CVE-database
125.649 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3192 HIGH · 7.5 Use-after-free vulnerability in the ProcessingInstruction::setXSLStyleSheet function in core/dom/ProcessingInstruction.cpp in the DOM implementation in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to… Redhat Apple Google
- CVE-2014-3191 HIGH · 7.5 Use-after-free vulnerability in Blink, as used in Google Chrome before 38.0.2125.101, allows remote attackers to cause a denial of service or possibly have unspecified other… Google Redhat
- CVE-2014-3190 HIGH · 7.5 Use-after-free kwetsbaarheid in de gebeurtenis:: currentTarget-functie in core/events/Event.cpp in Blink, zoals gebruikt in Google Chrome vóór 38.0.2125.101, stelt externe aanvallers in staat om een denial… Google Redhat
- CVE-2014-3189 HIGH · 7.5 The chrome_pdf::CopyImage function in pdf/draw_utils.cc in the PDFium component in Google Chrome before 38.0.2125.101 does not properly validate image-data dimensions, which allows remote attackers to… Google Redhat
- CVE-2014-3188 HIGH · 10.0 Google Chrome before 38.0.2125.101 and Chrome OS before 38.0.2125.101 do not properly handle the interaction of IPC and Google V8, which allows remote attackers to… Google Redhat
- CVE-2014-3187 MEDIUM · 6.8 Google Chrome vóór 37.0.2062.60 en 38.x vóór 38.0.2125.59 op iOS beperkt de verwerking van (1) facetime:// en (2) facetime-audio:// URL's, waarmee externe aanvallers video- en… Google Apple
- CVE-2014-7299 HIGH · 7.5 Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive… Arubanetworks
- CVE-2014-7275 MEDIUM · 5.8 De POP3-over-SSL-implementatie in getmail 4.0.0 tot 4.44.0 verifieert geen X.509-certificaten van SSL-servers, waardoor man-in-the-middle-aanvallers POP3-servers kunnen vervalsen en gevoelige informatie kunnen verkrijgen via een vervaardigd… Getmail
- CVE-2014-7274 MEDIUM · 5.8 The IMAP-over-SSL implementation in getmail 4.44.0 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of… Getmail
- CVE-2014-7273 MEDIUM · 6.8 The IMAP-over-SSL implementation in getmail 4.0.0 through 4.43.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof IMAP servers and… Getmail
- CVE-2014-7295 LOW · 3.5 De (1) Special:Preferences en (2) Special: UserLogin-pagina's in MediaWiki vóór 1.19.20, 1.22.x vóór 1.22.12 en 1.23.x vóór 1.23.5 stellen op afstand geverifieerde gebruikers in staat… Mediawiki
- CVE-2014-7235 HIGH · 10.0 htdocs_ari/includes/login.php in de ARI Framework-module/Asterisk Recording Interface (ARI) in FreePBX vóór 2.9.0.9, 2.10.x en 2.11 vóór 2.11.1.5 stelt externe aanvallers in staat om willekeurige code… Freepbx Sangoma
- CVE-2014-7204 MEDIUM · 5.0 jscript.c in Exuberant Ctags 5.8 allows remote attackers to cause a denial of service (infinite loop and CPU and disk consumption) via a crafted JavaScript… Canonical Debian Mageia
- CVE-2014-7189 MEDIUM · 4.3 crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors. Golang
- CVE-2014-6603 MEDIUM · 5.0 The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or… Openinfosecfoundation
- CVE-2014-6434 HIGH · 10.0 gpExec in GoPro HERO 3+ stelt externe aanvallers in staat om willekeurige opdrachten uit te voeren via een de (1) a1 of (2) a2 parameter… Gopro
- CVE-2014-6433 HIGH · 10.0 gpExec in GoPro HERO 3+ allows remote attackers to execute arbitrary files via a the (1) a1 or (2) a2 parameter in a start action. Gopro
- CVE-2014-5503 HIGH · 10.0 SQL injection vulnerability in the Guest Login Portal in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary SQL… Cyberoam
- CVE-2014-5502 HIGH · 9.0 The Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote authenticated users to inject arbitrary commands via a (1) checkcert_key, (2) webclient_portal_settings, (3) sslvpn_liveuser_delete,… Cyberoam
- CVE-2014-5501 HIGH · 9.3 Stapelgebaseerde bufferoverloop in de diagnoseservice in de Sophos Cyberoam-apparaten met CyberoamOS vóór 10.6.1 GA stelt externe aanvallers in staat om willekeurige code uit te voeren… Cyberoam
- CVE-2014-3632 HIGH · 7.6 De standaardconfiguratie in een sudoers-bestand in het Red Hat openstack-neutron-pakket vóór 2014.1.2-4, zoals gebruikt in Red Hat Enterprise Linux Open Stack Platform 5.0 voor Red… Openstack
- CVE-2014-3565 MEDIUM · 5.0 snmplib/mib.c in net-snmp 5.7.0 en eerder, wanneer de optie -OQ wordt gebruikt, kunnen externe aanvallers een denial of service (snmptrapd-crash) veroorzaken via een vervaardigd SNMP-trapbericht,… Apple Canonical Net-snmp
- CVE-2014-4871 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in wlsecurity.html on NetCommWireless NB604N routers with firmware before GAN5.CZ56T-B-NC.AU-R4B030.EN allows remote attackers to inject arbitrary web script or HTML via… Netcommwireless
- CVE-2014-4870 HIGH · 7.2 /opt/vyatta/bin/sudo-users/vyatta-clear-dhcp-lease.pl on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 does not properly validate parameters, which allows local users to gain privileges by leveraging… Brocade
- CVE-2014-4869 MEDIUM · 5.0 The Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows attackers to obtain sensitive encrypted-password information by leveraging membership in the operator group. Brocade
- CVE-2014-4868 HIGH · 9.0 The management console on the Brocade Vyatta 5400 vRouter 6.4R(x), 6.6R(x), and 6.7R1 allows remote authenticated users to execute arbitrary Linux commands via shell metacharacters… Brocade
- CVE-2014-4802 MEDIUM · 4.0 The Saved Search Admin component in the Process Admin Console in IBM Business Process Manager (BPM) 8.0 through 8.5.5 does not properly restrict task and… Ibm
- CVE-2014-3399 MEDIUM · 5.5 The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.2(.2.4) and earlier does not properly manage session information during creation of a SharePoint… Cisco
- CVE-2014-0940 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Service Automation Manager 7.2.2.2 before 7.2.2.2-TIV-TSAM-LA0041 allow remote attackers to inject arbitrary web script or HTML via… Ibm
- CVE-2014-6607 HIGH · 7.5 M/Monit 3.3.2 and earlier does not verify the original password before changing passwords, which allows remote attackers to change the password of other users and… Mmonit
- CVE-2014-6409 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in M/Monit 3.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that change user passwords… Mmonit
- CVE-2014-6389 HIGH · 7.5 backup.php in PHPCompta/NOALYSS before 6.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in the d parameter. Phpcompta
- CVE-2014-4510 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in job.cc in apt-cacher-ng 0.7.26 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Debian
- CVE-2014-4043 HIGH · 7.5 The posix_spawn_file_actions_addopen function in glibc before 2.20 does not copy its path argument in accordance with the POSIX specification, which allows context-dependent attackers to trigger… Gnu Opensuse
- CVE-2014-2044 HIGH · 7.5 Incomplete blacklist vulnerability in ajax/upload.php in ownCloud before 5.0, when running on Windows, allows remote authenticated users to bypass intended access restrictions, upload files with… Owncloud
- CVE-2014-1875 LOW · 3.6 The Capture::Tiny module before 0.24 for Perl allows local users to write to arbitrary files via a symlink attack on a temporary file. Cspan
- CVE-2014-1868 MEDIUM · 5.0 Restlet Framework 2.1.x before 2.1.7 and 2.x.x before 2.2 RC1, when using XMLRepresentation or XML serializers, allows attackers to cause a denial of service via… Restlet
- CVE-2014-1224 MEDIUM · 4.3 Incomplete blacklist vulnerability in the user registration feature in rexx Recruitment R6.1 and R7 without "fixes from 2014-01-15" allows remote attackers to conduct cross-site scripting… Rexx-systems
- CVE-2014-0397 HIGH · 10.0 Multiple unspecified vulnerabilities in libXtsol in Oracle Solaris 10 and 11.1 have unspecified impact and attack vectors related to "Buffer errors." Oracle
- CVE-2013-7329 MEDIUM · 5.0 The CGI::Application module before 4.50_50 and 4.50_51 for Perl, when run modes are not specified, allows remote attackers to obtain sensitive information (web queries and… Perl
- CVE-2013-1436 HIGH · 7.5 The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the… Xmonad
- CVE-2014-7870 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the Custom Search module 6.x-1.x before 6.x-1.12 and 7.x-1.x before 7.x-1.14 for Drupal allows remote authenticated users with the "administer… Drupal
- CVE-2014-7869 LOW · 3.5 Cross-site scripting (XSS) vulnerability in the configuration UI in the Context Form Alteration module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the… Drupal
- CVE-2014-6054 MEDIUM · 4.3 The rfbProcessClientNormalMessage function in libvncserver/rfbserver.c in LibVNCServer 0.9.9 and earlier allows remote attackers to cause a denial of service (divide-by-zero error and server crash) via… Libvncserver Debian Canonical
- CVE-2014-5389 HIGH · 7.5 SQL-injectiekwetsbaarheid in content-audit-schedule.php in de Content Audit-plug-in vóór 1.6.1 voor WordPress stelt externe aanvallers in staat om willekeurige SQL-opdrachten uit te voeren via de optie… Content Audit Project
- CVE-2014-3657 MEDIUM · 5.0 The virDomainListPopulate function in conf/domain_conf.c in libvirt before 1.2.9 does not clean up the lock on the list of domains, which allows remote attackers to… Libvirt
- CVE-2014-3642 MEDIUM · 6.5 vmdb/app/controllers/application_controller/performance.rb in Red Hat CloudForms 3.1 Management Engine (CFME) before 5.3 allows remote authenticated users to gain privileges via unspecified vectors, related to an "insecure… Redhat
- CVE-2014-3633 MEDIUM · 5.8 De qemuDomainGetBlockIoTune-functie in qemu/qemu_driver.c in libvirt vóór 1.2.9, wanneer een schijf hot-plugged is of uit het live-image is verwijderd, stelt externe aanvallers in staat om… Canonical Libvirt
- CVE-2014-3608 LOW · 2.7 The VMWare driver in OpenStack Compute (Nova) before 2014.1.3 allows remote authenticated users to bypass the quota limit and cause a denial of service (resource… Openstack
- CVE-2014-3521 MEDIUM · 5.5 Met het component in (1) /luci/homebase en (2) /luci/clustermenu in Red Hat Conga 0.12.2 kunnen op afstand geverifieerde gebruikers beoogde toegangsbeperkingen omzeilen via een vervaardigde… Redhat