CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-8524 MEDIUM · 5.0 McAfee Network Data Loss Prevention (NDLP) before 9.3 does not disable the autocomplete setting for the password and other fields, which allows remote attackers to… Mcafee
- CVE-2014-8523 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.3 allows remote attackers to hijack the authentication of unspecified victims via… Mcafee
- CVE-2014-8522 HIGH · 7.5 De MySQL-database in McAfee Network Data Loss Prevention (NDLP) vóór 9.3 vereist geen wachtwoord, waardoor aanvallers op afstand gemakkelijker toegang kunnen krijgen. Mcafee
- CVE-2014-8521 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in McAfee Network Data Loss Prevention (NDLP) vóór 9.3 stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML… Mcafee
- CVE-2014-8520 MEDIUM · 5.0 McAfee Network Data Loss Prevention (NDLP) vóór 9.3 stelt aanvallers op afstand in staat om gevoelige informatie te verkrijgen via vectoren met betrekking tot open… Mcafee
- CVE-2014-8519 LOW · 2.1 Unspecified vulnerability in McAfee Network Data Loss Prevention (NDLP) before 9.2.2 allows local users to read arbitrary files via unknown vectors. Mcafee
- CVE-2014-8518 LOW · 2.1 De (1) opties voor verwijderbare media en (2) externe cd- en dvd-versleuteling (voorheen Endpoint Encryption for Removable Media of EERM) in McAfee File and Removable… Mcafee
- CVE-2014-6149 MEDIUM · 5.0 Directory traversal kwetsbaarheid in BIRT-viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 tot en met 7.2.0.10, 7.2.1.0 tot en met 7.2.1.6, en 7.2.2.0… Ibm
- CVE-2014-4877 HIGH · 9.3 Absolute padtraversale kwetsbaarheid in GNU Wget vóór 1.16, wanneer recursie is ingeschakeld, stelt externe FTP-servers in staat om naar willekeurige bestanden te schrijven en bijgevolg… Gnu
- CVE-2014-4839 MEDIUM · 6.0 Cross-site request forgery (CSRF) vulnerability in birtviewer.query in IBM TRIRIGA Application Platform 3.2 and 3.3 before 3.3.0.2, 3.3.1 before 3.3.1.3, 3.3.2 before 3.3.2.2, and 3.4… Ibm
- CVE-2014-3698 MEDIUM · 5.0 Met de functie jabber_idn_validate in jutil.c in de Jabber-protocolplug-in in libpurple in Pidgin vóór 2.10.10 kunnen externe aanvallers gevoelige informatie uit het procesgeheugen verkrijgen via… Pidgin
- CVE-2014-3697 MEDIUM · 6.4 Absolute path traversal vulnerability in the untar_block function in win32/untar.c in Pidgin before 2.10.10 on Windows allows remote attackers to write to arbitrary files via… Pidgin
- CVE-2014-3696 MEDIUM · 5.0 nmevent.c in the Novell GroupWise protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via… Pidgin
- CVE-2014-3695 MEDIUM · 5.0 markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.10 allows remote servers to cause a denial of service (application crash) via a… Pidgin
- CVE-2014-3694 MEDIUM · 6.4 De (1) gebundelde GnuTLS SSL/TLS-plug-in en de (2) gebundelde OpenSSL SSL/TLS-plug-in in libpurple in Pidgin vóór 2.10.10 houden geen rekening met de Basic Constraints-extensie tijdens… Opensuse Canonical Debian Pidgin
- CVE-2014-3670 MEDIUM · 6.8 The exif_ifd_make_value function in exif.c in the EXIF extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 operates on floating-point arrays incorrectly,… Php
- CVE-2014-3669 HIGH · 7.5 Integer-overloop in de object_custom-functie in ext/standard/var_unserializer.c in PHP vóór 5.4.34, 5.5.x vóór 5.5.18 en 5.6.x vóór 5.6.2 stelt externe aanvallers in staat om een denial… Php
- CVE-2014-3668 MEDIUM · 5.0 Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x… Php
- CVE-2014-3051 MEDIUM · 4.3 The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30,… Ibm
- CVE-2014-6126 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Ibm
- CVE-2014-6125 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authentication of arbitrary users for requests that… Ibm
- CVE-2014-4821 MEDIUM · 5.0 IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 provides different… Ibm
- CVE-2014-4814 LOW · 3.5 IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 does not… Ibm
- CVE-2014-4808 MEDIUM · 6.5 Niet-gespecificeerde kwetsbaarheid in IBM WebSphere Portal 6.1.0 tot en met 6.1.0.6 CF27, 6.1.5 tot en met 6.1.5.3 CF27, 7.0 tot en met 7.0.0.2 CF28, 8.0… Ibm
- CVE-2014-3293 MEDIUM · 5.0 Cisco IOS 15.4(3)S0b op ASR901-apparaten neemt onjuiste beslissingen om de CPU te gebruiken voor IPv4-pakketverwerking, waardoor externe aanvallers een denial of service (BGP buur fladderen)… Cisco
- CVE-2014-8506 HIGH · 7.5 Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the (1) page_id parameter to loja/index.php or (2) article_id… Etiko
- CVE-2014-8505 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the (1) page_id parameter to loja/index.php… Etiko
- CVE-2014-4023 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and 10.1.0… F5
- CVE-2014-4586 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the wp-football plugin 1.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via… Wp-football Project
- CVE-2012-5580 HIGH · 7.5 Kwetsbaarheid van formatstring in de functie print_proxies in bin/proxy.c in libproxy 0.3.1 kan contextafhankelijke aanvallers in staat stellen een denial of service (crash) te veroorzaken… Libproxy Project
- CVE-2012-1111 MEDIUM · 4.6 lightdm before 1.0.9 does not properly close file descriptors before opening a child process, which allows local users to write to the lightdm log or… Robert Ancell
- CVE-2011-2702 MEDIUM · 6.8 Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute… Gnu
- CVE-2010-5077 HIGH · 7.8 server/sv_main.c in Quake3 Arena, zoals gebruikt in ioquake3 vóór r1762, OpenArena, Tremulous en andere producten, stelt externe aanvallers in staat om een denial of service… Ioquake3 Openarena Tremulous
- CVE-2003-1599 HIGH · 7.5 PHP-kwetsbaarheid voor het opnemen van bestanden op afstand in wp-links/links.all.php in WordPress 0.70 stelt externe aanvallers in staat om willekeurige PHP-code uit te voeren via… Wordpress
- CVE-2014-8327 MEDIUM · 4.0 The fal_sftp extension before 0.2.6 for TYPO3 uses weak permissions for sFTP driver files and folders, which allows remote authenticated users to obtain sensitive information… Fal Sftp Project
- CVE-2014-3955 MEDIUM · 5.0 routed in FreeBSD 8.4 through 10.1-RC2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an RIP request from… Freebsd
- CVE-2014-3954 HIGH · 10.0 Stack-based buffer overflow in rtsold in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code… Freebsd
- CVE-2014-3711 MEDIUM · 5.0 namei in FreeBSD 9.1 through 10.1-RC2 allows remote attackers to cause a denial of service (memory exhaustion) via vectors that trigger a sandboxed process to… Freebsd
- CVE-2014-2988 HIGH · 8.5 EGroupware Enterprise Line (EPL) before 1.1.20140505, EGroupware Community Edition before 1.8.007.20140506, and EGroupware before 14.1 beta allows remote authenticated administrators to execute arbitrary PHP code… Egroupware
- CVE-2014-0136 MEDIUM · 5.0 The (1) get and (2) log methods in the AgentController in Red Hat CloudForms 3.0 Management Engine (CFME) 5.x allow remote attackers to insert arbitrary… Redhat
- CVE-2011-4953 MEDIUM · 6.8 Met de functie set_mgmt_parameters in item.py in cobbler voor 2.2.2 kunnen contextafhankelijke aanvallers willekeurige code uitvoeren via vectoren die verband houden met het gebruik van… Cobbler Project
- CVE-2011-4104 HIGH · 7.5 The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code… Djangoproject
- CVE-2011-4103 HIGH · 7.5 emitters.py in Django Piston before 0.2.3 and 0.2.x before 0.2.2.1 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code… Djangoproject
- CVE-2010-4820 MEDIUM · 4.4 Onvertrouwde zoekpadkwetsbaarheid in Ghostscript 8.62 stelt lokale gebruikers in staat om willekeurige PostScript-code uit te voeren via een Trojaans paard Postscript-bibliotheekbestand in Encoding/ onder de… Ghostscript
- CVE-2014-6635 MEDIUM · 4.3 Cross-site scripting (XSS) -kwetsbaarheid in Exponent CMS 2.3.0 stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de src-parameter in de… Exponentcms
- CVE-2014-5520 HIGH · 7.5 SQL injection vulnerability in XRMS CRM, possibly 1.99.2, allows remote attackers to execute arbitrary SQL commands via the user_id parameter to plugins/webform/new-form.php, which is not… Xrms Crm Project
- CVE-2014-5148 MEDIUM · 4.6 Xen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64-bit userspace," returns to an instruction of the trap… Xen
- CVE-2014-3520 MEDIUM · 6.5 OpenStack Identity (Keystone) before 2013.2.4, 2014.x before 2014.1.2, and Juno before Juno-2 allows remote authenticated trustees to gain access to an unauthorized project for which… Openstack
- CVE-2013-7408 HIGH · 7.5 F5 BIG-IP Analytics 11.x voor 11.4.0 maakt gebruik van een voorspelbare sessiecookie, waardoor het voor externe aanvallers gemakkelijker wordt om een niet-gespecificeerde impact te hebben… F5
- CVE-2013-6796 MEDIUM · 5.0 The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind. Deeproot Linux