CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-8578 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in het paneel Groepen in OpenStack Dashboard (Horizon) vóór 2013.2.4, 2014.1 vóór 2014.1.2, en Juno vóór Juno-2 stelt externe beheerders in… Openstack
- CVE-2014-3475 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Users panel (admin/users/) in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote administrators… Openstack Opensuse
- CVE-2014-3474 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in horizon/static/horizon/js/horizon.instances.js in het menu Launch Instance in OpenStack Dashboard (Horizon) vóór 2013.2.4, 2014.1 vóór 2014.1.2, en Juno vóór Juno-2 stelt… Openstack Opensuse
- CVE-2014-3473 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in the Horizon Orchestration dashboard in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before… Openstack Opensuse
- CVE-2014-8577 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Croogo before 2.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Contact][title] parameter to… Croogo
- CVE-2014-8509 HIGH · 7.5 The lazy_bdecode function in BitTorrent bootstrap-dht (aka Bootstrap) allows remote attackers to execute arbitrary code via a crafted packet, which triggers an out-of-bounds read, related… Bittorrent
- CVE-2014-8495 MEDIUM · 5.0 Citrix XenMobile MDX Toolkit vóór 9.0.4, wanneer gebruikt om iOS 8-applicaties in te pakken, versleutelt de applicatiegegevens in de cache niet goed, waardoor contextafhankelijke aanvallers… Citrix
- CVE-2014-8399 LOW · 2.1 The default configuration in systemd-shim 8 enables the Abandon debugging clause, which allows local users to cause a denial of service via unspecified vectors. Shim Project
- CVE-2014-8334 MEDIUM · 6.5 The WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote authenticated users to execute arbitrary commands via shell metacharacters in the (1) $backup['filepath']… Wp-dbmanager Project
- CVE-2014-8333 MEDIUM · 4.0 The VMware driver in OpenStack Compute (Nova) before 2014.1.4 allows remote authenticated users to cause a denial of service (disk consumption) by deleting an instance… Redhat Openstack
- CVE-2014-8082 MEDIUM · 5.0 lib/functions/database.class.php in TestLink before 1.9.13 allows remote attackers to obtain sensitive information via unspecified vectors, which reveals the installation path in an error message. Testlink
- CVE-2014-8081 HIGH · 7.5 lib/execute/execSetResults.php in TestLink voor 1.9.13 stelt externe aanvallers in staat om PHP-objectinjectieaanvallen uit te voeren en willekeurige PHP-code uit te voeren via de parameter filter_result_result. Testlink
- CVE-2014-7987 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in EspoCRM before 2.6.0 allows remote attackers to inject arbitrary web script or HTML via the desc parameter in an errors… Espocrm
- CVE-2014-7986 MEDIUM · 5.0 install/index.php in EspoCRM before 2.6.0 allows remote attackers to re-install the application via a 1 value in the installProcess parameter. Espocrm
- CVE-2014-7985 HIGH · 10.0 Directory traversal vulnerability in EspoCRM before 2.6.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the action… Espocrm
- CVE-2014-7177 MEDIUM · 4.0 XML External Entity-kwetsbaarheid in Enalean Tuleap 7.2 en eerder stelt op afstand geverifieerde gebruikers in staat om willekeurige bestanden te lezen via een vervaardigd xml-document… Enalean
- CVE-2014-3708 MEDIUM · 4.0 OpenStack Compute (Nova) before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an IP filter… Openstack Redhat
- CVE-2014-2336 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary… Fortinet
- CVE-2014-2335 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML… Fortinet
- CVE-2014-2334 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML… Fortinet
- CVE-2013-0334 MEDIUM · 5.0 Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name… Bundler Opensuse Fedoraproject
- CVE-2014-6150 LOW · 3.5 Cross-site scripting (XSS) kwetsbaarheid in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.1.0 tot en met 7.2.1.6 en 7.2.2.0 tot en met 7.2.2.2 stelt op… Ibm
- CVE-2014-6148 LOW · 3.5 IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 through 7.2.0.10, 7.2.1.0 through 7.2.1.6, and 7.2.2.0 through 7.2.2.2 does not require TADDM authentication for rptdesign downloads,… Ibm
- CVE-2014-6101 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the redirect-login feature in IBM Business Process Manager (BPM) Advanced 7.5 through 8.5.5 allows remote attackers to inject arbitrary web… Ibm
- CVE-2014-3375 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the CCM Service interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject arbitrary web… Cisco
- CVE-2014-3374 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) -kwetsbaarheden in de CCM-beheerinterface in de Server in Cisco Unified Communications Manager stellen externe aanvallers in staat om willekeurig webscript of… Cisco
- CVE-2014-3373 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the CCM Dialed Number Analyzer interface in the Server in Cisco Unified Communications Manager allow remote attackers to inject… Cisco
- CVE-2014-3372 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in de CCM-rapporteninterface in de Server in Cisco Unified Communications Manager stellen externe aanvallers in staat om willekeurig webscript of… Cisco
- CVE-2014-3366 MEDIUM · 6.5 SQL-injectiekwetsbaarheid in de administratieve webinterface in Cisco Unified Communications Manager stelt op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via een… Cisco
- CVE-2013-7409 HIGH · 7.5 Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long… Allplayer
- CVE-2014-3684 MEDIUM · 6.8 The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that… Adaptivecomputing
- CVE-2014-3623 MEDIUM · 5.0 Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does not… Apache
- CVE-2014-3584 MEDIUM · 5.0 The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop)… Apache
- CVE-2014-3446 HIGH · 7.5 SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter. Bss
- CVE-2013-3304 MEDIUM · 5.0 Directory traversal kwetsbaarheid in Dell EqualLogic PS4000 met firmware 6.0 stelt externe aanvallers in staat om willekeurige bestanden te lezen via een .. (dot dot)… Dell
- CVE-2014-7877 MEDIUM · 4.9 Niet-gespecificeerde kwetsbaarheid in de kernel in HP HP-UX B.11.31 stelt lokale gebruikers in staat om een denial of service te veroorzaken via onbekende vectoren. Hp
- CVE-2014-8538 MEDIUM · 5.4 The Hijab Modern (aka com.Aisyaidea.HijabModern) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Hijabmodern
- CVE-2014-8537 LOW · 2.1 McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading the logs. Mcafee
- CVE-2014-8536 LOW · 2.1 McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to obtain sensitive information by reading unspecified error messages. Mcafee
- CVE-2014-8535 MEDIUM · 4.6 McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to bypass intended restriction on unspecified functionality via unknown vectors. Mcafee
- CVE-2014-8534 LOW · 2.1 Unspecified vulnerability in the login form in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to cause a denial of service via… Mcafee
- CVE-2014-8533 HIGH · 7.5 McAfee Network Data Loss Prevention (NDLP) vóór 9.3 stelt aanvallers op afstand in staat om willekeurige code uit te voeren via vectoren die verband houden… Mcafee
- CVE-2014-8532 LOW · 3.6 Unspecified vulnerability in McAfee Network Data Loss Prevention before (NDLP) before 9.3 allows local users to obtain sensitive information and impact integrity via unknown vectors,… Mcafee
- CVE-2014-8531 MEDIUM · 6.5 The TLS/SSL Server in McAfee Network Data Loss Prevention (NDLP) before 9.3 uses weak cipher algorithms, which makes it easier for remote authenticated users to… Mcafee
- CVE-2014-8530 HIGH · 7.5 Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to obtain sensitive information, affect integrity, or cause a denial of… Mcafee
- CVE-2014-8529 LOW · 2.1 McAfee Network Data Loss Prevention (NDLP) before 9.3 stores the SSH key in cleartext, which allows local users to obtain sensitive information via unspecified vectors. Mcafee
- CVE-2014-8528 LOW · 2.1 McAfee Network Data Loss Prevention (NDLP) before 9.3 logs session IDs, which allows local users to obtain sensitive information by reading the audit log. Mcafee
- CVE-2014-8527 LOW · 3.6 McAfee Network Data Loss Prevention (NDLP) vóór 9.3 stelt lokale gebruikers in staat om gevoelige informatie te verkrijgen en de integriteit te beïnvloeden via vectoren… Mcafee
- CVE-2014-8526 LOW · 2.1 McAfee Network Data Loss Prevention (NDLP) before 9.3 allows local users to obtain sensitive information by reading a Java stack trace. Mcafee
- CVE-2014-8525 MEDIUM · 5.0 McAfee Network Data Loss Prevention (NDLP) before 9.3 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it… Mcafee