CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3404 MEDIUM · 4.3 The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid… Cisco
- CVE-2014-3403 MEDIUM · 5.0 De component Autonomic Networking Infrastructure (ANI) in Cisco IOS XE valideert certificaten niet goed, waardoor externe aanvallers apparaten kunnen vervalsen via vervaardigde berichten, ook bekend… Cisco
- CVE-2014-3201 MEDIUM · 5.0 core/rendering/compositing/RenderLayerCompositor.cpp in Blink, as used in Google Chrome before 38.0.2125.102 on Android, does not properly handle a certain IFRAME overflow condition, which allows remote attackers… Google
- CVE-2014-3147 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the auto-complete feature in Splunk Enterprise before 6.0.4 allows remote authenticated users to inject arbitrary web script or HTML via… Splunk
- CVE-2014-2649 HIGH · 7.5 Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors. Hp Linux
- CVE-2014-2648 HIGH · 10.0 Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors. Hp Opengroup
- CVE-2014-2646 HIGH · 7.2 Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors. Hp
- CVE-2014-2638 HIGH · 7.5 Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2344. Hp
- CVE-2014-2637 HIGH · 7.5 Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2342. Hp
- CVE-2014-2636 HIGH · 7.5 Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2336. Hp
- CVE-2014-2635 HIGH · 7.5 Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2343. Hp
- CVE-2013-4488 MEDIUM · 4.3 libgadu vóór 1.12.0 verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers servers kunnen vervalsen. Libgadu
- CVE-2014-8079 MEDIUM · 4.0 Cross-site scripting (XSS) vulnerability in the MAYO theme 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary… Drupal
- CVE-2014-8078 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Print (aka Printer, e-mail and PDF versions) module 6.x-1.x before 6.x-1.19, 7.x-1.x before 7.x-1.3, and 7.x-2.x before 7.x-2.0 for… Drupal
- CVE-2014-8077 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in het NewsFlash-thema 6.x-1.x vóór 6.x-1.7 en 7.x-1.x vóór 7.x-2.5 voor Drupal stelt op afstand geverifieerde gebruikers met de toestemming "thema's… Drupal
- CVE-2014-8076 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Professional theme 7.x before 7.x-2.04 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary… Drupal
- CVE-2014-8075 LOW · 3.5 Cross-site scripting (XSS) -kwetsbaarheid in de Tribune-module 6.x-1.x en 7.x-3.x voor Drupal stelt op afstand geverifieerde gebruikers met bepaalde machtigingen in staat om willekeurig webscript… Drupal
- CVE-2014-8068 MEDIUM · 5.0 Adobe Digital Editions (DE) 4 does not use encryption for transmission of data to adelogs.adobe.com, which allows remote attackers to obtain sensitive information by sniffing… Adobe
- CVE-2014-7984 HIGH · 7.5 Met Joomla! CMS 2.5.x vóór 2.5.19 en 3.x vóór 3.2.3 kunnen externe aanvallers beoogde beperkingen verifiëren en omzeilen via vectoren met GMail-authenticatie. Joomla
- CVE-2014-7983 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in com_contact in Joomla! Met CMS 3.1.2 tot en met 3.2.x vóór 3.2.3 kunnen aanvallers op afstand willekeurig webscript of HTML… Joomla
- CVE-2014-7982 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Joomla! CMS 2.5.x before 2.5.19 and 3.x before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via… Joomla
- CVE-2014-7981 HIGH · 7.5 SQL-injectie kwetsbaarheid in Joomla! Met CMS 3.1.x en 3.2.x vóór 3.2.3 kunnen aanvallers op afstand willekeurige SQL-opdrachten uitvoeren via niet-gespecificeerde vectoren. Joomla
- CVE-2014-7296 MEDIUM · 6.8 The default configuration in the accessibility engine in SpagoBI 5.0.0 does not set FEATURE_SECURE_PROCESSING, which allows remote authenticated users to execute arbitrary Java code via… Eng
- CVE-2014-7231 LOW · 2.1 The strutils.mask_password function in the OpenStack Oslo utility library, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 does not properly mask passwords when… Openstack Redhat
- CVE-2014-7230 LOW · 2.1 The processutils.execute function in OpenStack oslo-incubator, Cinder, Nova, and Trove before 2013.2.4 and 2014.1 before 2014.1.3 allows local users to obtain passwords from commands that… Openstack Redhat Canonical
- CVE-2014-7229 MEDIUM · 5.0 Unspecified vulnerability in Joomla! before 2.5.4 before 2.5.26, 3.x before 3.2.6, and 3.3.x before 3.3.5 allows attackers to cause a denial of service via unspecified… Joomla
- CVE-2014-7203 MEDIUM · 4.3 libzmq (aka ZeroMQ/C++) 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors. Zeromq
- CVE-2014-7202 MEDIUM · 4.3 stream_engine.cpp in libzmq (aka ZeroMQ/C++)) 4.0.5 before 4.0.5 allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request. Zeromq
- CVE-2014-6632 HIGH · 7.5 Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP… Joomla
- CVE-2014-6631 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in com_media in Joomla! 3.2.x before 3.2.5 and 3.3.x before 3.3.4 allows remote attackers to inject arbitrary web script or HTML… Joomla
- CVE-2014-5376 MEDIUM · 4.0 Adaptive Computing Moab vóór 7.2.9 en 8 vóór 8.0.0, wanneer een vooraf gegenereerde sleutel wordt gebruikt, valideert niet dat de verzoekende gebruiker overeenkomt met de… Adaptivecomputing
- CVE-2014-5375 MEDIUM · 4.0 De server in Adaptive Computing Moab vóór 7.2.9 en 8 vóór 8.0.0 valideert niet correct dat de eigenaar van het bericht overeenkomt met de indienende… Adaptivecomputing
- CVE-2014-5300 MEDIUM · 5.0 Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows remote attackers to bypass the signature check, impersonate arbitrary users, and execute commands via a… Adaptivecomputing
- CVE-2014-3641 MEDIUM · 4.0 The (1) GlusterFS and (2) Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host… Openstack
- CVE-2014-7980 LOW · 3.5 Multiple cross-site scripting (XSS) vulnerabilities in template.php in Zen theme 7.x-3.x before 7.x-3.3 and 7.x-5.x before 7.x-5.5 for Drupal allow remote authenticated users with the… Drupal
- CVE-2014-7979 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the SimpleCorp theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary… Drupal
- CVE-2014-7978 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the BlueMasters theme 7.x-2.x before 7.x-2.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary… Drupal
- CVE-2014-7205 HIGH · 10.0 Eval injection vulnerability in the internals.batch function in lib/batch.js in the bassmaster plugin before 1.5.2 for the hapi server framework for Node.js allows remote attackers… Bassmaster Project
- CVE-2014-7185 MEDIUM · 6.4 Integer overflow in bufferobject.c in Python vóór 2.7.8 stelt contextafhankelijke aanvallers in staat om gevoelige informatie uit het procesgeheugen te verkrijgen via een grote omvang… Python Apple
- CVE-2014-6394 HIGH · 7.5 visionmedia send before 0.8.4 for Node.js gebruikt een gedeeltelijke vergelijking om te verifiëren of een map zich in de hoofdmap van het document bevindt, waardoor… Fedoraproject Apple Joyent
- CVE-2014-5308 HIGH · 9.0 Multiple SQL injection vulnerabilities in TestLink 1.9.11 allow remote authenticated users to execute arbitrary SQL commands via the (1) name parameter in a Search action… Testlink
- CVE-2014-7967 HIGH · 7.5 Multiple unspecified vulnerabilities in Google V8 before 3.28.71.15, as used in Google Chrome before 38.0.2125.101, allow attackers to cause a denial of service or possibly… Google
- CVE-2014-3200 HIGH · 7.5 Multiple unspecified vulnerabilities in Google Chrome before 38.0.2125.101 allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Google Redhat
- CVE-2014-3199 MEDIUM · 5.0 The wrap function in bindings/core/v8/custom/V8EventCustom.cpp in the V8 bindings in Blink, as used in Google Chrome before 38.0.2125.101, has an erroneous fallback outcome for wrapper-selection… Redhat Google
- CVE-2014-3198 MEDIUM · 5.0 De Instance::HandleInputEvent-functie in pdf/instance.cc in de PDFium-component in Google Chrome vóór 38.0.2125.101 interpreteert een bepaalde -1-waarde als een index in plaats van een niet-zichtbare paginafoutcode,… Google Redhat
- CVE-2014-3197 MEDIUM · 5.0 The NavigationScheduler::schedulePageBlock function in core/loader/NavigationScheduler.cpp in Blink, as used in Google Chrome before 38.0.2125.101, does not properly provide substitute data for pages blocked by the… Google Redhat
- CVE-2014-3196 HIGH · 7.5 base/memory/shared_memory_win.cc in Google Chrome before 38.0.2125.101 on Windows does not properly implement read-only restrictions on shared memory, which allows attackers to bypass a sandbox protection… Google
- CVE-2014-3195 MEDIUM · 5.0 Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized memory and does not properly… Google Redhat
- CVE-2014-3194 HIGH · 7.5 Use-after-free vulnerability in the Web Workers implementation in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service or possibly have unspecified… Redhat Google
- CVE-2014-3193 HIGH · 7.5 The SessionService::GetLastSession function in browser/sessions/session_service.cc in Google Chrome before 38.0.2125.101 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other… Redhat Google