CVE-database
122.895 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-3757 HIGH · 7.5 SQL injection vulnerability in sorter.php in the phpManufaktur kitForm extension 0.43 and earlier for the KeepInTouch (KIT) module allows remote attackers to execute arbitrary SQL… Phpmanufaktur
- CVE-2014-3247 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Collabtive 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the desc parameter in an Add… O-dyn
- CVE-2014-0211 HIGH · 7.5 Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font… Canonical X
- CVE-2014-0210 HIGH · 7.5 Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol… X Canonical
- CVE-2014-0209 MEDIUM · 4.6 Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to… X Canonical
- CVE-2013-4730 HIGH · 10.0 Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command. Pcman
- CVE-2013-1810 LOW · 2.1 Multiple cross-site scripting (XSS) vulnerabilities in core/summary_api.php in MantisBT 1.2.12 allow remote authenticated users with manager or administrator permissions to inject arbitrary web script or… Mantisbt
- CVE-2013-0197 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core/filter_api.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML… Mantisbt
- CVE-2014-3443 MEDIUM · 4.3 JetMPAd.ax in JetAudio 8.1.1 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .ogg file. Jetaudio
- CVE-2014-3441 MEDIUM · 4.3 codeclibpng_plugin.dll in VideoLAN VLC Media Player 2.1.3 allows remote attackers to cause a denial of service (crash) via a crafted .png file, as demonstrated by… Videolan
- CVE-2014-3430 MEDIUM · 5.0 Dovecot 1.1 vóór 2.2.13 en duiventil-ee vóór 2.1.7.7 en 2.2.x vóór 2.2.12.12 sluit oude verbindingen niet goed af, waardoor externe aanvallers een denial of service… Dovecot
- CVE-2014-3146 MEDIUM · 6.1 Onvolledige blacklist-kwetsbaarheid in de lxml.html.clean-module in lxml vóór 3.3.5 stelt externe aanvallers in staat om cross-site scripting (XSS) -aanvallen uit te voeren via controletekens in… Lxml
- CVE-2014-1603 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) param parameter to… Get-simple
- CVE-2014-0137 MEDIUM · 6.5 SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to execute… Redhat
- CVE-2014-0078 MEDIUM · 4.0 The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog… Redhat
- CVE-2013-7376 MEDIUM · 6.8 Meerdere cross-site request forgery (CSRF) -kwetsbaarheden in OpenX 2.8.10, mogelijk vóór revisie 82710, stellen externe aanvallers in staat om de authenticatie van beheerders te kapen,… Openx
- CVE-2013-5939 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in the Guestbook module for PHPCMS allow remote attackers to inject arbitrary web script or HTML via the (1) list… Phpcms
- CVE-2013-5655 MEDIUM · 6.4 Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files… Xiaowen Huang
- CVE-2013-4471 MEDIUM · 5.5 De Identity v3 API in OpenStack Dashboard (Horizon) vóór versie 2013.2 vereist niet het huidige wachtwoord bij het wijzigen van wachtwoorden voor gebruikersaccounts. Dit maakt… Openstack
- CVE-2013-4468 MEDIUM · 6.5 VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension… Vicidial
- CVE-2013-4455 LOW · 2.1 Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by… Katello
- CVE-2013-3514 MEDIUM · 4.3 Meerdere kwetsbaarheden voor directorytraversal in OpenX vóór 2.8.10 revisie 82710 stellen externe beheerders in staat om willekeurige bestanden te lezen via een .. (puntpunt) in… Openx
- CVE-2013-2700 MEDIUM · 6.8 Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers to hijack the authentication… Webmaster-source
- CVE-2013-2226 HIGH · 7.5 Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) filename… Glpi-project
- CVE-2013-2087 MEDIUM · 4.3 Meerdere cross-site scripting (XSS) kwetsbaarheden in Galerij 3 vóór 3.0.7 stellen aanvallers op afstand in staat om willekeurig webscript of HTML te injecteren via de… Galleryproject
- CVE-2013-2034 MEDIUM · 6.8 Multiple cross-site request forgery (CSRF) vulnerabilities in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allow remote attackers… Cloudbees
- CVE-2013-1765 MEDIUM · 4.3 Multiple cross-site scripting (XSS) vulnerabilities in jwplayer.swf in the smart-flv plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the… Smart-flv Plugin Project
- CVE-2011-5249 MEDIUM · 4.3 Een XSS-kwetsbaarheid (cross-site scripting) in de gebeurtenispagina van de System iNtrusion Analysis and Reporting Environment (SNARE) voor Linux-agent vóór versie 1.7.0 stelt externe aanvallers in… Intersectalliance
- CVE-2014-1815 HIGH · 9.3 Met Microsoft Internet Explorer 6 tot en met 11 kunnen externe aanvallers willekeurige code uitvoeren of een denial of service (geheugenbeschadiging) veroorzaken via een vervaardigde… Microsoft
- CVE-2014-1813 HIGH · 8.5 Met Microsoft Web Applications 2010 SP1 en SP2 kunnen op afstand geverifieerde gebruikers willekeurige code uitvoeren via vervaardigde pagina-inhoud, ook bekend als "Web Applications Page… Microsoft
- CVE-2014-1809 MEDIUM · 6.8 De MSCOMCTL-bibliotheek in Microsoft Office 2007 SP3, 2010 SP1 en SP2 en 2013 Gold, SP1, RT en RT SP1 maakt het voor externe aanvallers gemakkelijker… Microsoft
- CVE-2014-1808 MEDIUM · 4.3 Microsoft Office 2013 Gold, SP1, RT, and RT SP1 allows remote attackers to obtain sensitive token information via a web site that sends a crafted… Microsoft
- CVE-2014-1807 HIGH · 7.2 The ShellExecute API in Windows Shell in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,… Microsoft
- CVE-2014-1806 HIGH · 10.0 The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which… Microsoft
- CVE-2014-1756 HIGH · 9.3 Onvertrouwde zoekpadkwetsbaarheid in Microsoft Office 2007 SP3, 2010 SP1 en SP2, en 2013 Gold, SP1, RT en RT SP1, wanneer de Vereenvoudigde Chinese Proofing Tool… Microsoft
- CVE-2014-1754 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and… Microsoft
- CVE-2014-1742 HIGH · 7.5 Use-after-free kwetsbaarheid in de FrameSelection:: updateAppearance-functie in core/editing/FrameSelection.cpp in Blink, zoals gebruikt in Google Chrome vóór 34.0.1847.137, stelt externe aanvallers in staat om een denial… Google
- CVE-2014-1741 HIGH · 7.5 Meerdere integer overflows in de vervanggegevensfunctionaliteit in de CharacterData-interface-implementatie in core/dom/CharacterData.cpp in Blink, zoals gebruikt in Google Chrome vóór 34.0.1847.137, stellen externe aanvallers in staat… Google
- CVE-2014-1740 HIGH · 7.5 Meerdere use-after-free kwetsbaarheden in net/websockets/websocket_job.cc in de WebSockets-implementatie in Google Chrome vóór 34.0.1847.137 stellen externe aanvallers in staat om een denial of service te veroorzaken… Google
- CVE-2014-0529 HIGH · 10.0 Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code… Adobe Apple Microsoft
- CVE-2014-0528 HIGH · 10.0 Double free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary… Adobe Apple Microsoft
- CVE-2014-0527 HIGH · 10.0 Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allows attackers to execute arbitrary code… Adobe Apple Microsoft
- CVE-2014-0526 HIGH · 10.0 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a… Adobe Apple Microsoft
- CVE-2014-0525 HIGH · 10.0 The API in Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X does not prevent access to unmapped… Adobe Apple Microsoft
- CVE-2014-0524 HIGH · 10.0 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a… Adobe Apple Microsoft
- CVE-2014-0523 HIGH · 10.0 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X allow attackers to execute arbitrary code or cause a… Adobe Apple Microsoft
- CVE-2014-0522 HIGH · 10.0 Adobe Reader en Acrobat 10.x vóór 10.1.10 en 11.x vóór 11.0.07 op Windows en OS X stellen aanvallers in staat om willekeurige code uit te… Adobe Apple Microsoft
- CVE-2014-0521 MEDIUM · 4.3 Adobe Reader and Acrobat 10.x before 10.1.10 and 11.x before 11.0.07 on Windows and OS X do not properly implement JavaScript APIs, which allows remote… Adobe Apple Microsoft
- CVE-2014-0520 HIGH · 7.5 Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK &… Adobe Apple Microsoft Linux
- CVE-2014-0519 HIGH · 7.5 Adobe Flash Player vóór 13.0.0.214 op Windows en OS X en vóór 11.2.202.359 op Linux, Adobe AIR SDK vóór 13.0.0.111 en Adobe AIR SDK &… Adobe Apple Microsoft Linux