CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2013-4148 HIGH · 7.5 Integer-ondertekeningsfout in de virtio_net_load-functie in hw/net/virtio-net.c in QEMU 1.x vóór 1.7.2 stelt externe aanvallers in staat om willekeurige code uit te voeren via een vervaardigd… Qemu
- CVE-2014-8474 HIGH · 7.5 CA Cloud Service Management (CSM) vóór de zomer van 2014 stelt externe aanvallers in staat om willekeurige bestanden te lezen, HTTP-verzoeken naar intranetservers te sturen… Ca
- CVE-2014-8473 MEDIUM · 6.8 Cross-site request forgery (CSRF) -kwetsbaarheid in CA Cloud Service Management (CSM) vóór de zomer van 2014 stelt externe aanvallers in staat om de authenticatie van… Ca
- CVE-2014-8472 MEDIUM · 6.8 CA Cloud Service Management (CSM) before Summer 2014 does not properly verify authentication tokens from an Identity Provider, which allows user-assisted remote attackers to bypass… Ca
- CVE-2014-8471 MEDIUM · 4.3 CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to conduct replay attacks via unspecified vectors. Ca
- CVE-2014-7875 HIGH · 9.0 Unspecified vulnerability on the HP LaserJet CM3530 Multifunction Printer CC519A and CC520A with firmware before 53.236.2 allows remote attackers to obtain sensitive information, modify data,… Hp
- CVE-2014-6130 MEDIUM · 5.0 The IBM Notes Traveler application before 9.0.1.3 for Android lacks a warning message during selection of an HTTP session, which makes it easier for remote… Ibm
- CVE-2014-8593 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default URI to… Allomani
- CVE-2014-4974 LOW · 2.1 The ESET Personal Firewall NDIS filter (EpFwNdis.sys) kernel mode driver, aka Personal Firewall module before Build 1212 (20140609), as used in multiple ESET products 5.0… Eset
- CVE-2014-3660 MEDIUM · 5.0 parser.c in libxml2 before 2.9.2 does not properly prevent entity expansion even when entity substitution has been disabled, which allows context-dependent attackers to cause a… Xmlsoft Apple Canonical Debian
- CVE-2014-8592 MEDIUM · 5.0 Unspecified vulnerability in SAP Host Agent, as used in SAP NetWeaver 7.02 and 7.3, allows remote attackers to cause a denial of service (process termination)… Sap
- CVE-2014-8591 MEDIUM · 5.0 Niet-gespecificeerde kwetsbaarheid in SAP Internet Communication Manager (ICM), zoals gebruikt in SAP NetWeaver 7.02 en 7.3, stelt externe aanvallers in staat om een denial of… Sap
- CVE-2014-8590 MEDIUM · 4.3 XML external entity (XXE) vulnerability in the Web Service Navigator in SAP NetWeaver Application Server (AS) Java allows remote attackers to access arbitrary files via… Sap
- CVE-2014-8589 MEDIUM · 5.0 Integer overflow in SAP Network Interface Router (SAProuter) 40.4 allows remote attackers to cause a denial of service (resource consumption) via crafted requests. Sap
- CVE-2014-8588 HIGH · 7.5 SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Sap
- CVE-2014-8587 HIGH · 7.5 SAPCRYPTOLIB before 5.555.38, SAPSECULIB en CommonCryptoLib before 8.4.30, zoals gebruikt in SAP NetWeaver AS voor ABAP en SAP HANA, stelt externe aanvallers in staat om… Sap
- CVE-2014-8586 HIGH · 7.5 SQL-injectiekwetsbaarheid in de CP Multi View Event Calendar-plug-in 1.01 voor WordPress stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de calid-parameter. Cp Multi View Event Calendar Project
- CVE-2014-8585 MEDIUM · 5.0 Directory traversal vulnerability in the WordPress Download Manager plugin for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the… W3eden
- CVE-2014-8584 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject… Web-dorado
- CVE-2014-8339 HIGH · 7.5 SQL injection vulnerability in midroll.php in Nuevolab Nuevoplayer for ClipShare 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ch parameter. Nuevolab Clip-share
- CVE-2014-7176 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in Enalean Tuleap vóór 7.5.99.4 stelt op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via de lobal_txt-parameter naar plug-ins/docman. Enalean
- CVE-2014-5387 MEDIUM · 6.5 Multiple SQL injection vulnerabilities in EllisLab ExpressionEngine before 2.9.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) column_filter or (2) category[]… Ellislab Expressionengine
- CVE-2013-7057 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that… Axway
- CVE-2014-4311 MEDIUM · 5.0 Epicor Enterprise 7.4 vóór FS74SP6_HotfixTL054181 stelt aanvallers in staat om de (1) Database Connection en (2) E-mail Connection-wachtwoorden te verkrijgen door de HTML-broncode van de… Epicor
- CVE-2014-0204 MEDIUM · 6.5 OpenStack Identity (Keystone) vóór 2014.1.1 handelt niet goed af wanneer een rol wordt toegewezen aan een groep die dezelfde ID heeft als een gebruiker, waardoor… Openstack
- CVE-2013-0336 MEDIUM · 5.0 The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via… Redhat
- CVE-2014-7228 HIGH · 7.5 Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla! Professional 3.0.0 through 4.0.2;… Joomla
- CVE-2014-0490 HIGH · 7.5 The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a… Debian Linux
- CVE-2014-0489 HIGH · 7.5 APT vóór 1.0.9, wanneer de optie Acquire:: GzipIndexes is ingeschakeld, valideert geen controlesommen, waardoor externe aanvallers willekeurige code kunnen uitvoeren via een vervaardigd pakket. Debian
- CVE-2014-0488 MEDIUM · 6.8 APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via… Debian
- CVE-2014-0487 HIGH · 7.5 APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack… Debian
- CVE-2012-6661 MEDIUM · 5.0 Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which makes it… Plone Zope
- CVE-2012-5508 MEDIUM · 5.0 The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for… Plone
- CVE-2012-5500 MEDIUM · 4.3 The batch id change script (renameObjectsByPaths.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to change the titles of content items… Plone
- CVE-2014-8494 MEDIUM · 4.6 ESTsoft ALUpdate 8.5.1.0.0 uses weak permissions (Users: Full Control) for the (1) AlUpdate folder and (2) AlUpdate.exe, which allows local users to gain privileges via… Estsoft
- CVE-2014-8350 HIGH · 7.5 Smarty voor 3.1.21 stelt externe aanvallers in staat om de beperkingen van de veilige modus te omzeilen en willekeurige PHP-code uit te voeren, zoals aangetoond… Smarty
- CVE-2014-8080 MEDIUM · 5.0 Met de REXML-parser in Ruby 1.9.x vóór 1.9.3-p550, 2.0.x vóór 2.0.0-p594 en 2.1.x vóór 2.1.4 kunnen externe aanvallers een denial of service (geheugenverbruik) veroorzaken via… Opensuse Canonical Ruby-lang Redhat
- CVE-2014-5507 HIGH · 7.2 iBackup 10.0.0.32 and earlier uses weak permissions (Everyone: Full Control) for ib_service.exe, which allows local users to gain privileges via a Trojan horse file. Pro Softnet Corporation
- CVE-2014-5272 MEDIUM · 6.8 libavcodec/iff.c in FFMpeg vóór 1.1.14, 1.2.x vóór 1.2.8, 2.2.x vóór 2.2.7 en 2.3.x vóór 2.3.2 stelt externe aanvallers in staat om niet-gespecificeerde impact te hebben… Ffmpeg
- CVE-2014-5271 HIGH · 7.5 Heap-based buffer overflow in the encode_slice function in libavcodec/proresenc_kostya.c in FFMpeg before 1.1.14, 1.2.x before 1.2.8, 2.x before 2.2.7, and 2.3.x before 2.3.3 and Libav… Ffmpeg Libav
- CVE-2014-3712 MEDIUM · 5.0 Katello allows remote attackers to cause a denial of service (memory consumption) via the (1) mode parameter in the setup_utils function in content_search_controller.rb or (2)… Katello
- CVE-2014-3654 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network (RHN) Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary… Redhat Suse
- CVE-2014-3683 MEDIUM · 5.0 Integer overflow in rsyslog before 7.6.7 and 8.x before 8.4.2 and sysklogd 1.5 and earlier allows remote attackers to cause a denial of service (crash)… Rsyslog Sysklogd Project
- CVE-2014-3634 HIGH · 7.5 rsyslog voor 7.6.6 en 8.x voor 8.4.1 en sysklogd 1.5 en eerder stelt externe aanvallers in staat om een denial of service (crash) te veroorzaken,… Sysklogd Project Rsyslog
- CVE-2014-2015 HIGH · 7.5 Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier,… Freeradius
- CVE-2014-8582 MEDIUM · 6.4 FortiNet FortiADC-E met firmware 3.1.1 vóór 4.0.5 en Coyote Point Equalizer met firmware 10.2.0a stelt externe aanvallers in staat om via niet-gespecificeerde vectoren toegang te… Fortinet
- CVE-2014-6032 MEDIUM · 5.5 Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through… F5
- CVE-2014-3615 LOW · 2.1 The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution. Qemu Debian Redhat Canonical
- CVE-2014-8244 HIGH · 7.5 Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices;… Linksys
- CVE-2014-8243 LOW · 3.3 Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices;… Linksys