CVE-database
125.650 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-4276 HIGH · 7.5 Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Common Internet File System (CIFS). Sun
- CVE-2014-4275 MEDIUM · 4.9 Niet-gespecificeerde kwetsbaarheid in Oracle Sun Solaris 11 stelt lokale gebruikers in staat om de beschikbaarheid te beïnvloeden via vectoren met betrekking tot de SMB-serverkernmodule. Sun
- CVE-2014-4274 MEDIUM · 4.1 Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related… Oracle Mariadb
- CVE-2014-2478 LOW · 2.6 Niet-gespecificeerde kwetsbaarheid in de Core RDBMS-component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4 en 12.1.0.1 stelt externe aanvallers in staat om de vertrouwelijkheid te beïnvloeden… Oracle
- CVE-2014-2476 MEDIUM · 5.0 Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to… Oracle
- CVE-2014-2475 MEDIUM · 5.0 Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors… Oracle
- CVE-2014-2474 MEDIUM · 5.0 Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to… Oracle
- CVE-2014-2473 MEDIUM · 5.0 Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to… Oracle
- CVE-2014-2472 MEDIUM · 5.0 Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to… Oracle
- CVE-2014-8750 MEDIUM · 6.5 Race condition in the VMware driver in OpenStack Compute (Nova) before 2014.1.4 and 2014.2 before 2014.2rc1 allows remote authenticated users to access unintended consoles by… Openstack
- CVE-2014-8295 HIGH · 7.5 SQL injection vulnerability in joblogs.php in Bacula-Web 5.2.10 allows remote attackers to execute arbitrary SQL commands via the jobid parameter. Bacula
- CVE-2014-8294 HIGH · 7.5 Multiple SQL injection vulnerabilities in Voice Of Web AllMyGuests 0.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) allmyphp_cookie cookie to admin.php… Php Resource
- CVE-2014-8293 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the AMG_signin_topic parameter to… Php Resource
- CVE-2014-7206 LOW · 3.6 Met het changelog-commando in Apt vóór 1.0.9.2 kunnen lokale gebruikers naar willekeurige bestanden schrijven via een symlink-aanval op het changelog-bestand. Debian
- CVE-2014-6312 MEDIUM · 4.3 Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of… Login Widget With Shortcode Project
- CVE-2014-3681 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Redhat Jenkins
- CVE-2014-3664 MEDIUM · 4.0 Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified… Jenkins Redhat
- CVE-2014-3593 MEDIUM · 6.0 Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration. Scientificlinux
- CVE-2014-2927 HIGH · 9.3 De rsync-daemon in F5 BIG-IP 11.6 vóór 11.6.0, 11.5.1 vóór HF3, 11.5.0 vóór HF4, 11.4.1 vóór HF4, 11.4.0 vóór HF7, 11.3.0 vóór HF9 en 11.2.1… F5
- CVE-2014-2576 MEDIUM · 6.8 plugins/rssyl/feed.c in Claws Mail before 3.10.0 disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to… Claws-mail Opensuse
- CVE-2014-2022 HIGH · 7.1 SQL-injectiekwetsbaarheid in includes/api/4/breadcrumbs_create.php in vBulletin 4.2.2, 4.2.1, 4.2.0 PL2 en eerder stelt op afstand geverifieerde gebruikers in staat om willekeurige SQL-opdrachten uit te voeren via… Vbulletin
- CVE-2014-1830 MEDIUM · 5.0 Verzoeken (ook bekend als python-verzoeken) vóór 2.3.0 stellen externe servers in staat om gevoelige informatie te verkrijgen door de Proxy-Authorization-header in een omgeleid verzoek te… Opensuse Python
- CVE-2014-1829 MEDIUM · 5.0 Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request. Debian Python Canonical Mageia
- CVE-2014-6952 MEDIUM · 5.4 The Manga Facts (aka app.mangafacts.ar) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Manga Facts Project
- CVE-2014-6951 MEDIUM · 5.4 The OneFile Ignite (aka uk.co.onefile.ignite) application 1.19 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Onefile
- CVE-2014-6950 MEDIUM · 5.4 The Mt. Airy News (aka com.soln.SBE4A803AD6430A6E9DBA5688AA644148) application 1.0069.b0069 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers… Civitasmedia
- CVE-2014-6949 MEDIUM · 5.4 The Akne Ernahrung (aka com.rareartifact.akneernahrung72010074) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Fotoschilenas
- CVE-2014-6948 MEDIUM · 5.4 The TH3 professional Al Mohtarif (aka com.th3professional.almohtarif) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Th3professional
- CVE-2014-6947 MEDIUM · 5.4 The Archie Comics (aka com.iversecomics.archie.android) application 1.07 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and… Iversemedia
- CVE-2014-6946 MEDIUM · 5.4 The Re:kyu (aka com.appzone619) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Misterpark
- CVE-2014-6945 MEDIUM · 5.4 The Neeku Naaku Dash Dash (aka com.dakshaa.nndd) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof… Dakshaa
- CVE-2014-6944 MEDIUM · 5.4 The mitfahrgelegenheit.at (aka com.carpooling.android.at) application 2.3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Mitfahrgelegenheit
- CVE-2014-6943 MEDIUM · 5.4 The Konigsleiten (aka com.knigsleiten) application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain… Koenigsleiten77
- CVE-2014-6942 MEDIUM · 5.4 De Alisha Marie (onofficieel) (ook bekend als com.automon.ay.alisha.marie) -applicatie 1.4.0.6 voor Android verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen en gevoelige informatie… Automon
- CVE-2014-4141 HIGH · 9.3 Met Microsoft Internet Explorer 8 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-4140 MEDIUM · 4.3 Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass… Microsoft
- CVE-2014-4138 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-4137 HIGH · 9.3 Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4134 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 8 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-4133 HIGH · 9.3 Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4132 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-4130 HIGH · 9.3 Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Microsoft
- CVE-2014-4129 HIGH · 9.3 Met Microsoft Internet Explorer 8 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook bekend als… Microsoft
- CVE-2014-4128 HIGH · 9.3 Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Microsoft
- CVE-2014-4127 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 10 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-4126 HIGH · 9.3 Met Microsoft Internet Explorer 10 en 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde website, ook… Microsoft
- CVE-2014-4124 MEDIUM · 6.8 Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability," a… Microsoft
- CVE-2014-4122 MEDIUM · 4.3 Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 omits the ASLR protection mechanism, which allows remote attackers to obtain potentially sensitive information about memory addresses… Microsoft
- CVE-2014-4121 HIGH · 10.0 Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1 en 4.5.2 ontleedt geïnternationaliseerde bron-ID's niet correct, waardoor externe aanvallers willekeurige code kunnen uitvoeren of… Microsoft
- CVE-2014-4117 HIGH · 9.3 Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3,… Microsoft