIUM · 4.3 nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context,… F5 Debian
- CVE-2014-1693 HIGH · 7.5 Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the (1)… Erlang
- CVE-2013-2810 HIGH · 10.0 Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier… Emerson
- CVE-2014-9304 HIGH · 7.5 Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted… Plex
- CVE-2014-9303 HIGH · 7.8 EntryPass N5200 Active Network Control Panel stelt externe aanvallers in staat om het apparaatgeheugen te lezen en de gebruikersnaam en het wachtwoord van de beheerder… Entrypass
- CVE-2014-9302 MEDIUM · 5.0 Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition 5.0.a and earlier allows remote attackers… Alfresco
- CVE-2014-9301 MEDIUM · 6.4 Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers,… Alfresco
- CVE-2014-9300 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in de cmisbrowser-servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition vóór 5.0.a stelt externe aanvallers in staat… Alfresco
- CVE-2014-8868 HIGH · 7.8 EntryPass N5200 Active Network Control Panel does not properly restrict access, which allows remote attackers to obtain the administrator username and password, and possibly other… Entrypass
- CVE-2014-9117 MEDIUM · 5.0 MantisBT before 1.2.18 uses the public_key parameter value as the key to the CAPTCHA answer, which allows remote attackers to bypass the CAPTCHA protection mechanism… Mantisbt
- CVE-2014-8651 HIGH · 7.2 De KDE Clock KCM policykit helper in kde-workspace vóór 4.11.14 en plasma-desktop vóór 5.1.1 stelt lokale gebruikers in staat om privileges te verkrijgen via een… Kde
- CVE-2014-9278 MEDIUM · 4.0 The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to… Openbsd Redhat
- CVE-2014-7251 LOW · 3.2 XML external entity (XXE) vulnerability in the WebHMI server in Yokogawa Electric Corporation FAST/TOOLS before R9.05-SP2 allows local users to cause a denial of service… Yokogawa
- CVE-2014-6140 HIGH · 9.3 IBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to… Ibm
- CVE-2014-5429 MEDIUM · 5.0 DNP Master Driver 3.02 and earlier in Elipse SCADA 2.29 build 141 and earlier, E3 1.0 through 4.6, and Elipse Power 1.0 through 4.6 allows… Elipse
- CVE-2014-4629 HIGH · 9.0 EMC Documentum Content Server 7.0, 7.1 before 7.1 P10, and 6.7 before SP2 P19 allows remote authenticated users to read or delete arbitrary files via… Emc
- CVE-2014-3099 LOW · 2.1 Unspecified vulnerability in the Security component in IBM Systems Director 6.3.0 through 6.3.5 allows local users to obtain sensitive information via unknown vectors. Ibm
- CVE-2014-9292 MEDIUM · 5.8 Server-side request forgery (SSRF) vulnerability in proxy.php in the jRSS Widget plugin 1.2 and earlier for WordPress allows remote attackers to trigger outbound requests and… Jrss Widget Project
- CVE-2014-8877 HIGH · 10.0 The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via… Creative Minds
- CVE-2014-7259 MEDIUM · 5.0 SQUARE ENIX Co., Ltd. Kaku-San-Sei Million Arthur before 2.25 for Android stores "product credentials" on the SD card, which allows attackers to gain privileges via… Square Enix Co Ltd
- CVE-2014-7258 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in KENT-WEB Clip Board 2.91 en eerder, bij het uitvoeren van bepaalde versies van Internet Explorer, stelt externe aanvallers in staat… Kent-web
- CVE-2014-7256 HIGH · 7.8 The (1) PPP Access Concentrator (PPPAC) and (2) Dial-Up Networking Internet Initiative Japan Inc. SEIL series routers SEIL/x86 Fuji 1.00 through 3.22; SEIL/X1, SEIL/X2, and… Iij
- CVE-2014-7255 HIGH · 7.5 Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 t/m 4.62, SEIL/X2 2.50 t/m 4.62, SEIL/B1 2.50 t/m 4.62, en SEIL/x86 Fuji 1.70 t/m 3.22… Iij
- CVE-2014-7254 MEDIUM · 4.6 Niet-gespecificeerde kwetsbaarheid in PIJLEN Me F-11D stelt fysiek nabije aanvallers in staat om flashgeheugen te lezen of te wijzigen via onbekende vectoren. Fujitsu
- CVE-2014-7253 HIGH · 7.2 FUJITSU F-12C, ARROWS Tab LTE F-01D, ARROWS Kiss F-03D, and REGZA Phone T-01D for Android allows local users to execute arbitrary commands via unspecified vectors. Fujitsu
- CVE-2014-7252 MEDIUM · 4.6 Meerdere niet-gespecificeerde kwetsbaarheden in het Syslink-stuurprogramma voor Texas Instruments OMAP mobiele processor, zoals gebruikt op NTT Docomo-pijlen Tab LTE F-01D, PIJLEN X LTE F-05D, Disney… Disney Interactive Fujitsu Sharp Lg
- CVE-2014-7243 MEDIUM · 5.0 LG Electronics Mobile WiFi router L-09C, L-03E, and L-04D does not restrict access to the web administration interface, which allows remote attackers to obtain sensitive… Lg
- CVE-2014-9140 MEDIUM · 5.0 Bufferoverloop in de functie ppp_hdlc in print-ppp.c in tcpdump 4.6.2 en eerder stelt externe aanvallers in staat om een denial of service (crash) cia een… Redhat
- CVE-2014-8990 HIGH · 7.5 default-rsyncssh.lua in Lsyncd 2.1.5 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a filename. Debian Fedoraproject Lsyncd Project
- CVE-2014-8123 MEDIUM · 5.0 Bufferoverloop in de bGetPPS-functie in wordole.c in Antiword 0.37 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via een vervaardigd… Antiword Project
- CVE-2014-6040 MEDIUM · 5.0 GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value… Gnu
- CVE-2014-4703 LOW · 2.1 lib/parse_ini.c in Nagios Plugins 2.0.2 allows local users to obtain sensitive information via a symlink attack on the configuration file in the extra-opts flag. NOTE:… Nagios
- CVE-2014-4702 LOW · 2.1 The check_icmp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different… Nagios
- CVE-2014-4701 LOW · 2.1 The check_dhcp plugin in Nagios Plugins before 2.0.2 allows local users to obtain sensitive information from INI configuration files via the extra-opts flag, a different… Nagios
- CVE-2014-3627 MEDIUM · 5.0 The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the… Apache
- CVE-2014-3561 LOW · 2.1 The rhevm-log-collector package in Red Hat Enterprise Virtualization 3.4 uses the PostgreSQL database password on the command line when calling sosreport, which allows local users… Redhat