CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-8508 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in s_network.asp in de Denon AVR-3313CI audio/video-ontvanger stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via niet-gespecificeerde… Denon
- CVE-2014-8483 MEDIUM · 5.0 The blowfishECB function in core/cipher.cpp in Quassel IRC 0.10.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a malformed string. Canonical Debian Quassel-irc Opensuse
- CVE-2014-8352 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in json.php in French National Commission on Informatics and Liberty (aka CNIL) CookieViz allows remote we servers to inject arbitrary web… French National Commission On Informatics And Liberty
- CVE-2014-8351 HIGH · 7.5 SQL-injectiekwetsbaarheid in info.php in CookieViz van de Franse Nationale Commissie voor Informatica en Vrijheid (ook bekend als CNIL) vóór 1.0.1 stelt externe webservers in staat… French National Commission On Informatics And Liberty
- CVE-2014-7959 MEDIUM · 6.5 SQL injection vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the… Ait-pro
- CVE-2014-7958 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in admin/htaccess/bpsunlock.php in the BulletProof Security plugin before .51.1 for WordPress allows remote attackers to inject arbitrary web script or HTML… Ait-pro
- CVE-2014-5257 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Forma Lms before 1.2.1 p01 allow remote attackers to inject arbitrary web script or HTML via the (1) id_custom… Formalms
- CVE-2014-4664 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in de Wordfence Security-plug-in vóór 5.1.4 voor WordPress stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via… Wordfence Security Project
- CVE-2014-0995 MEDIUM · 5.0 Met de Standalone Enqueue Server in SAP Netweaver 7.20, 7.01 en eerder kunnen externe aanvallers een denial of service (ongecontroleerde recursie en crash) veroorzaken via… Sap
- CVE-2014-8622 LOW · 3.5 Cross-site scripting (XSS) vulnerability in compfight-search.php in the Compfight plugin 1.4 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via… Compfight Project
- CVE-2014-8549 HIGH · 7.5 libavcodec/on2avc.c in FFmpeg before 2.4.2 does not constrain the number of channels to at most 2, which allows remote attackers to cause a denial of… Ffmpeg
- CVE-2014-8548 HIGH · 7.5 Off-by-one error in libavcodec/smc.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact… Ffmpeg Canonical
- CVE-2014-8547 HIGH · 7.5 libavcodec/gifdec.c in FFmpeg before 2.4.2 does not properly compute image heights, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly… Canonical Ffmpeg
- CVE-2014-8546 HIGH · 7.5 Integer underflow in libavcodec/cinepak.c in FFmpeg before 2.4.2 allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact… Ffmpeg
- CVE-2014-8545 HIGH · 7.5 libavcodec/pngdec.c in FFmpeg vóór 2.4.2 accepteert het monochroom-zwarte formaat zonder te verifiëren dat de bits-per-pixel-waarde 1 is, waardoor externe aanvallers een denial of service (toegang… Ffmpeg
- CVE-2014-8544 HIGH · 7.5 libavcodec/tiff.c in FFmpeg vóór 2.4.2 valideert bits-per-pixel-velden niet correct, waardoor externe aanvallers een denial of service (toegang buiten de grenzen) kunnen veroorzaken of mogelijk een… Ffmpeg Canonical
- CVE-2014-8543 HIGH · 7.5 libavcodec/mmvideo.c in FFmpeg before 2.4.2 does not consider all lines of HHV Intra blocks during validation of image height, which allows remote attackers to cause… Canonical Ffmpeg
- CVE-2014-8542 HIGH · 7.5 libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service (out-of-bounds… Ffmpeg Canonical Debian
- CVE-2014-8541 HIGH · 7.5 libavcodec/mjpegdec.c in FFmpeg before 2.4.2 considers only dimension differences, and not bits-per-pixel differences, when determining whether an image size has changed, which allows remote attackers… Canonical Ffmpeg
- CVE-2014-8326 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 4.0.x before 4.0.10.5, 4.1.x before 4.1.14.6, and 4.2.x before 4.2.10.1 allow remote authenticated users to inject arbitrary web… Phpmyadmin Opensuse
- CVE-2014-5417 HIGH · 7.5 Cross-site scripting (XSS) vulnerability in Meinberg NTP Server firmware on LANTIME M-Series devices 6.15.019 and earlier allows remote attackers to inject arbitrary web script or… Meinberg
- CVE-2014-5408 HIGH · 7.5 Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on Nordex Control 2 (NC2) SCADA devices 15 and earlier allows remote… Nordex
- CVE-2014-4834 MEDIUM · 4.3 IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 does not properly detect recursion during entity expansion, which allows remote attackers to cause a… Ibm
- CVE-2014-4810 MEDIUM · 4.3 IBM Cognos Mobile 10.1.1 before FP3 IF1, 10.2.0 before FP2 IF1, and 10.2.1 before FP4 IF1 preserves a session between the Cognos Mobile server and… Ibm
- CVE-2014-4769 MEDIUM · 4.0 IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.8 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers… Ibm
- CVE-2014-3710 MEDIUM · 5.0 The donote function in readelf.c in file through 5.20, as used in the Fileinfo component in PHP 5.4.34, does not ensure that sufficient note headers… Php Debian Canonical
- CVE-2014-2374 HIGH · 7.5 Met de AXN-NET Ethernet-module accessoire 3.04 voor de Accuenergy Acuvim II kunnen aanvallers op afstand wachtwoorden ontdekken en instellingen wijzigen via vectoren met JavaScript. Accuenergy
- CVE-2014-2373 HIGH · 7.5 Met de AXN-NET Ethernet-module accessoire 3.04 voor de Accuenergy Acuvim II kunnen aanvallers op afstand wachtwoorden ontdekken en instellingen wijzigen via vectoren met JavaScript. Accuenergy
- CVE-2014-2718 HIGH · 7.1 ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U en mogelijk andere RT-serie routers vóór firmware 3.0.0.4.376.x verifiëren de integriteit van firmware (1) update-informatie… T-mobile Asus
- CVE-2014-3461 MEDIUM · 6.8 hw/usb/bus.c in QEMU 1.6.2 allows remote attackers to execute arbitrary code via crafted savevm data, which triggers a heap-based buffer overflow, related to "USB post… Qemu
- CVE-2014-0223 MEDIUM · 4.6 Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows local users to cause a denial of service (crash) and possibly execute… Suse Qemu
- CVE-2014-0222 HIGH · 7.5 Integer-overloop in de qcow_open-functie in blok/qcow.c in QEMU vóór 1.7.2 stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken via een… Suse Qemu
- CVE-2014-0182 HIGH · 7.5 Heap-based buffer overflow in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted config… Qemu
- CVE-2013-6399 HIGH · 7.5 Array index error in the virtio_load function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted savevm image. Qemu
- CVE-2013-4542 HIGH · 7.5 The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an… Qemu
- CVE-2013-4541 HIGH · 7.5 Met de usb_device_post_load-functie in hw/usb/bus.c in QEMU vóór 1.7.2 kunnen externe aanvallers willekeurige code uitvoeren via een vervaardigde savevm-afbeelding, gerelateerd aan een negatieve setup_len of… Qemu
- CVE-2013-4540 HIGH · 7.5 Bufferoverloop in scoop_gpio_handler_update in QEMU vóór 1.7.2 kan externe aanvallers in staat stellen willekeurige code uit te voeren via een groot (1) prev_level, (2) gpio_level… Qemu Opensuse
- CVE-2013-4539 HIGH · 7.5 Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1)… Qemu
- CVE-2013-4538 HIGH · 7.5 Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or… Qemu
- CVE-2013-4537 HIGH · 7.5 Met de ssi_sd_transfer-functie in hw/sd/ssi-sd.c in QEMU vóór 1.7.2 kunnen externe aanvallers willekeurige code uitvoeren via een bewerkte arglen-waarde in een savevm-afbeelding. Qemu
- CVE-2013-4534 HIGH · 7.5 Bufferoverloop in hw/intc/openpic.c in QEMU vóór 1.7.2 stelt externe aanvallers in staat om een denial of service te veroorzaken of mogelijk willekeurige code uit te… Qemu
- CVE-2013-4533 HIGH · 7.5 Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary… Qemu
- CVE-2013-4531 HIGH · 7.5 Buffer overflow in target-arm/machine.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative… Qemu
- CVE-2013-4530 HIGH · 7.5 Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head… Qemu
- CVE-2013-4529 HIGH · 7.5 Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large… Qemu
- CVE-2013-4527 HIGH · 7.5 Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers. Qemu
- CVE-2013-4526 HIGH · 7.5 Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via vectors related… Qemu
- CVE-2013-4151 HIGH · 7.5 Met de virtio_load-functie in virtio/virtio.c in QEMU 1.x vóór 1.7.2 kunnen aanvallers op afstand willekeurige code uitvoeren via een vervaardigd savevm-image, wat een out-of-bounds-schrijven activeert. Qemu
- CVE-2013-4150 HIGH · 7.5 Met de functie virtio_net_load in hw/net/virtio-net.c in QEMU 1.5.0 tot en met 1.7.x vóór 1.7.2 kunnen externe aanvallers een denial of service veroorzaken of mogelijk… Qemu
- CVE-2013-4149 HIGH · 7.5 Buffer overflow in virtio_net_load function in net/virtio-net.c in QEMU 1.3.0 through 1.7.x before 1.7.2 might allow remote attackers to execute arbitrary code via a large… Qemu