CVE-database
126.123 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2014-5317 MEDIUM · 4.3 Cross-site scripting (XSS) kwetsbaarheid in php365.com 365 Links 3.11 en eerder, 365 Links2 3.11 en eerder, 365 Links+ 2.10 en eerder, en 365 Links2+ 2.10… Php365
- CVE-2014-4826 MEDIUM · 4.3 IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 does not properly handle SSH connections, which allows remote attackers to obtain sensitive cleartext information by… Ibm
- CVE-2014-4824 MEDIUM · 6.5 SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Ibm
- CVE-2014-4820 MEDIUM · 4.3 Cross-site scripting (XSS) vulnerability in IBM Integration Bus Manufacturing Pack 1.x before 1.0.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified… Ibm
- CVE-2014-4819 MEDIUM · 4.0 The web user interface in IBM WebSphere Message Broker 8.0 before 8.0.0.6 and IBM Integration Bus 9.0 before 9.0.0.3 allows remote authenticated users to obtain… Ibm
- CVE-2014-4423 MEDIUM · 4.3 The Accounts subsystem in Apple iOS before 8 allows attackers to bypass a sandbox protection mechanism and obtain an active iCloud account's Apple ID and… Apple
- CVE-2014-4422 HIGH · 8.1 The kernel in Apple iOS before 8 and Apple TV before 7 uses a predictable random number generator during the early portion of the boot… Apple
- CVE-2014-4421 LOW · 1.9 The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to… Apple
- CVE-2014-4420 LOW · 1.9 The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to… Apple
- CVE-2014-4419 LOW · 1.9 The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to… Apple
- CVE-2014-4418 HIGH · 7.8 IOKit in Apple iOS before 8 and Apple TV before 7 does not properly validate IODataQueue object metadata, which allows attackers to execute arbitrary code… Apple
- CVE-2014-4415 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 8 en Apple TV vóór 7, stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-4414 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 8 en Apple TV vóór 7, stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-4413 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 8 en Apple TV vóór 7, stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-4412 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 8 en Apple TV vóór 7, stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-4411 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 8 en Apple TV vóór 7, stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-4410 MEDIUM · 6.8 WebKit, zoals gebruikt in Apple iOS vóór 8 en Apple TV vóór 7, stelt externe aanvallers in staat om willekeurige code uit te voeren of… Apple
- CVE-2014-4409 MEDIUM · 4.3 WebKit in Apple iOS before 8 makes it easier for remote attackers to track users during private browsing via a crafted web site that reads… Apple
- CVE-2014-4408 MEDIUM · 6.9 The rt_setgate function in the kernel in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a… Apple
- CVE-2014-4407 LOW · 3.3 IOKit in Apple iOS before 8 and Apple TV before 7 does not properly initialize kernel memory, which allows attackers to obtain sensitive memory-content information… Apple
- CVE-2014-4405 HIGH · 9.3 IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context or cause a denial… Apple
- CVE-2014-4389 HIGH · 9.3 Integer overflow in IOKit in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via… Apple
- CVE-2014-4388 HIGH · 7.8 IOKit in Apple iOS vóór 8 en Apple TV vóór 7 valideert IODataQueue-objectmetagegevens niet correct, waardoor aanvallers willekeurige code kunnen uitvoeren in een geprivilegieerde context… Apple
- CVE-2014-4386 LOW · 1.9 Een raceconditie in de app-installatiefunctie van Apple iOS vóór versie 8 stelt lokale gebruikers in staat om privileges te verkrijgen en niet-geverifieerde apps te installeren… Apple
- CVE-2014-4384 LOW · 1.9 Directory traversal vulnerability in the App Installation feature in Apple iOS before 8 allows local users to install unverified apps by triggering code-signature validation of… Apple
- CVE-2014-4383 MEDIUM · 4.3 The Assets subsystem in Apple iOS before 8 and Apple TV before 7 allows man-in-the-middle attackers to spoof a device's update status via a crafted… Apple
- CVE-2014-4381 HIGH · 9.3 Libnotify in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to execute arbitrary code… Apple
- CVE-2014-4380 HIGH · 9.3 The IOHIDFamily kernel extension in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking on write operations, which allows attackers to… Apple
- CVE-2014-4379 HIGH · 7.1 An unspecified IOHIDFamily function in Apple iOS before 8 and Apple TV before 7 lacks proper bounds checking to prevent reading of kernel pointers, which… Apple
- CVE-2014-4378 MEDIUM · 5.8 CoreGraphics in Apple iOS before 8 and Apple TV before 7 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds… Apple
- CVE-2014-4377 MEDIUM · 6.8 Integer-overloop in CoreGraphics in Apple iOS vóór 8 en Apple TV vóór 7 stelt aanvallers op afstand in staat om willekeurige code uit te voeren… Apple
- CVE-2014-4375 HIGH · 7.8 Double free vulnerability in Apple iOS before 8 and Apple TV before 7 allows local users to gain privileges or cause a denial of service… Apple
- CVE-2014-4374 MEDIUM · 5.0 NSXMLParser in Foundation in Apple iOS before 8 allows attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with… Apple
- CVE-2014-4373 MEDIUM · 5.5 Met het IntelAccelerator-stuurprogramma in het subsysteem IOAcceleratorFamily in Apple iOS voor 8 en Apple TV voor 7 kunnen aanvallers een denial of service (NULL pointer… Apple
- CVE-2014-4372 LOW · 3.6 syslogd in the syslog subsystem in Apple iOS before 8 and Apple TV before 7 allows local users to change the permissions of arbitrary files… Apple
- CVE-2014-4371 LOW · 1.9 The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to… Apple
- CVE-2014-4369 HIGH · 7.8 The IOAcceleratorFamily API implementation in Apple iOS before 8 and Apple TV before 7 allows attackers to cause a denial of service (NULL pointer dereference… Apple
- CVE-2014-4368 MEDIUM · 6.9 Met het toegankelijkheidssubsysteem in Apple iOS voor 8 kunnen aanvallers de schermvergrendeling verstoren via vectoren die verband houden met AssistiveTouch-gebeurtenissen. Apple
- CVE-2014-4367 LOW · 2.1 Apple iOS before 8 enables Voice Dial during all upgrade actions, which makes it easier for physically proximate attackers to launch unintended calls by speaking… Apple
- CVE-2014-4366 MEDIUM · 5.0 Mail in Apple iOS before 8 does not prevent sending a LOGIN command to a LOGINDISABLED IMAP server, which allows remote attackers to obtain sensitive… Apple
- CVE-2014-4364 MEDIUM · 5.6 Het 802.1X-subsysteem in Apple iOS vóór 8 en Apple TV vóór 7 vereist geen sterke authenticatiemethoden, waardoor externe aanvallers inloggegevens kunnen berekenen door LEAP-authenticatie aan… Apple
- CVE-2014-4363 MEDIUM · 5.0 Safari in Apple iOS before 8 does not properly restrict the autofilling of passwords in forms, which allows remote attackers to obtain sensitive information via… Apple
- CVE-2014-4362 MEDIUM · 5.0 The Sandbox Profiles implementation in Apple iOS before 8 does not properly restrict the third-party app sandbox profile, which allows attackers to obtain sensitive Apple… Apple
- CVE-2014-4361 MEDIUM · 5.0 Het Home & Lock Screen-subsysteem in Apple iOS voor 8 beperkt de privé-API voor app-aandacht niet goed, waardoor aanvallers de meest vooraanstaande app kunnen bepalen… Apple
- CVE-2014-4357 LOW · 2.1 Accounts Framework in Apple iOS before 8 and Apple TV before 7 allows attackers to obtain sensitive information by reading log data that was not… Apple
- CVE-2014-4356 LOW · 2.1 Apple iOS before 8 does not follow the intended configuration setting for text-message preview on the lock screen, which allows physically proximate attackers to obtain… Apple
- CVE-2014-4354 MEDIUM · 5.8 Apple iOS before 8 enables Bluetooth during all upgrade actions, which makes it easier for remote attackers to bypass intended access restrictions via a Bluetooth… Apple
- CVE-2014-4353 MEDIUM · 4.3 Raceconditie in iMessage in Apple iOS vóór 8 stelt aanvallers in staat om gevoelige informatie te verkrijgen door gebruik te maken van de aanwezigheid van… Apple
- CVE-2014-4352 LOW · 2.1 Address Book in Apple iOS before 8 relies on the hardware UID for its encryption key, which makes it easier for physically proximate attackers to… Apple
- CVE-2014-2886 MEDIUM · 6.8 GKSu 2.0.2, when sudo-mode is not enabled, uses " (double quote) characters in a gksu-run-helper argument, which allows attackers to execute arbitrary commands in certain… Nongnu